Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6535A0FDA711F081ECD9ABDAE4EC9C.roa
File: BE6535A0FDA711F081ECD9ABDAE4EC9C.roa (raw, json)
Hash identifier: YEazt1leaLgu2RwUo9EmFr99bqjfoGxQExOrm/sgI4E=
Subject key identifier: 3B:6B:0D:23:63:7D:A8:5A:95:64:CB:AE:1D:23:5D:B1:17:02:EE:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B759
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6535A0FDA711F081ECD9ABDAE4EC9C.roa
Signing time: Fri 30 Jan 2026 06:48:55 +0000
ROA not before: Fri 30 Jan 2026 06:48:49 +0000
ROA not after: Sat 06 Feb 2027 06:48:49 +0000
asID: 132839
IP address blocks: 154.92.32.0/19 maxlen: 24
154.92.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112473 (0x1b759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 06:48:49 2026 GMT
Not After : Feb 6 06:48:49 2027 GMT
Subject: CN=697c5457-1c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:ea:7e:07:75:12:c2:b4:7a:bd:7f:db:97:
92:41:4d:63:c7:72:03:35:8f:a2:10:74:89:83:f4:
2a:15:c8:38:58:33:39:92:40:85:fb:62:30:d5:2c:
5d:dd:d8:d1:a1:7f:a8:d6:0a:3b:d8:ec:12:5b:31:
87:15:f8:b1:0b:d9:42:b5:5b:67:4c:88:eb:43:43:
e2:c6:a6:fd:0d:56:b6:39:12:59:9a:e4:2d:96:b3:
74:97:93:65:a1:09:bf:b1:7c:9c:04:6e:6e:f3:4f:
a4:99:07:29:d0:0f:f1:a5:aa:89:5c:8c:50:3d:5c:
89:2a:b6:e8:ca:5a:6a:92:13:0c:3d:36:11:85:22:
2b:75:5e:1b:e7:4f:63:27:31:40:7c:2b:31:36:cf:
d1:35:1b:40:2a:28:41:f0:dc:c6:ed:55:20:8b:3d:
ee:72:8d:11:06:18:66:14:5a:f1:32:5f:e3:b3:a6:
65:6d:b4:e2:f9:c0:b0:50:20:9c:79:1c:bd:9a:81:
50:db:da:37:e4:59:cf:8a:73:8f:bb:57:c5:f1:98:
79:4d:aa:8c:47:94:e4:f4:27:a9:d8:ae:ef:48:ee:
40:66:9e:d5:5f:09:f0:ea:25:5d:2a:fd:d1:00:ed:
06:b7:a3:8b:b7:b9:89:30:bd:4e:ae:53:a2:30:33:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6B:0D:23:63:7D:A8:5A:95:64:CB:AE:1D:23:5D:B1:17:02:EE:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6535A0FDA711F081ECD9ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.32.0-154.92.95.255
Signature Algorithm: sha256WithRSAEncryption
4b:3c:93:cd:d0:1e:e5:75:f9:78:d8:42:49:58:6a:a2:82:73:
91:e9:38:23:f7:60:02:ab:0b:53:78:ae:1b:73:d3:42:af:a1:
b0:66:b5:d2:fc:16:d8:0d:13:82:58:b2:e3:c6:c5:f1:33:81:
05:70:ca:7f:8c:82:82:f6:79:72:4a:69:16:04:85:83:fe:79:
32:90:ab:7f:2e:81:03:2a:ed:6e:ed:4e:4b:83:e2:54:64:3f:
fc:16:c1:7f:aa:ab:3c:97:56:a3:da:40:93:8e:ed:e5:d8:fb:
8e:e0:59:67:f5:e0:3b:a9:8d:c7:e3:f5:cd:8e:3d:74:26:e8:
53:76:a2:8e:45:1a:44:ab:54:40:24:df:c1:62:98:0a:91:ba:
17:09:0b:25:0a:48:5d:f2:22:32:5a:e4:bf:07:3e:94:f1:4d:
74:7e:ef:76:eb:88:56:8a:86:db:ea:7c:a3:cb:ca:7f:94:61:
a0:be:61:7e:9c:71:78:81:6e:4a:23:1a:8b:09:46:1e:b3:43:
3d:af:09:a0:98:6d:2c:dd:a8:05:76:31:f8:1c:b9:be:4c:04:
52:12:ff:2a:20:4f:15:91:08:56:92:4c:48:c8:9e:31:e9:7c:
3f:d8:14:c2:9f:84:dd:3c:28:93:77:d0:f2:bf:00:79:ec:41:
04:c5:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:11 2026 by rpki-client