Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE76A532341211F183361713CF1D38B0.roa
File: BE76A532341211F183361713CF1D38B0.roa (raw, json)
Hash identifier: tynYNtHfQEe/DdcHNDtjLACtMbYJ2kglRdJN1o7vFmk=
Subject key identifier: 4D:3E:9D:3E:04:59:A2:4F:D4:34:F3:D3:7B:21:3C:36:BD:A5:0F:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE76A532341211F183361713CF1D38B0.roa
Signing time: Thu 09 Apr 2026 12:50:54 +0000
ROA not before: Thu 09 Apr 2026 12:50:49 +0000
ROA not after: Sun 19 Apr 2026 12:50:49 +0000
asID: 9304
IP address blocks: 154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 12:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115698 (0x1c3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:50:49 2026 GMT
Not After : Apr 19 12:50:49 2026 GMT
Subject: CN=69d7a0ae-9a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:ad:98:3c:e7:fe:42:7c:41:41:14:ae:44:
38:34:55:8e:25:f4:d2:cc:f0:d8:48:e8:f2:97:1b:
50:01:12:e1:06:e0:02:03:05:47:18:b7:78:ad:e1:
72:b2:1c:5c:4d:33:85:e1:a9:9c:46:49:c0:35:0f:
d1:02:a0:80:11:0c:d3:bd:60:85:24:fa:f5:0f:6a:
01:2a:32:ee:83:c5:e8:ae:28:54:0f:6f:2c:70:86:
fb:eb:3f:c0:09:45:52:df:1d:79:c1:f7:f7:8b:74:
da:4c:75:56:f5:10:02:67:42:75:f7:c7:b0:3f:09:
0f:84:61:17:3f:7c:44:b7:5e:2e:8d:50:4e:7b:b5:
7c:d9:4c:96:f4:a9:bb:03:16:21:47:e4:d5:7d:ba:
b8:10:ba:2a:e1:ff:c4:0b:fc:2e:c4:5b:73:d0:49:
46:86:c1:98:18:c1:3a:21:19:2e:fc:f1:c9:54:0e:
a0:b5:e4:7b:95:69:e1:30:60:64:0e:f3:ae:65:d7:
4f:75:6a:20:f2:44:f7:00:81:cd:0a:6e:cc:94:1d:
87:c4:ea:60:21:2d:71:3e:04:da:c6:ed:2a:b3:d3:
86:a5:bd:98:35:93:55:10:c7:29:22:79:27:eb:c3:
42:bc:fe:84:91:bc:b5:f6:70:7c:b2:e5:23:d0:d9:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3E:9D:3E:04:59:A2:4F:D4:34:F3:D3:7B:21:3C:36:BD:A5:0F:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE76A532341211F183361713CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.161.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8e:48:84:f9:78:dc:01:e1:2e:1a:84:37:91:5a:95:d9:95:
50:fd:49:bb:4b:8a:6b:bd:2e:d9:16:cd:49:dd:73:05:10:bf:
aa:4f:bb:72:57:3c:79:a7:e1:c8:54:29:1c:ba:07:4f:39:39:
23:e6:f9:8c:8c:84:13:d8:d4:40:ec:da:f6:24:c1:88:eb:8e:
2c:92:08:5e:d8:71:dc:de:ee:d2:d5:4d:1e:74:dc:51:67:5f:
0c:df:b6:07:0d:fa:b9:cf:62:56:ef:f9:d2:52:1f:f6:73:61:
6e:ff:51:b1:2b:43:9d:2d:78:d0:a8:37:b6:97:b6:e5:0e:3e:
c4:17:8d:0f:fc:4c:57:4a:72:22:99:58:3f:25:6c:ae:8c:79:
5f:08:8c:6d:17:7f:72:98:d4:61:21:db:23:da:53:de:41:d0:
45:90:94:03:c5:b9:6c:72:8d:63:bf:4d:c2:04:f4:e9:7f:4e:
98:d0:5a:a3:c1:e3:65:4e:d6:6e:49:12:84:f5:cc:bf:bf:64:
47:61:a4:87:7c:96:04:f3:3b:90:90:88:f8:0e:70:7f:c7:f5:
de:89:fa:fe:91:52:65:73:9a:f3:47:c8:cf:dc:3b:89:cd:50:
ad:e9:9c:11:b5:76:13:dd:68:b4:ec:de:f0:ef:9f:0d:32:04:
8d:13:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:06 2026 by rpki-client