Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEB13B902EAC11F1A046F5AADAE4EC9C.roa
File: BEB13B902EAC11F1A046F5AADAE4EC9C.roa (raw, json)
Hash identifier: Ji9S/vb4rc03PVYdCWZL7a704Qr3oQcF7yKHpR/FS00=
Subject key identifier: 98:87:37:65:E2:A0:93:16:42:4F:47:BA:97:BB:D8:27:23:0E:F3:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C267
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEB13B902EAC11F1A046F5AADAE4EC9C.roa
Signing time: Thu 02 Apr 2026 15:58:10 +0000
ROA not before: Thu 02 Apr 2026 15:58:04 +0000
ROA not after: Sun 10 May 2026 15:58:04 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115303 (0x1c267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 15:58:04 2026 GMT
Not After : May 10 15:58:04 2026 GMT
Subject: CN=69ce9212-7c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:cf:3a:1f:c2:bb:b4:ca:a2:3f:a8:51:83:
c1:e8:b7:ad:a1:53:00:cb:ae:81:93:97:2a:d0:09:
f8:c3:19:79:00:b1:57:a9:40:74:92:98:26:57:d4:
90:31:37:7a:6f:aa:7f:20:ff:9d:9f:b7:45:8f:a9:
7d:9e:4e:77:ff:40:b1:d7:0f:ee:fb:1d:21:27:65:
fd:e6:9e:5f:0f:d1:1f:92:da:73:3d:39:70:42:7e:
7d:a2:29:cb:80:c3:2a:b6:d5:48:21:29:c5:7f:ef:
7e:18:62:96:ab:74:a9:c9:92:c8:a1:60:d1:f4:6d:
e2:92:38:f5:12:a1:f1:86:5c:dc:d0:f0:63:a4:c1:
32:85:dd:06:31:8b:c2:e2:9b:19:9f:35:21:0e:02:
f9:4e:5d:58:c2:2d:97:57:06:65:2d:49:b6:68:54:
03:77:03:38:3f:f7:ba:68:b8:72:fc:08:46:1a:d4:
00:5f:e0:f9:cf:08:6b:4b:75:be:d5:90:b1:6e:27:
f0:fc:33:c3:85:9d:93:21:0b:27:1c:11:29:84:10:
01:75:8e:c0:ca:e6:4d:07:a4:3a:70:1a:44:a5:45:
90:45:33:14:2c:bb:85:10:76:12:29:0b:66:f2:49:
d4:b4:b6:8e:f5:9b:31:0f:0c:b5:c2:b7:16:5f:0a:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:37:65:E2:A0:93:16:42:4F:47:BA:97:BB:D8:27:23:0E:F3:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEB13B902EAC11F1A046F5AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0-154.223.64.255
154.223.66.0-154.223.77.255
Signature Algorithm: sha256WithRSAEncryption
a3:0e:2e:b3:38:79:d1:d2:d2:ad:ae:24:80:44:bf:1c:40:a7:
c2:55:50:8a:3f:ad:0a:29:e4:d0:75:35:73:5c:89:48:84:59:
bf:f1:35:46:e7:d9:ea:4d:33:af:36:fa:19:98:50:92:c3:86:
6b:61:6a:c5:13:0f:4c:2d:10:cf:ae:c8:c1:5b:f3:af:d1:45:
c0:33:3a:5b:26:03:41:26:97:21:64:d7:f3:b3:5d:66:8a:95:
ed:cd:5a:cb:65:51:df:c0:2d:42:4e:f9:f8:67:79:b4:af:4a:
49:44:14:2e:e9:82:ee:04:61:70:af:98:fe:a2:a7:d0:2b:a6:
c2:a1:53:8d:76:79:c0:07:e9:6c:f8:44:23:6e:2d:70:13:dc:
25:6e:9a:71:0e:58:1d:54:9b:d4:a2:c2:db:19:0c:0e:55:94:
7a:c1:f1:a4:c3:19:be:5c:31:48:5d:40:33:1b:8c:ab:67:dc:
76:40:a8:c5:8c:0c:b6:9f:3a:f5:a0:b9:3d:07:0e:fa:9e:95:
27:c6:4f:04:0d:47:fc:95:12:74:77:84:25:8b:48:e2:be:67:
f1:9a:e5:b3:50:7c:7d:b7:93:e7:71:d7:0c:b2:b7:c0:63:31:
f4:bb:49:ed:ff:17:66:d0:3d:6d:ab:75:1a:84:46:ae:a4:01:
b2:f3:57:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:57 2026 by rpki-client