Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF08D168372411F1A2BE2ABBCE1D38B0.roa
File: BF08D168372411F1A2BE2ABBCE1D38B0.roa (raw, json)
Hash identifier: RI6pnEmjKCnfP9rIyAMD0nF0QiFYMxLKFPageRCKvlc=
Subject key identifier: 9C:40:D1:D5:CC:1B:45:1B:74:8D:31:5D:D5:AC:70:9D:B4:64:21:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C502
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF08D168372411F1A2BE2ABBCE1D38B0.roa
Signing time: Mon 13 Apr 2026 10:37:19 +0000
ROA not before: Mon 13 Apr 2026 10:37:14 +0000
ROA not after: Sat 16 May 2026 10:37:14 +0000
asID: 22773
IP address blocks: 154.202.29.0/24 maxlen: 24
154.202.112.0/24 maxlen: 24
154.202.113.0/24 maxlen: 24
154.202.114.0/24 maxlen: 24
154.202.116.0/24 maxlen: 24
154.202.137.0/24 maxlen: 24
154.213.192.0/24 maxlen: 24
154.213.200.0/24 maxlen: 24
154.213.201.0/24 maxlen: 24
154.213.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115970 (0x1c502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 10:37:14 2026 GMT
Not After : May 16 10:37:14 2026 GMT
Subject: CN=69dcc75f-854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:cd:7f:e8:71:c3:28:cb:b5:b2:e8:cd:3b:
77:11:47:1f:69:a4:8d:74:74:f3:3e:b0:05:38:b3:
39:1c:44:bf:a5:77:72:13:ef:07:1e:ac:e6:32:1e:
ac:b2:de:30:28:82:7e:93:0e:05:3a:82:f4:52:7e:
2a:d3:df:72:5e:e9:3e:31:4a:68:c0:24:48:0c:07:
37:2e:0c:39:d2:9b:49:93:46:99:71:e6:7a:b6:d2:
48:f4:ce:2d:ba:b9:f3:71:3a:c4:21:68:66:14:a4:
0c:f3:b1:f7:72:9e:19:6f:e6:bf:4e:d9:b4:39:67:
71:a1:48:34:20:e7:f2:bc:af:44:b4:d7:81:a0:4b:
b7:75:5d:93:8c:4d:38:7b:2c:8e:bf:f7:5a:04:3e:
f6:7e:02:49:0f:bc:89:1d:47:6b:33:7f:e7:c4:90:
d8:33:0f:e8:04:de:da:d0:e2:6c:82:a4:03:db:46:
a0:d3:cf:a8:da:a4:b9:97:9e:db:57:42:e5:05:90:
b3:82:54:2f:7a:f9:96:d6:ae:c8:3e:6b:5d:9f:c1:
ea:cf:11:cd:69:fd:0e:a1:e7:e0:7f:dc:5b:ef:63:
70:79:5f:6c:03:26:0d:6a:8c:e3:46:94:fb:84:b3:
ce:8b:e3:3b:22:1d:9f:22:8c:35:63:22:be:7f:fc:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:D1:D5:CC:1B:45:1B:74:8D:31:5D:D5:AC:70:9D:B4:64:21:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF08D168372411F1A2BE2ABBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.29.0/24
154.202.112.0-154.202.114.255
154.202.116.0/24
154.202.137.0/24
154.213.192.0/24
154.213.200.0/23
154.213.205.0/24
Signature Algorithm: sha256WithRSAEncryption
16:92:3d:e8:c9:f7:f5:c5:23:7c:ec:f6:3e:33:b0:6f:24:4d:
38:f8:86:c1:79:fb:b5:a6:21:3f:ca:78:89:bf:1d:d4:ca:8f:
31:10:d7:b9:87:80:dc:21:5a:6b:f8:d3:be:98:be:be:1f:1c:
a1:fa:7f:f4:0d:a8:92:47:e6:57:5e:e3:3e:3a:de:12:4e:0c:
dc:2b:ee:71:54:88:15:9e:4a:52:9e:81:19:ba:be:cc:2b:f8:
18:f2:f3:94:5a:0b:b2:b2:1b:53:8a:af:23:65:fa:18:9f:a1:
94:40:6e:c1:8d:fd:67:00:2c:54:5f:48:3c:2c:0c:d6:08:8e:
25:f3:5a:b4:6f:18:fc:b2:13:2a:46:29:3f:46:52:ef:e0:ec:
e3:06:0c:21:16:fb:9e:5f:13:8d:b9:6b:71:4a:8d:f1:19:e6:
19:99:75:e0:03:7f:26:71:c6:06:25:a8:2f:ab:2a:b8:76:c3:
19:61:18:be:8f:d8:95:11:17:20:dd:14:d9:bd:ae:40:27:8b:
a9:78:f8:ee:08:9e:79:c1:b8:5b:86:62:f4:be:31:64:59:25:
82:c9:f2:86:28:97:e2:eb:cc:db:d8:46:a5:98:2b:bd:49:94:
f9:86:6b:41:6d:d0:c1:75:6f:da:fd:cd:50:34:43:03:60:42:
e9:96:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:04 2026 by rpki-client