Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF21A58A0EFC11F1A28DDAB8DAE4EC9C.roa
File: BF21A58A0EFC11F1A28DDAB8DAE4EC9C.roa (raw, json)
Hash identifier: maWoGMFtL6SHRAY4Nwsz2f3SHKKWpb8wwRO8339Skgc=
Subject key identifier: 3F:E0:86:C3:D5:A1:D0:E4:75:97:A9:A2:EB:AD:CB:B3:82:53:CD:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BACD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF21A58A0EFC11F1A28DDAB8DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:10:13 +0000
ROA not before: Sat 21 Feb 2026 08:10:08 +0000
ROA not after: Fri 27 Mar 2026 08:10:08 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113357 (0x1bacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:10:08 2026 GMT
Not After : Mar 27 08:10:08 2026 GMT
Subject: CN=69996865-84fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:bb:07:8d:52:27:11:40:df:c9:13:23:69:
ae:74:f2:fd:94:f5:6b:13:4a:d1:72:a4:59:9c:68:
fc:e4:e6:de:10:98:85:41:bb:3a:50:5e:94:d9:1c:
76:42:07:ee:64:92:13:52:7c:1a:49:24:a5:e4:26:
f7:0a:02:df:a6:34:9a:8a:17:ed:d8:cc:df:6d:76:
87:44:73:30:14:e3:80:c5:73:a2:b5:a4:2d:24:70:
09:55:2e:fd:74:f2:22:6a:f3:21:57:ad:ff:27:21:
36:ce:f7:72:00:6f:22:4e:c9:42:4b:16:5b:52:97:
cd:60:c7:81:48:7a:a3:d7:5f:1c:2d:0c:df:2d:5d:
89:bc:c0:5a:92:45:ee:f5:a1:e6:2d:09:4d:b3:74:
98:ee:d7:1b:1b:63:e3:2b:8b:a9:dc:6f:ee:37:25:
9c:51:37:d1:89:42:2d:7b:12:09:27:ad:33:6f:f4:
36:e1:88:ee:63:8e:15:b7:3c:98:f6:79:97:b5:33:
f1:d9:1c:c0:da:49:05:b9:54:4a:40:53:2b:2d:fa:
dd:fd:93:82:ab:82:a9:e7:23:cb:a6:c9:ab:4f:49:
05:2c:ba:7a:09:a6:ba:2e:47:a3:f3:fd:5b:88:a8:
94:87:ed:55:de:54:21:2b:e5:c4:94:fc:7c:92:77:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:86:C3:D5:A1:D0:E4:75:97:A9:A2:EB:AD:CB:B3:82:53:CD:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF21A58A0EFC11F1A28DDAB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:76:f1:86:84:b9:fa:b9:54:5c:0c:69:6c:cc:6d:6d:2d:9b:
04:3e:a4:ba:71:e8:9a:2e:09:35:23:bd:43:08:e0:a2:76:7d:
95:06:f4:80:8b:a5:70:ed:37:ef:9a:c2:66:99:21:b6:9c:a8:
62:c2:cb:ca:d9:0f:e4:3a:2f:25:63:b2:bc:5e:e6:24:90:3b:
0c:fc:12:22:f7:04:a5:0c:ba:2e:1a:57:05:55:d7:67:64:1d:
75:28:bd:12:11:a2:15:35:ba:81:ba:74:23:58:ee:6d:ce:ac:
3a:70:33:ca:73:46:ba:98:9c:c7:b6:3b:61:dd:e7:9b:1b:aa:
94:8f:0e:33:c3:39:4a:ab:5e:30:6f:ad:6a:eb:e9:df:91:2b:
6c:3a:e4:f6:fe:9b:cd:90:50:9b:ba:3d:06:f8:ce:f3:04:56:
c0:56:4f:d8:d5:5c:c9:68:fa:73:a2:85:da:5c:45:5b:10:07:
12:ef:82:40:35:61:50:fb:6d:d0:37:f6:8f:17:52:cc:c3:c8:
c7:77:95:6b:a4:4e:28:d7:3f:ab:e5:43:97:e7:bc:bd:cb:57:
f9:d0:5c:66:eb:b9:a9:b3:5f:51:89:62:dc:04:7e:a2:5b:c5:
05:74:24:8c:42:3e:6a:e6:af:34:08:43:44:70:53:9d:84:0f:
4d:58:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:50 2026 by rpki-client