Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF51BEA80E6311F1971D8587DAE4EC9C.roa
File: BF51BEA80E6311F1971D8587DAE4EC9C.roa (raw, json)
Hash identifier: B8VOGjmQgmPLNa3kHbr8+jvH9GQhWHhbR+M27bn0gXQ=
Subject key identifier: 1D:2C:31:42:31:69:B3:8C:7B:46:D0:41:C9:62:F1:2E:AC:57:25:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF51BEA80E6311F1971D8587DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 13:55:00 +0000
ROA not before: Fri 20 Feb 2026 13:54:54 +0000
ROA not after: Fri 27 Mar 2026 13:54:54 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113284 (0x1ba84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 13:54:54 2026 GMT
Not After : Mar 27 13:54:54 2026 GMT
Subject: CN=699867b4-3469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:da:ce:b0:f9:78:f2:33:2a:fc:d8:e6:7e:
fb:b7:e4:69:80:c2:22:42:97:c5:3a:eb:0a:45:75:
da:43:fc:b8:d6:5e:75:ce:52:61:94:96:83:da:76:
de:d4:bf:f8:92:90:07:61:ec:5c:0b:06:b5:33:5c:
a0:c5:d3:0b:fa:52:35:a0:ef:97:7f:3b:43:4b:f8:
6a:ba:e6:a5:90:21:76:4b:11:d7:19:3a:cf:88:58:
5d:82:ca:11:5b:d0:08:72:5a:36:f4:2c:8d:0e:a4:
47:92:a6:6a:44:49:e5:4f:15:61:d2:e5:bf:96:74:
c6:24:90:b8:e1:b7:0e:bd:90:49:4b:87:c8:d1:e8:
d3:db:47:5e:94:b3:97:06:0e:00:7f:5b:63:d6:8f:
fc:37:80:4f:57:0f:cf:7e:3d:60:10:59:4c:86:21:
26:2d:e4:a6:02:17:c5:ff:86:30:cb:df:e5:99:9b:
bd:78:9d:d9:1d:15:1b:0d:06:a7:6c:b9:ae:7b:09:
cb:bc:86:f9:af:57:e1:f8:7e:b0:0e:61:4e:63:ae:
88:26:3c:20:00:ba:e7:6f:0f:37:7d:40:86:3b:4c:
d8:72:8b:52:be:b1:5a:46:58:c2:51:37:b7:2e:06:
97:d9:ea:73:a7:12:0e:2a:71:d8:74:03:0b:9a:49:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:31:42:31:69:B3:8C:7B:46:D0:41:C9:62:F1:2E:AC:57:25:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF51BEA80E6311F1971D8587DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:d3:39:5b:53:92:c7:c1:be:8a:9b:c3:91:44:19:36:90:5d:
ca:73:b0:00:b0:74:5a:75:92:3a:ae:40:f6:bf:05:0c:7e:b6:
97:6b:9a:64:dc:ff:e5:78:c1:e6:19:cd:b9:45:73:2f:7b:90:
7e:81:12:16:4c:18:fd:b2:a1:09:76:60:d1:47:9a:e3:79:cd:
c8:97:3c:d0:96:57:9f:da:f1:f9:62:69:ab:c5:4a:b6:68:2c:
38:78:06:09:16:31:3f:fd:1b:e8:76:e8:13:d4:97:a5:91:1b:
66:8e:8f:f7:c1:21:f8:15:cd:ae:2f:71:16:62:c2:44:92:70:
39:34:ae:e9:66:5a:8c:18:3f:bb:e5:64:14:1e:de:35:03:42:
23:45:5e:f7:e6:4b:39:1f:9c:c7:ee:b0:ea:2a:5d:b1:90:42:
45:04:56:db:bf:94:a9:89:b8:f2:86:d7:e4:89:79:5a:db:d6:
4b:9f:23:d8:0d:cf:69:55:53:b2:92:3b:69:60:04:e8:1d:ed:
c9:4a:63:82:9e:8c:58:53:2b:ef:42:64:3b:fd:92:7d:5f:64:
c2:cf:cf:e2:18:3a:2e:87:9b:07:21:e2:dc:d3:49:57:e8:e4:
92:ca:4e:4d:ea:77:a2:09:64:7f:0d:46:9d:f5:1c:05:b7:20:
f8:2b:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:14:28 2026 by rpki-client