Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF27914850B11F1A847C4AFCE1D38B0.roa
File: 0BF27914850B11F1A847C4AFCE1D38B0.roa (raw, json)
Hash identifier: D87+ZVOgysfsDiRcuX2ty78zLYhMr5mMTVGHiwo+dfc=
Subject key identifier: 08:8E:28:84:A3:A2:9B:C6:A5:D2:79:B5:56:0A:CC:D8:B7:B9:DC:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF27914850B11F1A847C4AFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 13:49:52 +0000
ROA not before: Tue 21 Jul 2026 13:49:48 +0000
ROA not after: Mon 24 Aug 2026 13:49:48 +0000
asID: 17497
IP address blocks: 154.81.159.0/24 maxlen: 24
154.82.19.0/24 maxlen: 24
154.90.138.0/23 maxlen: 24
154.90.138.0/24 maxlen: 24
154.90.139.0/24 maxlen: 24
154.94.2.0/23 maxlen: 24
154.94.2.0/24 maxlen: 24
154.94.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121512 (0x1daa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 13:49:48 2026 GMT
Not After : Aug 24 13:49:48 2026 GMT
Subject: CN=6a5f7900-5e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:01:46:88:c2:14:72:0e:a5:88:62:22:65:
18:a6:92:ea:e3:21:32:e4:3e:a0:4b:41:91:dd:83:
ed:08:91:48:df:81:ec:24:ef:1b:98:a7:34:b8:9a:
b0:48:87:68:33:69:36:15:49:76:21:d0:bc:0b:08:
a3:25:12:35:02:f7:92:a8:5c:d9:44:bc:4e:df:f8:
42:ba:14:52:c4:e6:68:91:26:f4:b4:e1:39:56:5f:
3a:cf:5a:a1:e9:5a:08:3c:e9:4c:9a:7d:49:b2:9a:
e9:0b:e5:c7:32:bf:24:c0:46:a9:b3:b7:5f:28:b2:
78:3a:8d:4f:08:68:c6:11:8d:31:df:7e:51:db:de:
f1:e2:6d:2f:7c:bc:de:1a:3c:ff:88:27:be:1f:83:
5b:d3:29:b0:a8:5a:14:68:f3:c2:f5:38:22:f7:f1:
28:75:f6:14:6e:df:4c:3c:5c:ab:03:df:a0:81:07:
f3:e4:5a:b2:c0:53:82:ef:ce:85:38:e3:b0:a8:e4:
da:7c:e1:74:6f:65:89:c0:48:e7:da:9c:20:2c:53:
e0:0f:5e:be:34:9a:da:37:85:a9:8d:87:36:d8:b3:
98:7f:3a:cc:11:12:d5:6f:6f:39:90:54:5f:69:46:
04:b9:3d:71:97:c5:5f:08:fb:35:56:43:10:1c:3d:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:28:84:A3:A2:9B:C6:A5:D2:79:B5:56:0A:CC:D8:B7:B9:DC:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF27914850B11F1A847C4AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.159.0/24
154.82.19.0/24
154.90.138.0/23
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
45:e6:68:d5:49:a5:8d:fa:69:19:70:2f:bc:90:09:0d:18:ab:
3a:b6:2f:c7:40:22:f1:96:47:3c:60:dc:8f:a4:d2:b5:87:5d:
82:20:41:f7:13:44:18:08:43:ee:93:c1:bf:e3:e4:a8:63:f2:
a9:8f:7f:ac:dc:59:56:40:db:57:8e:c6:8b:aa:79:93:32:db:
09:7c:d3:bc:45:73:b5:b9:81:39:45:ab:3e:81:cd:9c:e1:35:
df:b0:e9:d7:42:15:2a:18:13:f8:d0:6a:de:a5:91:ee:dd:1a:
1d:44:c8:f0:3e:81:19:ec:e4:e9:bc:e7:11:53:d1:3d:0f:61:
7d:8f:b8:5a:95:e3:55:5c:fc:95:bc:16:80:68:c8:d2:ff:1f:
b2:bd:3a:e5:37:73:56:e6:3c:52:6b:06:92:c3:63:b5:66:29:
77:a7:1a:29:d6:9c:4f:5b:0b:6b:2c:79:d5:06:55:3a:f9:27:
e1:ca:03:b4:24:97:d8:d9:a2:27:be:28:d4:fe:55:12:93:8e:
a7:12:dd:ba:7c:c5:58:d5:03:b8:ad:42:04:1d:a4:ec:fb:9e:
8c:7a:84:91:d0:de:d4:6e:0e:a7:c2:7e:15:80:cd:95:31:f2:
f8:7b:89:db:0f:1e:18:bb:7c:1f:90:99:86:7d:2a:c8:1e:ff:
4b:e8:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:30 2026 by rpki-client