Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2DEF68834E11F1A7DC75A1CE1D38B0.roa
File: BA2DEF68834E11F1A7DC75A1CE1D38B0.roa (raw, json)
Hash identifier: UR3wrLpYpZXWWNB6KnKUZB3N+8mQvyzngRNtr4zctms=
Subject key identifier: 4C:9E:DD:BF:1D:D5:85:71:50:53:F8:06:A9:D1:17:38:FC:96:16:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2DEF68834E11F1A7DC75A1CE1D38B0.roa
Signing time: Sun 19 Jul 2026 08:49:18 +0000
ROA not before: Sun 19 Jul 2026 08:49:14 +0000
ROA not after: Sun 16 Aug 2026 08:49:14 +0000
asID: 17497
IP address blocks: 154.193.8.0/21 maxlen: 24
154.193.8.0/24 maxlen: 24
154.193.9.0/24 maxlen: 24
154.193.10.0/24 maxlen: 24
154.193.11.0/24 maxlen: 24
154.193.12.0/24 maxlen: 24
154.193.13.0/24 maxlen: 24
154.193.14.0/24 maxlen: 24
154.193.15.0/24 maxlen: 24
154.222.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121251 (0x1d9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 08:49:14 2026 GMT
Not After : Aug 16 08:49:14 2026 GMT
Subject: CN=6a5c8f8e-124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:d4:a0:c7:02:08:4d:95:1f:bf:a3:3b:4d:
22:5c:e5:93:13:42:26:7f:51:23:91:03:84:12:eb:
93:40:74:fd:a9:a7:da:71:4a:5c:72:cc:fb:63:2e:
9d:1c:2a:7e:82:1d:96:e0:37:5a:e9:c1:42:dc:ad:
bc:8e:f9:45:24:6a:c6:25:17:df:0e:43:12:91:cd:
18:e3:39:47:02:3e:6e:56:c6:33:bc:66:b3:50:54:
34:cc:71:64:2c:10:7c:ec:24:79:b4:83:a0:72:ad:
ca:db:83:77:f7:36:2a:d3:f2:77:33:e5:73:2d:0b:
f5:c9:25:fa:fd:94:b2:69:d1:72:34:24:31:2f:2b:
c7:04:82:ba:7b:10:13:49:2d:e1:0d:a2:1e:9e:90:
9a:cc:17:15:d5:1c:d6:eb:e7:ff:76:bb:bd:8f:c3:
57:5b:e0:a0:d4:7a:66:84:16:17:04:d6:f1:66:17:
3d:57:8e:0c:de:4e:42:6e:c2:7e:6e:6f:dc:a3:7f:
d9:51:c1:51:2f:48:ce:56:46:19:37:14:01:75:60:
b6:7b:f7:92:2d:e7:01:64:9f:45:38:14:70:fa:a1:
dc:c6:ea:a7:fe:2d:8f:7d:e4:f3:13:47:7f:4c:77:
2f:f0:f0:d4:f9:f9:eb:54:17:79:1e:c2:bb:7f:f0:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:DD:BF:1D:D5:85:71:50:53:F8:06:A9:D1:17:38:FC:96:16:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2DEF68834E11F1A7DC75A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.8.0/21
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:e6:f9:47:8d:df:5f:19:86:71:32:f4:fa:2b:34:e5:96:fe:
09:f5:10:7f:ab:cb:d6:22:28:58:e0:89:dc:ad:d2:01:45:77:
ce:4b:b1:f1:07:4e:0a:bb:27:e5:ee:02:48:1d:5f:84:a7:b1:
ec:65:0a:af:cf:18:1f:91:2e:93:96:d9:1b:ff:23:4d:8b:99:
ca:ef:c9:10:0e:d7:62:cf:da:25:8a:a2:e4:90:20:62:6e:c3:
e6:10:ea:bf:6c:95:a9:1f:99:57:cc:c5:fe:90:2f:79:39:88:
1b:71:82:36:d5:48:5d:a5:0e:81:56:65:95:59:18:e0:f8:69:
ef:6d:df:1d:86:bb:bf:a3:43:ba:25:c3:d3:4a:1f:b4:93:d5:
d8:fc:a5:8e:b3:8d:87:30:ff:cf:99:1d:51:21:d4:4d:a2:c9:
0b:41:a2:1c:42:d3:f2:66:13:a3:bd:e2:9a:ee:3d:24:13:aa:
3b:9a:e5:8e:82:51:75:c8:8a:57:14:68:6c:51:a4:0e:67:ee:
03:b4:f0:4b:33:e8:7d:60:70:65:ac:5a:fd:bb:dc:d6:32:2d:
a3:5d:f9:82:70:3e:06:c6:ca:e9:48:64:cc:38:99:7e:aa:ac:
22:fa:69:6b:14:5c:7e:af:f5:3c:4c:74:2f:97:93:20:3e:bd:
30:df:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:17 2026 by rpki-client