Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA56DBBA80FD11F1991A2305CF1D38B0.roa
File: BA56DBBA80FD11F1991A2305CF1D38B0.roa (raw, json)
Hash identifier: z+gNnRQeYUm2z9WwR+yk/JuZ9A2CHNEialLED+g62Jw=
Subject key identifier: 02:0E:48:6A:03:09:A1:8B:67:6C:47:6A:81:ED:17:CD:CF:BD:82:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D920
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA56DBBA80FD11F1991A2305CF1D38B0.roa
Signing time: Thu 16 Jul 2026 10:04:27 +0000
ROA not before: Thu 16 Jul 2026 10:04:23 +0000
ROA not after: Sat 22 Aug 2026 10:04:23 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121120 (0x1d920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 10:04:23 2026 GMT
Not After : Aug 22 10:04:23 2026 GMT
Subject: CN=6a58acab-84d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:e4:b0:a9:ad:be:c0:d3:cd:2f:19:ea:db:
90:da:3a:f0:d8:60:6c:e7:df:22:fa:b8:b3:e9:d3:
20:15:f7:90:1c:e9:87:4d:d9:16:dd:72:30:42:46:
05:01:e9:36:22:6f:6d:ef:76:60:70:3f:2e:87:56:
33:8a:fe:a8:bf:86:96:b2:9a:bb:24:66:8d:04:6c:
f8:e7:48:f6:e1:67:a6:a0:95:4c:69:37:6c:20:da:
22:d7:a9:cb:6b:56:0f:d2:43:9d:bf:a1:e1:96:a4:
12:92:33:80:d6:1d:37:5c:cd:f3:ed:f0:fa:00:b3:
dd:04:52:04:1a:ec:d5:82:a2:1a:ab:df:f3:1d:e1:
d3:01:90:38:fc:ad:79:da:0f:4a:c6:21:0c:9a:a7:
1a:93:d9:d1:2f:bf:00:38:7a:0f:94:9d:ed:f5:1b:
bc:16:d8:ef:11:ea:96:33:c4:64:ac:d7:b5:46:70:
f3:2c:16:ed:bd:f9:38:8a:be:c9:3a:43:76:61:e2:
67:9c:0c:49:8a:4a:ae:b1:c9:39:44:c8:ea:f7:b3:
48:de:4f:0b:49:62:d2:f2:f8:f8:c4:43:f1:e5:4f:
e9:6f:57:6a:8f:ae:cf:6e:9f:38:7f:14:02:d9:5a:
09:32:e3:65:30:66:d8:a5:cd:95:2b:ab:3b:81:c6:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:48:6A:03:09:A1:8B:67:6C:47:6A:81:ED:17:CD:CF:BD:82:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA56DBBA80FD11F1991A2305CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:81:0d:c4:b3:0c:63:0a:33:fd:4e:6a:ee:f9:e0:08:1d:51:
71:be:a6:e7:ad:fd:29:a3:e4:be:a2:c1:58:59:07:c5:d1:e1:
38:a3:62:1b:a0:ca:62:98:a6:10:93:8a:24:fa:e8:d6:f6:04:
c5:48:78:47:06:21:19:51:84:d6:bd:9c:f2:ab:65:61:8b:23:
ac:3a:65:c9:cb:2a:ec:3d:43:86:ce:52:86:36:3f:54:f8:d7:
72:70:e9:87:49:67:ae:cf:5e:d1:30:bc:ae:6e:9c:81:65:39:
59:39:3a:13:a8:c2:62:a9:d1:ee:4e:d9:4a:20:fe:99:ec:ce:
70:de:1b:8d:18:34:1b:ed:dd:ea:95:88:bb:a7:45:26:b0:d4:
59:35:2f:9a:f5:c2:4e:be:28:1e:ed:a9:91:4c:49:9e:6c:72:
56:5b:f7:94:16:85:11:b2:0e:0a:31:59:1f:4e:f1:6d:cd:81:
29:9e:07:1e:f2:55:a7:ce:8f:49:a3:38:2e:20:6b:d2:de:b0:
66:3a:ab:aa:45:44:f8:b4:75:08:53:33:44:83:7d:09:67:7e:
7d:47:38:08:e1:5a:2c:b1:89:6a:9c:48:62:e1:50:9d:a0:7c:
bb:4e:ac:4f:01:0f:93:53:03:9f:c9:67:a0:83:d9:72:47:a9:
be:5d:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:10 2026 by rpki-client