Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5D5DDA842911F19CC4A4D3CE1D38B0.roa
File: BA5D5DDA842911F19CC4A4D3CE1D38B0.roa (raw, json)
Hash identifier: ZoPp++EPmJQ5Tm1I9338bmJTM7HhaW5GKS2NcTtGrHs=
Subject key identifier: 58:41:FA:70:59:58:D1:3A:73:F3:54:61:09:1B:28:3B:6F:29:37:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5D5DDA842911F19CC4A4D3CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:56:58 +0000
ROA not before: Mon 20 Jul 2026 10:56:54 +0000
ROA not after: Thu 27 Aug 2026 10:56:54 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121334 (0x1d9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 10:56:54 2026 GMT
Not After : Aug 27 10:56:54 2026 GMT
Subject: CN=6a5dfefa-4656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:ec:2e:38:f9:cb:dc:92:de:00:f4:2d:89:
19:ed:bd:dc:d7:49:09:59:b8:ab:59:f6:8a:96:ed:
45:43:7f:16:2d:56:3a:a8:58:cc:79:f0:e8:6d:69:
27:89:c9:a9:eb:de:fd:2a:9d:b2:76:4a:cf:8b:76:
d4:0f:cd:c8:7e:a4:00:d9:32:2e:ae:0e:84:40:13:
db:8e:84:0b:10:ed:66:56:7c:1c:0c:87:10:d3:5d:
1d:a8:c8:31:b4:e4:b7:01:fb:29:fb:26:61:b2:de:
a1:8b:49:8c:a8:17:26:b2:e2:17:c6:a9:6e:43:11:
ae:bd:86:f2:09:58:6c:50:46:af:fe:b2:25:46:45:
a5:64:56:ef:c1:17:93:e8:d3:a6:17:b9:40:98:a2:
79:e0:56:e9:fe:0c:4d:96:d9:81:88:72:73:10:18:
d4:a0:25:d7:4b:c3:44:04:78:90:bd:12:c4:4b:dc:
e3:c2:f6:0e:0d:cc:66:f0:59:6f:f1:fc:1a:f2:23:
9c:fa:a0:97:34:9d:0a:09:08:52:a1:4c:eb:99:04:
3e:fc:5d:a6:5a:db:8b:88:8a:90:e7:f1:57:4d:7c:
84:f4:69:c7:7a:ce:23:39:d3:69:0a:09:86:2c:81:
74:5a:33:55:65:94:c4:b2:8a:8b:26:91:01:56:32:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:41:FA:70:59:58:D1:3A:73:F3:54:61:09:1B:28:3B:6F:29:37:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5D5DDA842911F19CC4A4D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:10:26:84:a4:65:fe:f8:54:f0:72:1c:fe:f1:ae:53:71:1a:
e2:91:d7:20:58:18:67:16:34:16:9c:7d:66:31:2e:20:d7:98:
6f:8a:39:f0:75:5b:13:22:ac:c6:1c:2b:b6:fb:6f:2c:81:db:
4d:f7:53:1b:06:b2:b8:eb:85:25:af:27:af:65:d0:da:54:26:
76:89:8c:d1:f6:9e:5c:f2:46:71:94:5f:de:0d:53:b0:6f:c3:
a8:64:89:89:8c:60:e7:0c:fc:02:e6:f9:71:b5:8e:84:a7:a9:
24:be:97:c6:a4:83:a6:7a:11:47:9d:13:c5:e3:38:d5:a4:92:
f9:19:4e:8b:28:d7:d7:2d:bb:78:ef:cf:6d:b3:d1:2d:50:e6:
e1:bf:1f:3b:18:da:7d:4d:64:30:cd:59:47:ac:28:38:25:b0:
ea:cf:fe:00:07:fd:14:01:d9:87:95:09:cf:a4:33:13:b3:d0:
88:0d:15:50:ef:39:3e:4c:4b:9f:82:3c:7e:6f:77:08:0a:e5:
d3:af:15:2f:5d:ae:8a:28:3d:37:aa:d1:b2:39:4a:38:ef:47:
d5:ce:0c:42:8b:48:74:b0:34:4e:5c:ca:9a:b8:62:01:c9:28:
b3:83:3a:31:0b:45:3f:2f:9b:44:0b:40:24:2c:68:05:6f:c9:
c1:6f:f0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:00:02 2026 by rpki-client