Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB39A65A854B11F18BFA24B2CE1D38B0.roa
File: BB39A65A854B11F18BFA24B2CE1D38B0.roa (raw, json)
Hash identifier: b2TOisJVUfru8+fY8Eumd/xqrQdrrzaYeOrkhZO+A5w=
Subject key identifier: EB:DF:C4:09:09:AA:CF:84:6B:A2:85:30:B3:E9:9F:73:93:3C:E5:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DABA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB39A65A854B11F18BFA24B2CE1D38B0.roa
Signing time: Tue 21 Jul 2026 21:32:54 +0000
ROA not before: Tue 21 Jul 2026 21:32:50 +0000
ROA not after: Thu 27 Aug 2026 21:32:50 +0000
asID: 138915
IP address blocks: 154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
154.93.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121530 (0x1daba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:32:50 2026 GMT
Not After : Aug 27 21:32:50 2026 GMT
Subject: CN=6a5fe586-8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:87:eb:c9:ab:2f:38:58:f1:e1:12:2a:46:
d8:72:e3:35:73:7a:06:1b:20:66:ea:f0:d9:df:a0:
52:cf:87:63:29:c9:73:fe:f7:dd:b6:af:5a:98:5c:
36:1d:08:9f:b0:89:18:16:a9:9b:a9:e7:c8:c6:db:
5a:29:a0:d0:cf:03:6c:3f:70:9d:42:5d:3e:b3:0e:
62:51:9c:82:65:53:a8:d0:62:8b:f2:63:19:7a:20:
2a:04:2d:dd:85:85:d0:09:b4:17:c2:fb:22:80:d9:
1c:9b:f2:92:58:cc:f5:4c:02:be:77:1d:1c:b1:51:
27:b8:08:d6:5d:1e:64:06:62:f8:35:32:57:6d:c1:
18:a9:80:3a:ff:ee:59:f5:4b:ff:f5:f6:79:59:c9:
0b:ff:f3:98:f6:ce:f4:81:28:8b:b5:ad:3b:54:a9:
cc:7f:8c:63:ad:f3:cc:c8:c7:0d:80:47:dd:54:9a:
b4:f3:34:4e:64:11:e6:7e:83:ea:42:ab:55:28:9e:
9f:82:91:bd:40:0e:af:ae:65:1e:92:7a:da:9a:fb:
4d:eb:d6:eb:1d:a5:6d:da:93:69:09:b8:70:dc:2b:
eb:9c:24:91:bd:c2:a6:fd:ef:5f:f4:a7:0b:65:d8:
99:eb:4d:bb:33:d4:f4:a3:f9:d1:0b:e7:a1:42:94:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:C4:09:09:AA:CF:84:6B:A2:85:30:B3:E9:9F:73:93:3C:E5:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB39A65A854B11F18BFA24B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.110.0/23
154.93.114.0-154.93.122.255
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:a5:bf:22:5b:ba:46:96:51:70:1f:56:63:57:c1:d0:0c:65:
55:3f:bd:6e:83:b5:71:e3:67:f3:de:ac:9f:47:7e:f7:60:cc:
43:d9:d6:83:95:5c:b1:a6:92:48:17:af:c7:29:8d:4f:9e:33:
c3:53:6f:ef:4f:34:5c:a6:f6:ac:84:4e:1f:d5:04:04:65:b5:
fa:06:4d:a4:87:7d:5d:22:15:88:39:78:a2:39:e9:7d:a1:2c:
30:80:1a:6d:70:ea:17:ee:dd:ad:9e:b1:be:aa:69:4a:a2:18:
c6:63:44:22:d0:20:51:de:d5:b0:b2:4e:8a:03:7b:ed:87:06:
cd:4c:56:0d:af:e2:d5:61:4f:f0:ea:3c:4a:19:9c:fb:23:9a:
3f:5b:72:3d:01:74:d8:15:07:9d:13:32:94:80:0f:7b:03:76:
4d:b1:f8:96:86:66:1c:cc:5a:b0:b7:e7:a5:86:98:8d:b8:b4:
74:2c:36:17:ae:49:e9:99:73:16:86:71:5b:6d:c2:b7:36:ea:
4f:7a:a5:78:d6:b9:56:cc:d7:c0:d2:5e:b4:e1:48:ba:09:37:
1f:27:d4:4c:c9:52:5b:b1:a4:f9:1b:bb:ae:d3:d8:74:46:6f:
61:cf:1b:01:54:76:a9:4d:86:d9:79:dd:47:08:78:0f:b7:f7:
10:ad:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:09 2026 by rpki-client