Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB67F062720111F1BE09A3E7CE1D38B0.roa
File: BB67F062720111F1BE09A3E7CE1D38B0.roa (raw, json)
Hash identifier: rw55nisxGN9prnSF8WgDJ3GtPoZpqhIbkmbRFTS4GXw=
Subject key identifier: 14:5B:C5:F5:8F:5D:4D:F5:0F:05:EC:A7:79:A5:E1:3A:DA:AE:E4:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D584
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB67F062720111F1BE09A3E7CE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:25:19 +0000
ROA not before: Sat 27 Jun 2026 08:25:14 +0000
ROA not after: Mon 27 Jul 2026 08:25:14 +0000
asID: 147176
IP address blocks: 154.83.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120196 (0x1d584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:25:14 2026 GMT
Not After : Jul 27 08:25:14 2026 GMT
Subject: CN=6a3f88ef-3bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:27:d0:32:9c:24:b4:7d:d2:11:dd:34:f1:
f9:04:63:39:e1:8a:c6:7b:55:29:a5:8a:bf:0c:95:
0a:bf:00:2c:aa:60:61:fd:10:67:10:b6:a9:f5:9e:
65:20:82:c4:84:47:9a:bc:27:50:9b:89:51:22:f3:
72:2c:41:de:bb:d0:b8:4f:aa:20:33:82:55:7f:cd:
a8:7b:5e:09:ba:a6:27:e2:81:79:a1:00:e1:21:7c:
fd:98:a0:30:45:5a:4e:8c:ec:68:7f:e6:a1:de:ed:
7b:00:a2:d0:77:36:cf:0c:4f:be:e3:c0:1c:ab:20:
1f:d9:38:86:57:cc:48:0e:4a:6a:c2:75:42:22:30:
4f:dc:70:ed:1e:19:62:96:43:d2:57:e4:d2:0e:58:
d2:cd:3e:33:e5:47:2f:3d:c9:f4:f4:7d:ce:1f:42:
e9:b1:fe:e3:ec:3a:77:25:c8:33:3e:24:83:3d:a5:
1c:86:18:46:fc:47:68:df:8c:58:21:a9:e7:23:80:
c0:5d:e3:08:ea:a9:1e:21:5c:85:e4:83:27:13:64:
8e:60:39:bd:4e:16:c3:89:cc:97:a0:5c:7a:99:e4:
1a:a1:a5:9e:3a:1b:63:67:bf:93:25:0e:f5:7d:af:
46:8d:f3:3e:17:f4:b9:cc:a4:76:80:a3:92:af:cb:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:C5:F5:8F:5D:4D:F5:0F:05:EC:A7:79:A5:E1:3A:DA:AE:E4:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB67F062720111F1BE09A3E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.25.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3a:35:fb:3b:5c:ef:a7:49:59:16:d6:97:82:e5:db:2e:00:
3d:93:51:a8:6c:92:9a:2d:f7:04:67:6a:eb:03:68:07:e5:69:
e2:e8:59:97:46:ed:c1:26:68:30:ab:a1:6d:e4:5d:8f:f9:80:
a4:e3:91:d6:a7:5c:24:c1:4b:52:8e:91:d3:ca:ac:20:b2:40:
78:ea:00:2d:e6:4b:99:ad:83:cf:67:22:be:77:6d:03:d5:e6:
54:eb:98:cc:a8:e3:e3:77:81:11:4b:99:2c:fa:13:f3:89:f1:
64:ed:c0:22:41:1e:36:54:84:58:83:1b:32:98:49:15:94:d6:
f9:3d:0a:cf:f5:de:21:28:38:0a:14:5b:74:e4:fe:7b:5a:12:
15:b1:e5:70:7f:7f:89:81:eb:52:a5:c0:1d:16:09:5f:98:26:
18:32:a3:e0:eb:6f:ee:cd:16:ee:d3:eb:29:de:a0:38:15:d8:
be:d3:ea:4d:88:e4:cd:1f:0d:6a:af:e7:75:93:b5:eb:29:12:
f1:7c:e8:53:81:8a:63:11:73:b0:f7:4a:ce:b0:37:d6:08:ee:
b0:80:15:c5:f8:b0:cc:82:b1:1c:f2:11:d8:bc:67:27:bb:d8:
92:5a:ed:76:6d:a4:c5:9a:2c:2b:c8:ca:60:6f:2b:5d:ad:52:
da:c3:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:47 2026 by rpki-client