Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB8D481684E011F18BE7FFB4CE1D38B0.roa
File: BB8D481684E011F18BE7FFB4CE1D38B0.roa (raw, json)
Hash identifier: cptosOCjMscKdi6dI8xQqKudzAEhgqoGk47y2MTNpC8=
Subject key identifier: E6:C9:6E:DD:A8:A6:E6:86:36:F7:E3:79:81:F1:59:16:B2:3C:02:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB8D481684E011F18BE7FFB4CE1D38B0.roa
Signing time: Tue 21 Jul 2026 08:46:58 +0000
ROA not before: Tue 21 Jul 2026 08:46:54 +0000
ROA not after: Thu 27 Aug 2026 08:46:54 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121438 (0x1da5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 08:46:54 2026 GMT
Not After : Aug 27 08:46:54 2026 GMT
Subject: CN=6a5f3202-0159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:b9:e7:66:7f:d1:e8:f5:51:1f:c2:e2:9c:
18:32:a4:2e:c1:73:55:02:7c:32:ce:30:a8:63:45:
8b:f0:fa:9e:fe:ca:48:de:89:4c:8f:ef:48:04:ba:
99:8f:d6:7e:14:08:a4:a0:05:2c:d2:57:28:d3:b7:
3c:18:3b:2f:62:b6:0d:15:40:ee:c4:e1:39:22:1c:
59:f9:5a:a3:a3:3c:ac:ef:5f:c6:ec:eb:b4:72:69:
6a:9c:c7:0f:33:3a:02:79:3f:6e:31:dc:b0:64:15:
e8:34:77:07:50:43:ea:6f:17:0b:9e:85:d9:d7:68:
f7:6a:e9:55:59:67:d2:72:26:9d:9a:5e:41:9b:63:
c4:2d:ed:f8:eb:97:c4:24:41:76:9a:28:6b:eb:15:
d9:52:58:53:1d:e4:91:1e:53:e9:3b:e9:bb:a6:84:
f2:14:78:43:18:65:89:c9:13:7b:2d:e9:a2:3c:b2:
08:52:c5:07:a7:db:3c:1e:82:cc:26:ab:9c:2c:cf:
c9:ff:3d:f4:7e:bb:8a:ea:fa:3e:2d:ef:9c:e8:3e:
e1:1c:53:5b:70:a0:0d:27:d4:94:5b:e5:06:ce:2c:
f9:de:7f:93:84:d6:92:ec:46:0b:39:de:6b:79:cb:
97:fd:8a:9e:4e:e0:60:38:72:db:aa:96:75:67:86:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:6E:DD:A8:A6:E6:86:36:F7:E3:79:81:F1:59:16:B2:3C:02:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB8D481684E011F18BE7FFB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:18:d4:a9:97:37:8b:69:17:78:9c:18:a4:f5:a3:1d:dc:0e:
3e:62:c9:c4:44:cc:2f:7b:c9:45:0f:ad:80:23:17:a7:9b:6a:
13:fe:ee:25:48:d1:55:5e:87:9a:6c:f3:4f:9b:af:68:6a:f1:
44:56:aa:0f:36:c2:22:6d:2f:3c:29:32:ba:62:89:67:e6:b7:
0e:e9:e9:1d:e1:22:80:54:34:df:ff:85:7b:61:fa:cd:50:1d:
48:d8:d1:f1:02:d9:1d:d5:c3:73:3e:8e:b9:ee:d3:9d:39:05:
13:fd:4f:11:d2:79:f3:1a:96:ab:d3:6f:9e:15:2b:4d:f9:27:
df:a6:15:35:27:55:04:06:6f:52:e0:37:2f:3a:c1:60:da:30:
97:55:51:57:75:51:dd:b1:f3:d3:e7:82:ae:3a:d6:46:f7:a4:
f7:10:c6:5e:da:bc:99:13:88:9d:ca:18:fb:c4:9c:e1:73:86:
6a:24:fc:4e:0a:2a:c8:b9:be:be:bd:51:72:f5:90:e0:cc:65:
89:6d:6f:55:c7:f5:b1:f6:ba:85:bc:96:2e:fe:56:c4:48:67:
85:c4:5a:13:be:bc:91:2a:67:85:73:ea:f8:fb:3b:2d:23:d9:
b1:74:04:65:2c:5e:09:7b:ac:13:84:7f:46:87:b4:08:64:97:
a7:81:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:21 2026 by rpki-client