Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB35CE27DFD11F19A9856FACE1D38B0.roa
File: BCB35CE27DFD11F19A9856FACE1D38B0.roa (raw, json)
Hash identifier: y3rAQf3WffHosWRer1Iyi2Zn8EQTr8dWCCrkWcMZXyg=
Subject key identifier: 32:A7:BE:3D:F6:66:25:5D:4F:5E:C5:78:9A:6F:25:2B:A2:2A:7A:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D887
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB35CE27DFD11F19A9856FACE1D38B0.roa
Signing time: Sun 12 Jul 2026 14:26:58 +0000
ROA not before: Sun 12 Jul 2026 14:26:51 +0000
ROA not after: Wed 19 Aug 2026 14:26:51 +0000
asID: 16509
IP address blocks: 154.81.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120967 (0x1d887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 14:26:51 2026 GMT
Not After : Aug 19 14:26:51 2026 GMT
Subject: CN=6a53a431-0c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:10:94:cd:6f:3b:67:21:b8:90:3a:f2:8c:
56:50:7f:39:f4:cf:dc:92:97:4f:5b:74:7e:f3:df:
0d:a7:1c:85:41:6e:4d:ad:21:a6:50:d2:e0:0c:f5:
cd:b1:93:6d:0a:c9:5a:9f:95:45:a1:93:b7:cf:a6:
6c:44:0a:ba:b4:dd:68:34:d7:ff:4f:77:ef:db:9e:
66:92:0a:9d:84:a8:74:73:3b:64:4b:18:9b:b6:a8:
8b:df:b5:57:fa:51:92:79:d2:04:26:60:06:f4:18:
ec:2b:1b:49:ef:8a:95:49:fc:a2:c4:69:46:d7:7c:
21:09:bf:4b:fe:d0:1e:c7:1a:9f:35:6b:6f:76:9c:
76:12:46:56:66:95:e5:c0:89:d0:b7:77:28:96:ab:
01:3e:7f:6b:ba:e8:ce:c4:d2:24:57:3d:9c:a0:16:
78:8a:b9:82:4f:75:1f:60:15:98:fb:42:4e:3e:98:
87:a3:24:18:14:fa:34:7e:97:85:e1:7c:df:67:6e:
5f:fa:30:bc:da:f9:22:28:82:b8:49:73:87:24:ba:
3e:83:91:55:84:66:70:17:d4:39:3b:25:33:b3:35:
e2:19:10:fb:15:80:81:b3:25:a3:20:66:e6:89:c5:
48:c5:95:1d:b1:64:38:bb:61:2b:57:f7:ac:02:e4:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:BE:3D:F6:66:25:5D:4F:5E:C5:78:9A:6F:25:2B:A2:2A:7A:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB35CE27DFD11F19A9856FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9a:86:c8:73:03:51:12:db:a3:90:ac:7d:f8:02:31:8e:83:
1f:2e:a2:3c:fa:58:f1:56:aa:32:c6:92:43:ef:9b:ac:b9:db:
43:39:fa:da:06:72:e2:6f:74:86:ea:04:87:a1:79:e7:05:ff:
41:ce:5d:f5:59:77:fd:89:f9:d3:18:e6:76:54:4b:9e:fe:af:
4d:90:3f:87:20:55:a3:78:38:ae:76:31:a0:e9:bd:7d:69:1c:
a4:4e:a7:4a:2e:86:53:ea:37:bf:1b:5e:ea:ca:e9:1d:8c:43:
79:70:96:7c:57:65:92:94:34:1f:94:60:0f:3a:f8:0c:3b:19:
c9:8e:89:8a:b1:b1:20:56:36:8c:2a:2c:cf:6a:51:6a:c8:bf:
cc:24:cc:e7:a9:ea:5b:eb:cf:18:ae:10:ed:4d:3f:9c:a5:b2:
b6:dc:6f:b0:9c:b6:47:8f:ea:8c:d9:6f:2b:c5:68:f8:27:4b:
55:97:74:ad:cf:32:06:1d:7c:fd:17:06:ca:b5:27:bf:99:c1:
1b:f0:55:84:09:c1:eb:e2:fc:f6:a5:7c:50:0c:a9:03:11:e2:
9b:cc:ea:6a:7a:3a:33:9a:5b:1b:59:77:39:22:31:16:93:ea:
80:87:e5:f8:1d:6b:c5:76:b3:d8:f1:49:f2:91:1e:f6:00:11:
70:fc:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:53 2026 by rpki-client