Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCDAA4F4841611F1B2B28CE0CE1D38B0.roa
File: BCDAA4F4841611F1B2B28CE0CE1D38B0.roa (raw, json)
Hash identifier: oi2jrIln3hWpZnquqVPV4KaD3YDy2vDNVjggba4aU9g=
Subject key identifier: C7:10:B8:E6:85:6F:3E:40:BC:9A:E2:04:7B:3C:A8:79:E5:73:7B:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCDAA4F4841611F1B2B28CE0CE1D38B0.roa
Signing time: Mon 20 Jul 2026 08:41:02 +0000
ROA not before: Mon 20 Jul 2026 08:40:58 +0000
ROA not after: Fri 20 Jul 2029 08:40:58 +0000
asID: 17561
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121284 (0x1d9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 08:40:58 2026 GMT
Not After : Jul 20 08:40:58 2029 GMT
Subject: CN=6a5ddf1e-212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:20:3a:2b:11:57:76:ca:62:cd:45:af:5c:
21:a4:13:c0:a2:09:af:b2:b6:29:35:e1:1c:db:45:
f1:8f:48:66:73:5c:a9:24:c8:d7:e3:f1:3d:b1:68:
7b:81:3e:bd:23:e9:5d:c4:f4:a1:d2:6c:4c:97:e0:
81:ad:aa:bb:12:b0:1f:0a:09:7a:ab:09:ee:38:02:
51:38:de:43:10:56:63:f9:ca:48:8a:ee:b0:88:27:
9b:30:4a:50:04:ac:0e:db:97:3a:c5:64:04:30:14:
2f:14:ae:2f:db:22:a3:33:0a:19:30:0c:eb:c7:91:
81:bc:67:9b:31:36:fd:ef:9b:9d:fd:c1:08:ba:6d:
3b:1d:7a:c1:5b:59:7d:b0:96:9e:e8:f3:45:8e:b9:
6f:c9:56:99:96:e8:e6:42:40:e1:29:fd:cd:81:4e:
f7:8d:2e:01:f6:ad:51:07:58:f9:d8:ff:e9:cf:a1:
3f:c0:b5:93:a5:ef:48:4c:02:7b:80:03:6a:b6:d9:
46:6c:a5:51:cc:5b:12:c0:59:74:18:5f:c1:f4:3f:
8b:51:cf:2e:3b:3e:52:cd:f8:7a:7b:1d:ff:6b:54:
83:50:0f:43:86:4c:18:a9:1b:ac:bd:9b:29:f7:88:
4a:45:8a:5b:ee:50:ff:68:6d:b9:7e:88:23:55:d0:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:B8:E6:85:6F:3E:40:BC:9A:E2:04:7B:3C:A8:79:E5:73:7B:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCDAA4F4841611F1B2B28CE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b8:37:da:a2:92:cb:10:b7:10:55:d6:0c:7b:43:9c:8a:25:
d4:d3:76:1d:f4:2f:a6:8d:cb:e5:da:e5:c0:ea:ec:32:c9:2f:
ae:1f:7b:3f:36:51:17:b6:da:b7:6f:fa:9a:46:f4:85:a2:5f:
30:6c:19:2d:9d:ed:47:f8:bf:27:db:ff:b3:eb:c3:18:10:c8:
e2:1e:cf:93:4c:2f:6c:6a:86:32:91:1a:f9:d9:da:0b:fc:eb:
d9:98:c9:c7:52:c8:4c:27:41:a6:f8:f6:19:9c:80:2f:0b:70:
1c:31:ed:18:bc:47:b0:67:14:c5:8e:fb:87:77:6e:2d:00:fd:
e9:a8:3b:c8:6a:85:48:54:f7:81:13:d4:1f:d3:54:57:ba:c9:
27:2b:a4:13:6e:ea:46:20:6b:5d:d1:af:54:b1:64:36:67:b6:
4c:0c:4a:a4:48:1c:42:85:1d:3f:f3:40:98:c9:31:79:f1:fc:
e0:fb:52:80:2a:46:6d:31:5b:94:fd:3f:1f:c8:43:e4:19:df:
7c:31:d4:3d:1a:5e:37:74:8d:84:b1:55:3b:2f:33:25:a5:45:
b3:4b:ab:40:bb:5a:84:d6:03:49:c7:54:dc:e5:2a:54:c9:72:
75:0e:d6:0f:8c:c0:25:59:2d:aa:be:6a:6b:5f:c3:12:e7:d9:
8a:a4:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:06 2026 by rpki-client