Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE354324858611F1975681A6CE1D38B0.roa
File: BE354324858611F1975681A6CE1D38B0.roa (raw, json)
Hash identifier: MQCE7pU6YFBLvFDi6fil00aGMdwU+W4eIMD+A2UicBM=
Subject key identifier: CB:40:7E:75:0B:83:2F:17:14:7B:B2:47:32:43:58:2A:81:D7:7E:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE354324858611F1975681A6CE1D38B0.roa
Signing time: Wed 22 Jul 2026 04:35:19 +0000
ROA not before: Wed 22 Jul 2026 04:35:15 +0000
ROA not after: Wed 09 Sep 2026 04:35:15 +0000
asID: 395793
IP address blocks: 154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121539 (0x1dac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 04:35:15 2026 GMT
Not After : Sep 9 04:35:15 2026 GMT
Subject: CN=6a604887-bafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:5c:93:12:f2:90:07:7e:c9:a8:82:9e:1a:
eb:d6:f7:f6:f6:ba:4e:39:23:69:c4:12:b5:d2:f5:
cd:26:75:ed:69:8c:e8:58:6e:91:4a:ca:4e:01:d8:
e1:40:47:ec:5a:02:16:50:5f:db:c2:6e:02:56:ce:
30:33:96:fc:a0:39:6b:68:06:c2:21:cf:00:b5:21:
66:0b:d8:3a:26:bb:da:44:c1:f9:47:d0:5e:37:df:
e3:4c:97:98:8f:fe:54:a8:c1:68:6b:f7:7a:b9:0b:
4c:b2:af:77:d4:eb:bf:15:26:5d:eb:ff:c7:e4:ea:
a5:0a:5b:15:4a:40:86:42:6e:78:82:e3:e0:12:dc:
cd:c3:c2:7e:97:17:da:b5:f4:44:9e:3a:ab:9e:04:
20:14:f3:6d:5f:c6:91:8c:d1:aa:e3:4b:36:68:fb:
92:4c:f2:4a:c5:d6:23:bf:4f:95:e8:db:8c:1a:74:
2f:21:59:cd:16:01:e3:ab:70:96:36:5f:74:9f:42:
d7:b9:cb:fe:5d:a5:54:34:d5:cd:e1:4d:58:b9:04:
5a:e0:9a:29:5a:90:7a:75:14:08:81:b3:a8:31:64:
cd:42:7b:38:ae:c2:59:d9:d0:24:06:76:96:c8:11:
cf:48:ec:4b:c4:24:3f:1a:ec:64:9c:1f:27:59:73:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:40:7E:75:0B:83:2F:17:14:7B:B2:47:32:43:58:2A:81:D7:7E:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE354324858611F1975681A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.9.0-154.83.11.255
Signature Algorithm: sha256WithRSAEncryption
a7:cb:8d:b9:de:1e:b6:91:7e:72:e4:21:9d:bf:45:77:55:8d:
9e:70:9c:e7:75:8f:43:8f:b5:f8:e4:bd:57:ab:9d:7e:78:1f:
90:c7:b9:0b:49:ca:f1:62:39:46:7a:c1:84:d9:c0:41:89:b5:
68:17:b9:9b:48:26:83:54:e3:ba:b4:8d:1d:d4:ed:78:1a:67:
f2:50:e6:35:21:03:5a:af:b7:5c:2e:b4:e8:0a:e6:ba:85:fc:
09:5b:4b:07:8a:10:ed:8d:4b:bc:9e:bd:5c:01:87:56:26:36:
6f:82:83:ec:08:e7:7e:fa:c0:d7:30:e4:62:32:66:a6:59:98:
32:29:c7:9c:cf:44:01:a6:74:ec:e7:ff:da:10:f6:2d:14:23:
0d:c8:20:ea:aa:55:46:56:74:5b:e7:6c:47:2f:a6:37:b6:5b:
9a:34:12:34:39:b1:44:25:18:63:63:2b:78:96:3e:4f:94:97:
54:37:b9:ea:83:2e:9e:40:c9:00:79:f3:1c:7a:39:3b:9a:8c:
f5:53:c9:20:a2:62:94:91:44:17:b7:09:2d:d8:bb:82:34:c1:
bb:66:ec:36:c3:0c:14:df:0c:22:6b:8b:42:54:91:df:04:c7:
63:dc:27:18:1b:2f:fc:a2:4e:6c:11:c1:a4:d7:7e:df:83:a0:
0d:34:2e:0a
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdrDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIyMDQzNTE1WhcNMjYwOTA5MDQzNTE1WjAYMRYw
FAYDVQQDEw02YTYwNDg4Ny1iYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApcxckxLykAd+yaiCnhrr1vf29rpOOSNpxBK10vXNJnXtaYzoWG6RSspO
AdjhQEfsWgIWUF/bwm4CVs4wM5b8oDlraAbCIc8AtSFmC9g6JrvaRMH5R9BeN9/j
TJeYj/5UqMFoa/d6uQtMsq931Ou/FSZd6//H5OqlClsVSkCGQm54guPgEtzNw8J+
lxfatfREnjqrngQgFPNtX8aRjNGq40s2aPuSTPJKxdYjv0+V6NuMGnQvIVnNFgHj
q3CWNl90n0LXucv+XaVUNNXN4U1YuQRa4JopWpB6dRQIgbOoMWTNQns4rsJZ2dAk
BnaWyBHPSOxLxCQ/GuxknB8nWXPqhQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFMtA
fnULgy8XFHuyRzJDWCqB135FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRTM1NDMyNDg1ODYxMUYxOTc1NjgxQTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaUwkDBAKaUwgwDQYJ
KoZIhvcNAQELBQADggEBAKfLjbneHraRfnLkIZ2/RXdVjZ5wnOd1j0OPtfjkvVer
nX54H5DHuQtJyvFiOUZ6wYTZwEGJtWgXuZtIJoNU47q0jR3U7XgaZ/JQ5jUhA1qv
t1wutOgK5rqF/AlbSweKEO2NS7yevVwBh1YmNm+Cg+wI5376wNcw5GIyZqZZmDIp
x5zPRAGmdOzn/9oQ9i0UIw3IIOqqVUZWdFvnbEcvpje2W5o0EjQ5sUQlGGNjK3iW
Pk+Ul1Q3ueqDLp5AyQB58xx6OTuajPVTySCiYpSRRBe3CS3Yu4I0wbtm7DbDDBTf
DCJri0JUkd8Ex2PcJxgbL/yiTmwRwaTXft+DoA00Lgo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:09:57 2026 by rpki-client