Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BED3E66684DA11F1A4088A0ECF1D38B0.roa
File: BED3E66684DA11F1A4088A0ECF1D38B0.roa (raw, json)
Hash identifier: VhXJE7uIDEMocr01///p1mf/x5REMBUTelN7nPrK6DI=
Subject key identifier: B9:15:60:24:2D:69:42:9F:43:29:FE:2B:B7:F1:55:0B:34:93:EC:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BED3E66684DA11F1A4088A0ECF1D38B0.roa
Signing time: Tue 21 Jul 2026 08:04:07 +0000
ROA not before: Tue 21 Jul 2026 08:04:03 +0000
ROA not after: Thu 27 Aug 2026 08:04:03 +0000
asID: 151196
IP address blocks: 154.90.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121426 (0x1da52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 08:04:03 2026 GMT
Not After : Aug 27 08:04:03 2026 GMT
Subject: CN=6a5f27f7-a2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:e3:f6:ea:aa:dc:f5:0f:2f:28:45:b8:6d:
fc:5b:b9:fa:c4:e4:31:b1:a6:c9:5f:71:8d:19:cc:
94:e1:03:56:35:83:ec:c5:cf:44:8b:91:78:49:42:
8d:bd:ff:ca:7f:13:4e:5a:c8:6e:06:96:bb:cf:ac:
15:43:11:94:34:7b:75:52:b0:b8:22:35:7e:5c:de:
f1:6b:c7:97:9d:87:45:1a:69:54:ef:cc:33:7b:8d:
20:73:32:a0:35:79:53:43:dc:ac:e9:31:1e:84:e8:
4d:e5:65:f9:ec:f0:53:59:55:e7:60:2f:d4:fb:68:
77:0d:08:ff:b4:bb:a5:4b:18:45:5c:32:3e:53:38:
ea:37:24:ae:28:6d:90:8b:d4:3a:90:f4:45:c8:b0:
1a:d1:9e:d0:78:18:32:d3:c7:6d:d1:49:e0:80:97:
55:cb:c2:ae:dc:6a:75:42:01:e2:b7:e6:6c:97:1f:
60:7e:d3:62:80:17:5b:52:ef:e5:53:ca:d6:fa:4f:
40:60:d2:25:66:c0:9b:11:ff:75:4a:fb:29:74:9c:
be:29:b7:90:fb:16:22:8f:35:1c:68:ea:66:c1:82:
ac:6a:fe:f1:a2:e3:51:b4:cc:3c:5d:be:92:76:33:
73:45:1e:53:12:2c:21:67:66:4d:6a:cf:28:9e:8f:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:60:24:2D:69:42:9F:43:29:FE:2B:B7:F1:55:0B:34:93:EC:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BED3E66684DA11F1A4088A0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.66.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0d:f1:8d:59:10:5a:1a:91:7a:c2:50:71:82:f3:ae:5a:07:
e1:30:fb:74:11:71:76:be:c2:bb:ef:c5:8a:19:ce:91:5d:de:
85:15:8b:d6:a7:99:8a:50:43:e3:44:e6:f3:ab:8a:a4:88:88:
c3:c1:d1:74:11:62:d9:b1:c2:dc:07:b8:b7:cc:5a:13:8c:27:
6a:c3:f6:29:cb:70:9c:47:c3:99:69:b5:c4:fa:4f:bc:72:42:
0c:74:4a:32:69:ce:c7:af:ee:1f:ad:00:f4:c2:cc:91:8f:fd:
d2:8a:c1:de:85:df:41:5a:6e:75:b8:1d:45:0b:50:73:14:eb:
ea:bb:c4:54:f3:51:64:3e:42:4c:d7:b7:10:31:26:ae:8e:a4:
6f:52:ec:46:b6:b5:9c:c1:3b:ea:c5:d0:78:16:23:05:b8:75:
2b:8b:c0:50:64:f3:29:b2:b0:a0:9b:97:f0:13:62:c0:13:2f:
11:a8:48:ad:db:fe:32:c8:c9:52:5b:36:23:02:91:1b:ea:68:
95:88:e6:bf:06:b7:c4:ca:61:9f:62:26:df:cf:bc:aa:1f:d4:
05:21:52:8e:29:ab:88:92:01:db:6c:3b:bd:98:02:51:16:42:
d7:5f:94:73:49:7e:fd:c1:7a:54:24:bd:cf:ba:92:c8:0a:a4:
a8:0c:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:03 2026 by rpki-client