Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF4002A879D911F1B5378C14CF1D38B0.roa
File: BF4002A879D911F1B5378C14CF1D38B0.roa (raw, json)
Hash identifier: t/Q9hAhjQlPs1S+EqtNzTUfc/5ZQphrFw6YJE5bXPis=
Subject key identifier: 8E:FE:65:0F:C9:12:B5:95:DA:4E:48:52:2B:75:EA:5E:D5:EA:91:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D761
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF4002A879D911F1B5378C14CF1D38B0.roa
Signing time: Tue 07 Jul 2026 07:59:15 +0000
ROA not before: Tue 07 Jul 2026 07:59:10 +0000
ROA not after: Wed 05 Aug 2026 07:59:10 +0000
asID: 273937
IP address blocks: 154.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120673 (0x1d761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 07:59:10 2026 GMT
Not After : Aug 5 07:59:10 2026 GMT
Subject: CN=6a4cb1d3-2999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:2b:51:d4:bc:e4:57:e5:ee:87:cb:06:19:
92:c8:82:2d:0f:96:31:bf:e2:1a:35:2d:89:2c:94:
96:26:41:ca:2e:42:0f:ec:41:26:a3:bd:87:ed:21:
49:26:10:db:92:df:a3:a1:02:e0:97:0d:94:db:5c:
2c:5d:f5:06:8f:58:64:da:be:45:a1:34:db:8a:e9:
bb:f4:ca:d5:b9:e9:00:63:51:d7:90:cc:f6:0c:6c:
a7:e1:03:8a:f7:5f:1c:b1:88:f1:fd:7c:fa:09:60:
64:35:60:46:2f:b9:73:46:11:76:c7:3c:0d:db:5c:
6b:5e:26:80:3d:50:c5:c0:30:70:a8:a0:43:ee:86:
be:0a:04:4b:0f:39:6f:c7:1f:d6:8a:78:70:86:b9:
26:56:89:a6:4b:38:0c:f0:45:3a:b1:2f:29:6e:2e:
9d:51:8f:2d:08:d8:db:0d:d5:bf:20:1a:75:a2:cf:
bf:37:a6:35:84:99:95:74:4a:7c:63:8d:96:0e:00:
9c:ad:97:10:00:55:e7:f3:2e:c0:7f:19:d9:fa:f6:
d8:5d:cb:4d:c0:5d:25:1a:91:66:04:7f:64:5d:df:
a4:e0:0e:1d:6c:0a:eb:8d:af:72:a0:4e:e5:89:f2:
f2:ad:a9:9a:30:20:78:5b:ae:56:57:b0:bc:61:35:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:65:0F:C9:12:B5:95:DA:4E:48:52:2B:75:EA:5E:D5:EA:91:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF4002A879D911F1B5378C14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:91:e5:57:ff:52:af:cd:6c:76:e2:b1:ad:ff:4e:88:55:77:
64:b7:07:c2:ac:65:99:5f:94:77:df:3c:81:51:e9:81:b3:48:
61:cf:d8:d8:2e:6b:9a:32:f0:a7:d1:17:e4:79:0a:12:43:31:
27:71:ed:1b:d7:15:7e:31:01:7e:22:44:da:f0:67:bd:ae:9b:
78:a1:62:cd:92:9d:66:37:6e:74:fa:10:cc:41:39:17:01:1d:
aa:83:c4:29:8f:d0:03:f2:51:01:56:2d:ad:35:d0:b2:1b:7d:
f7:a9:51:15:86:7e:0f:91:1f:58:89:f5:8d:c0:45:9b:18:ff:
54:96:1c:cb:bb:15:67:c3:be:40:ab:f4:42:15:35:4d:4b:59:
44:00:e7:30:83:90:80:71:25:37:fd:75:20:56:10:5c:e7:30:
ea:d4:f4:e1:1e:1b:eb:b0:15:c9:00:6f:bc:d0:4e:7a:0b:30:
3b:4e:32:9e:14:7e:99:42:5d:b0:fd:f3:f0:b9:8c:37:57:52:
9e:3c:2d:58:3e:92:0b:a6:5e:65:0e:ac:91:2d:1f:9a:0d:de:
1b:61:86:ba:a7:e6:0f:7c:bc:fc:83:aa:13:ac:e1:51:61:1f:
3a:69:f4:59:f8:78:f6:22:cf:90:54:d0:b6:f3:db:7b:18:a9:
ed:c0:3f:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAddhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzA3MDc1OTEwWhcNMjYwODA1MDc1OTEwWjAYMRYw
FAYDVQQDEw02YTRjYjFkMy0yOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1TArUdS85Ffl7ofLBhmSyIItD5Yxv+IaNS2JLJSWJkHKLkIP7EEmo72H
7SFJJhDbkt+joQLglw2U21wsXfUGj1hk2r5FoTTbium79MrVuekAY1HXkMz2DGyn
4QOK918csYjx/Xz6CWBkNWBGL7lzRhF2xzwN21xrXiaAPVDFwDBwqKBD7oa+CgRL
Dzlvxx/WinhwhrkmVommSzgM8EU6sS8pbi6dUY8tCNjbDdW/IBp1os+/N6Y1hJmV
dEp8Y42WDgCcrZcQAFXn8y7AfxnZ+vbYXctNwF0lGpFmBH9kXd+k4A4dbArrja9y
oE7lifLyramaMCB4W65WV7C8YTVWQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI7+
ZQ/JErWV2k5IUit16l7V6pE5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRjQwMDJBODc5RDkxMUYxQjUzNzhDMTRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmli6MA0GCSqGSIb3DQEB
CwUAA4IBAQA+keVX/1KvzWx24rGt/06IVXdktwfCrGWZX5R33zyBUemBs0hhz9jY
LmuaMvCn0RfkeQoSQzEnce0b1xV+MQF+IkTa8Ge9rpt4oWLNkp1mN250+hDMQTkX
AR2qg8Qpj9AD8lEBVi2tNdCyG333qVEVhn4PkR9YifWNwEWbGP9UlhzLuxVnw75A
q/RCFTVNS1lEAOcwg5CAcSU3/XUgVhBc5zDq1PThHhvrsBXJAG+80E56CzA7TjKe
FH6ZQl2w/fPwuYw3V1KePC1YPpILpl5lDqyRLR+aDd4bYYa6p+YPfLz8g6oTrOFR
YR86afRZ+Hj2Is+QVNC289t7GKntwD9j
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:28 2026 by rpki-client