Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA92084739011F1B6B9B4DFCE1D38B0.roa
File: 0BA92084739011F1B6B9B4DFCE1D38B0.roa (raw, json)
Hash identifier: 3SkrbihYSONd+pA6ICysIUqz1E3tAXmWTjaG8YdjyUg=
Subject key identifier: 8D:0C:F5:CF:5A:D8:EB:00:D8:AF:86:CB:56:68:D7:25:C3:11:6D:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA92084739011F1B6B9B4DFCE1D38B0.roa
Signing time: Mon 29 Jun 2026 07:56:34 +0000
ROA not before: Mon 29 Jun 2026 07:56:29 +0000
ROA not after: Thu 06 Aug 2026 07:56:29 +0000
asID: 44559
IP address blocks: 154.209.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120288 (0x1d5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 07:56:29 2026 GMT
Not After : Aug 6 07:56:29 2026 GMT
Subject: CN=6a422531-d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:48:ef:2d:5a:20:99:8b:1c:4e:b5:14:a1:
dc:55:9d:e8:49:34:ab:ff:0e:8b:a2:e1:9c:75:0c:
77:a2:f5:de:36:b6:7a:3c:1f:0a:28:ba:6c:72:9f:
50:0e:73:78:78:c1:8d:65:4c:24:fb:4d:c6:84:d2:
54:a6:c6:4f:6c:3a:d6:a6:92:ea:9c:d8:21:b1:86:
e4:20:55:a3:cb:ac:1c:fc:b5:1c:bf:ae:b9:ee:a6:
21:20:be:bf:29:e6:25:38:51:1c:60:7d:e4:4e:fe:
e9:bf:29:84:eb:03:4b:b6:c8:9c:74:11:25:e1:c5:
cf:4f:98:24:e6:aa:48:df:9b:2d:8a:f6:a6:5c:f5:
16:ae:3c:be:87:95:b6:c9:79:75:9d:01:f9:9f:c0:
3d:b1:39:c7:16:2a:de:e3:f0:d4:79:60:1d:28:c2:
d9:95:ca:7b:8f:bb:15:21:07:8f:f1:78:2b:5c:e5:
3a:df:8a:44:29:27:d9:2d:34:5b:96:f9:be:a3:33:
54:75:55:68:5c:fd:fd:38:cc:4c:a7:b0:89:ff:58:
d2:ba:4b:c2:7a:f0:08:20:07:a6:41:d6:e3:15:0e:
01:2b:41:8f:ae:00:30:e7:e3:43:75:43:ec:63:69:
ea:6d:d2:b7:c3:58:51:c5:c3:bc:65:1e:f3:a1:4f:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:F5:CF:5A:D8:EB:00:D8:AF:86:CB:56:68:D7:25:C3:11:6D:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA92084739011F1B6B9B4DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fb:eb:c9:3a:41:87:90:f7:2d:9e:93:98:50:71:c7:37:32:
d1:ec:ec:59:44:4e:d1:3f:96:37:7c:6b:6a:b4:78:db:ec:9b:
dc:3e:61:f1:be:b5:56:65:90:00:25:f4:6e:03:9f:00:07:df:
90:d6:c1:47:43:42:ae:06:49:9d:f8:ef:c0:3c:78:66:f5:1a:
0c:16:9f:94:0b:ff:2a:bd:31:12:db:2e:2c:78:73:47:8c:ee:
ae:7c:89:be:6b:da:ab:a7:51:b2:b0:30:7a:16:d3:6a:06:cc:
a5:c9:19:2f:a7:60:4a:de:f9:f0:2c:f5:da:83:5b:10:c7:2f:
b4:3f:1d:3d:03:b2:ac:3a:5a:50:e0:2c:44:6b:6f:68:70:27:
e8:12:64:38:85:66:10:77:1a:8b:b5:53:66:e8:bc:e3:8a:ed:
81:a1:da:c2:ef:f7:30:a4:fa:d8:1e:be:d1:cb:f6:5f:57:61:
ac:2f:5a:bd:83:77:07:7b:6f:98:81:ad:49:48:3c:8e:6e:a8:
9d:fc:f2:6c:69:23:91:2f:41:24:3c:e3:f1:00:66:91:b6:69:
3b:9a:8c:4a:83:3c:26:41:c9:04:d9:95:4f:8c:5a:70:3b:d8:
7b:36:6a:3c:b0:c2:b5:cf:0b:ee:67:0d:84:1a:05:0d:1b:bf:
da:72:0d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:46 2026 by rpki-client