Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB17E9A8F1611F18FAF48FDCE1D38B0.roa
File: 0BB17E9A8F1611F18FAF48FDCE1D38B0.roa (raw, json)
Hash identifier: BCNs1D0h22hErbUTxYn4/eKa4fobwFutyB0bRtrpX0M=
Subject key identifier: 52:15:F9:BE:5D:0E:DF:46:35:20:7F:45:62:13:E1:5E:54:10:16:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB17E9A8F1611F18FAF48FDCE1D38B0.roa
Signing time: Mon 03 Aug 2026 08:33:48 +0000
ROA not before: Mon 03 Aug 2026 08:33:44 +0000
ROA not after: Wed 09 Sep 2026 08:33:44 +0000
asID: 44559
IP address blocks: 154.210.238.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
154.219.92.0/24 maxlen: 24
154.219.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121976 (0x1dc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 08:33:44 2026 GMT
Not After : Sep 9 08:33:44 2026 GMT
Subject: CN=6a70526c-94c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0d:a8:57:19:01:b5:1a:d8:52:32:2f:c5:d2:
e1:ad:63:bf:a5:0b:d7:b5:4b:dd:9e:a7:63:aa:79:
a9:d0:1d:ea:97:de:ff:58:d8:dc:ce:61:f3:f8:92:
f4:38:4b:e3:8e:92:c7:3e:dc:07:06:6b:2f:cc:f5:
ed:f6:bf:d5:ef:07:d2:92:67:82:d4:f5:b1:26:64:
04:2e:d4:b1:ec:b9:5e:8f:e1:1a:1e:52:7b:21:69:
fb:f4:48:f0:ac:02:03:97:8d:a1:a1:2c:bf:ef:66:
86:68:28:85:d0:3c:f0:32:86:3a:03:c7:36:0f:45:
10:7d:cd:2e:00:8b:c6:93:0a:ae:10:ee:90:97:95:
8b:2f:45:65:99:5e:84:4c:a3:5e:9b:b2:ac:ca:7c:
a7:a2:85:58:30:a5:c4:d7:80:6e:c7:bc:22:7b:35:
fe:a6:11:90:cd:bd:ba:9d:67:d9:e3:58:d8:bb:d9:
cd:87:d3:2f:10:90:76:32:0f:de:29:45:5f:cf:a5:
65:04:d8:c6:cd:67:7c:a1:0f:14:9b:c6:be:d6:46:
8f:39:cc:ff:ba:03:3c:33:49:b0:0c:6f:02:db:06:
e7:d0:ee:88:19:77:f7:96:4c:1d:4e:9e:cf:f3:f3:
20:f1:9b:43:28:5c:20:c2:45:21:a1:c3:94:43:6f:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:F9:BE:5D:0E:DF:46:35:20:7F:45:62:13:E1:5E:54:10:16:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB17E9A8F1611F18FAF48FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.238.0/24
154.219.71.0-154.219.72.255
154.219.90.0-154.219.93.255
Signature Algorithm: sha256WithRSAEncryption
0d:a4:e4:ab:ea:39:ac:ea:c6:23:46:8a:f7:82:ce:f8:61:33:
53:d3:3f:e8:32:1a:86:5b:83:55:db:68:65:d7:d1:b2:74:de:
35:c4:2a:0b:19:12:35:ae:22:24:20:d5:49:4b:6c:fe:c1:b4:
53:d5:7e:8b:fd:b5:8d:a0:95:73:4b:a7:62:65:71:6e:02:32:
43:27:f3:27:10:3f:d8:6b:57:10:e9:a4:a0:3e:41:a7:b6:7a:
8f:f1:72:10:9e:26:49:d1:57:de:fd:08:ab:ea:24:16:cd:fd:
b0:6d:9f:4b:49:e9:df:8a:92:0e:5c:1e:c2:72:80:f6:b7:62:
00:1e:60:55:ea:4f:dc:cc:34:cb:6b:98:53:0f:7a:a3:7c:76:
81:7a:3e:5f:f2:71:8b:a9:bb:c9:d0:9f:63:6c:68:03:c0:4f:
3b:6a:17:c2:0f:87:33:c2:43:8d:49:3d:18:cf:71:13:21:3a:
2b:35:ff:90:20:ed:fa:59:93:cf:c0:ef:3e:f4:df:d5:21:30:
76:54:c0:2d:32:17:cc:51:6e:02:01:00:86:dd:73:b7:79:d0:
af:28:c7:d2:a4:b4:10:85:3c:85:e0:26:36:99:4d:38:a0:f6:
45:47:70:f0:1d:fe:ae:96:f5:83:0f:66:61:8e:f3:f2:c9:5c:
55:97:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:41 2026 by rpki-client