Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA4BD666EB911F1881013EECE1D38B0.roa
File: 2BA4BD666EB911F1881013EECE1D38B0.roa (raw, json)
Hash identifier: IFiJlFlc1yl/Yz1g/lIGHYtK9tF77CBQ7IAyXYfplVo=
Subject key identifier: 5C:5D:21:6D:8E:0D:B8:B9:D8:DE:DA:18:93:C7:43:EF:F2:77:63:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D46A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA4BD666EB911F1881013EECE1D38B0.roa
Signing time: Tue 23 Jun 2026 04:08:21 +0000
ROA not before: Tue 23 Jun 2026 04:08:16 +0000
ROA not after: Tue 30 Jun 2026 04:08:16 +0000
asID: 399077
IP address blocks: 154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
154.91.104.0/24 maxlen: 24
154.91.105.0/24 maxlen: 24
154.91.106.0/24 maxlen: 24
154.91.107.0/24 maxlen: 24
154.91.108.0/24 maxlen: 24
154.91.109.0/24 maxlen: 24
154.91.110.0/24 maxlen: 24
154.91.111.0/24 maxlen: 24
154.91.112.0/24 maxlen: 24
154.91.113.0/24 maxlen: 24
154.91.114.0/24 maxlen: 24
154.91.115.0/24 maxlen: 24
154.91.116.0/24 maxlen: 24
154.91.117.0/24 maxlen: 24
154.91.118.0/24 maxlen: 24
154.91.119.0/24 maxlen: 24
154.91.120.0/24 maxlen: 24
154.91.121.0/24 maxlen: 24
154.91.122.0/24 maxlen: 24
154.91.123.0/24 maxlen: 24
154.91.124.0/24 maxlen: 24
154.91.125.0/24 maxlen: 24
154.91.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119914 (0x1d46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 04:08:16 2026 GMT
Not After : Jun 30 04:08:16 2026 GMT
Subject: CN=6a3a06b5-09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:94:07:a6:36:12:70:34:fa:51:ce:7f:be:
5e:0a:6c:60:fd:2f:83:06:cf:99:ce:eb:59:00:f1:
8f:d2:9c:4e:5f:ff:bf:1d:89:70:04:3b:fe:05:06:
55:e1:4c:be:e8:25:04:17:ea:1f:df:d6:00:20:61:
e3:7b:60:68:35:f0:3d:75:ae:76:03:96:74:2b:1e:
e5:66:90:db:b6:95:e4:69:57:04:b3:9e:0f:57:ff:
54:c2:20:32:9c:c3:a7:eb:fe:da:88:a8:e1:a1:dd:
18:15:5b:6d:80:04:69:aa:63:d0:e6:47:49:6f:9c:
53:19:ec:9c:91:d7:6b:e6:74:ad:70:32:f6:68:f2:
93:a6:1e:4e:84:5e:7c:0e:e3:a6:de:07:95:e7:69:
11:18:29:d4:20:37:3a:9f:49:9d:fe:b8:46:53:d7:
b0:26:5c:67:ff:3a:fb:50:41:98:41:52:2e:b0:74:
c6:80:43:4f:06:a8:e6:88:25:59:c2:96:c1:95:f7:
ed:1e:b2:79:f7:3a:4d:fc:f2:76:e7:9c:3d:b1:53:
bb:12:92:2b:28:e5:25:c3:19:fc:d7:fc:97:a4:cd:
5a:96:fd:fd:ed:20:d1:44:04:fa:1d:cb:2d:8f:2e:
c4:6e:28:51:14:25:89:93:b1:d0:26:9c:63:92:90:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5D:21:6D:8E:0D:B8:B9:D8:DE:DA:18:93:C7:43:EF:F2:77:63:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA4BD666EB911F1881013EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.101.0-154.91.126.255
Signature Algorithm: sha256WithRSAEncryption
c5:46:16:d4:1e:51:8b:32:b2:13:96:d6:2d:64:67:6e:fc:a1:
f7:5c:e8:52:95:86:17:20:96:59:5d:d4:d1:33:5a:be:56:48:
7f:e9:0c:64:b1:87:17:eb:02:79:8e:81:a3:53:a6:44:01:6b:
c8:d5:c4:ad:b1:3d:bc:8f:8c:92:c4:69:4d:7d:21:6d:2f:c6:
63:5c:93:84:22:51:41:cc:98:ba:99:0f:04:fd:3c:f9:6e:4b:
9b:11:af:29:d0:ef:db:7c:47:c7:7f:27:8d:f3:97:60:ba:ad:
77:15:1a:3f:d7:68:1f:79:cf:78:5a:8a:a6:de:60:85:36:83:
d2:4c:c2:a2:7c:32:d8:75:4c:13:e0:5a:d9:b3:b6:4b:67:d2:
3a:10:9f:1c:47:41:78:32:31:31:41:13:11:ac:55:03:2e:6e:
1e:09:1b:56:68:e4:1d:ca:0f:61:01:9c:df:8f:56:84:85:d1:
74:63:90:e4:76:f2:cb:1f:54:23:08:23:70:9e:10:8d:ff:87:
04:15:b7:a6:aa:16:76:17:20:ba:81:f6:97:d6:2d:80:e1:cc:
b6:04:de:1d:f3:58:65:d5:fa:47:7e:ce:6a:b2:49:73:83:e6:
a1:22:ac:a7:3d:83:9b:5d:07:27:ce:25:46:1c:21:2c:2c:e7:
5d:82:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:53 2026 by rpki-client