Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA028EC67B7511F1A3652016CF1D38B0.roa
File: BA028EC67B7511F1A3652016CF1D38B0.roa (raw, json)
Hash identifier: lMkEapvAexfLBuBT6+5vMCWYvXW3Yzih/HhPdVswz6c=
Subject key identifier: 1E:54:42:D1:74:C5:07:46:20:0F:BE:74:9D:3C:AF:5E:F1:70:A2:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA028EC67B7511F1A3652016CF1D38B0.roa
Signing time: Thu 09 Jul 2026 09:08:19 +0000
ROA not before: Thu 09 Jul 2026 09:08:14 +0000
ROA not after: Mon 09 Jul 2029 09:08:14 +0000
asID: 17561
IP address blocks: 154.80.228.0/24 maxlen: 24
154.80.229.0/24 maxlen: 24
154.80.230.0/24 maxlen: 24
154.80.231.0/24 maxlen: 24
154.80.232.0/24 maxlen: 24
154.80.233.0/24 maxlen: 24
154.80.234.0/24 maxlen: 24
154.80.235.0/24 maxlen: 24
154.80.236.0/24 maxlen: 24
154.80.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120770 (0x1d7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 09:08:14 2026 GMT
Not After : Jul 9 09:08:14 2029 GMT
Subject: CN=6a4f6503-0afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:e8:32:e2:93:9e:90:b3:a5:f3:55:69:61:
c4:a3:34:8d:87:1f:ee:57:48:3d:62:8c:a1:2b:32:
7b:d4:9c:08:80:38:dd:02:9d:a9:1c:dd:b1:e3:e1:
07:b1:2a:d1:ca:fa:f4:52:9f:66:ca:3f:3e:41:5a:
ba:c0:49:5f:64:a2:7b:b1:96:44:6f:0d:06:81:4b:
64:69:7a:aa:d2:57:39:c0:10:f4:ee:5d:fe:f9:06:
b3:a8:9c:ab:ab:2a:38:86:79:7e:d2:f0:92:fd:9e:
e0:41:31:e5:42:f1:ba:44:e8:cc:1b:d1:60:a3:3b:
89:5a:f7:ad:b7:3e:38:3c:31:c6:6e:58:8a:cb:e8:
e7:d1:f0:5a:74:5b:f0:2e:00:69:ac:e2:f1:0e:7c:
32:b5:a0:c4:e9:8e:89:6e:cd:08:78:17:5f:88:7b:
73:f6:03:00:94:29:c5:89:55:c1:ec:fc:78:05:f8:
a5:45:56:b3:6b:15:69:9a:32:56:4e:1b:56:f4:ba:
57:8d:19:1a:08:9f:f4:c5:af:97:89:e2:fe:b2:cd:
95:01:4d:df:57:73:c9:88:1d:ae:d5:b7:af:5a:65:
e6:61:c1:e6:2c:cf:0f:6e:e2:88:05:79:b9:6f:39:
ad:37:01:3a:09:a5:51:8e:4e:84:38:98:c8:5a:89:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:54:42:D1:74:C5:07:46:20:0F:BE:74:9D:3C:AF:5E:F1:70:A2:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA028EC67B7511F1A3652016CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.228.0-154.80.237.255
Signature Algorithm: sha256WithRSAEncryption
89:ab:15:a8:14:a7:36:45:dd:03:ee:b2:41:cc:b0:33:ad:1f:
eb:3b:ec:12:52:01:54:4b:06:f5:cc:61:c6:3f:be:7b:ca:09:
06:e6:a4:4d:64:61:51:39:38:e4:dc:13:9e:b1:ff:21:6e:db:
9b:5f:fd:79:fd:31:3c:31:65:76:17:89:f3:71:69:2d:b7:3a:
6f:9d:c6:51:a6:ad:48:9d:6f:45:8f:e8:e8:b2:5d:2a:a8:a7:
06:d7:a9:e0:df:74:b0:c1:59:78:c4:40:98:2a:15:4d:ee:6e:
33:a9:10:af:bd:68:1c:84:f1:00:69:df:db:04:bf:58:62:60:
35:16:15:57:e5:03:46:2b:85:75:8a:93:c5:a2:1c:22:d0:63:
fe:86:fc:a6:22:20:0b:f8:86:d6:60:04:2c:5d:09:c8:39:78:
bc:20:59:f6:23:1f:a9:a7:74:33:b9:6b:03:d1:5a:96:03:80:
fd:a4:af:11:7f:7a:af:6a:23:15:30:31:e6:4f:93:63:e9:c8:
85:c3:64:e8:22:aa:6d:d5:e8:47:76:4f:a0:75:69:21:f5:36:
25:51:a1:94:7f:9a:79:61:e1:18:ba:35:e2:8d:cc:09:70:ba:
96:45:ea:c1:bd:6d:72:7a:f7:8c:bf:b7:79:7c:19:ba:a0:12:
fb:63:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:29 2026 by rpki-client