Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2C1F04700111F1891327B0CE1D38B0.roa
File: BA2C1F04700111F1891327B0CE1D38B0.roa (raw, json)
Hash identifier: hwCAm/Jgq96WiujUg9BdInvSJlz6odh63eS2/zujtj4=
Subject key identifier: 19:5C:58:3A:69:9E:71:4D:7E:A3:83:E2:08:A7:50:D7:85:F7:B7:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2C1F04700111F1891327B0CE1D38B0.roa
Signing time: Wed 24 Jun 2026 19:20:15 +0000
ROA not before: Wed 24 Jun 2026 19:20:10 +0000
ROA not after: Fri 31 Jul 2026 19:20:10 +0000
asID: 62240
IP address blocks: 154.194.120.0/24 maxlen: 24
154.194.121.0/24 maxlen: 24
154.194.122.0/24 maxlen: 24
154.194.123.0/24 maxlen: 24
154.194.124.0/24 maxlen: 24
154.194.125.0/24 maxlen: 24
154.194.127.0/24 maxlen: 24
154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120053 (0x1d4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:20:10 2026 GMT
Not After : Jul 31 19:20:10 2026 GMT
Subject: CN=6a3c2def-1e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:28:42:75:89:9f:46:3a:ae:c2:58:d6:fd:
75:9f:4a:c1:38:39:21:72:29:e4:d6:47:92:14:01:
8a:5f:8a:ea:17:ed:98:e9:51:5b:02:cd:1e:e4:9b:
d8:8e:de:68:51:db:be:b5:b4:57:81:56:94:61:30:
86:36:10:6a:7a:d2:dd:aa:77:12:16:ed:b3:4b:75:
4e:4a:99:a9:04:c6:f0:b1:75:8b:b0:df:58:03:38:
7e:46:87:cc:d5:c4:da:af:f3:0e:40:7f:5b:94:3d:
34:78:06:0d:8a:e6:ec:33:67:08:f7:a4:bc:69:12:
76:04:ed:40:8b:60:0a:c3:4e:5d:a0:9c:09:f6:0d:
a9:1d:71:81:9e:eb:f8:b2:7e:be:b7:94:b7:08:b7:
c2:76:0d:7a:17:2b:f0:4c:4e:14:e0:62:bb:16:3c:
76:97:68:4d:1b:f0:3d:83:50:ad:b3:bb:2b:60:ee:
d0:72:e0:3f:4c:83:aa:a5:6b:5a:ec:05:c1:c4:25:
a6:c8:6f:aa:f4:2e:d5:39:c2:9e:9b:d6:b7:3d:35:
06:0c:30:48:af:e9:d0:76:80:54:f5:21:36:9a:0b:
cf:b3:9b:5f:d2:ac:eb:87:57:e4:f6:ec:cd:aa:3b:
92:2b:02:f2:56:cb:04:e4:99:69:e8:6a:27:24:12:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:58:3A:69:9E:71:4D:7E:A3:83:E2:08:A7:50:D7:85:F7:B7:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2C1F04700111F1891327B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.120.0-154.194.125.255
154.194.127.0/24
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.127.0-154.195.134.255
154.196.62.0/24
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:e4:bb:c7:55:b4:2e:fc:78:1a:76:a7:8b:bf:b3:fc:11:9b:
c0:7c:0c:0e:b3:ac:90:bf:fa:53:5c:6a:37:62:24:49:72:e1:
73:98:f9:15:61:6d:16:01:2a:6e:54:53:77:9c:58:4a:6f:c6:
18:ee:c1:f9:22:07:4e:b5:c7:03:c4:bd:50:9e:ca:41:7d:58:
55:84:e3:48:ec:bf:7b:28:a0:55:dc:e2:8d:f3:4b:c5:bf:37:
1a:9e:3b:94:62:4f:93:04:00:8d:46:81:ad:cf:24:69:ac:10:
db:78:5d:0f:cf:ee:9c:61:08:b2:2c:bf:81:2c:85:f6:40:3e:
bd:2a:5c:6a:23:ed:48:81:98:ea:28:f1:47:83:5a:ae:3d:1e:
74:fe:4f:68:6a:c0:af:9e:8a:3b:aa:34:99:c4:0a:00:be:97:
2c:9e:2c:02:7f:fa:d9:ec:a2:38:a3:c2:f4:d9:e1:9b:0f:73:
29:2d:42:f9:54:a3:86:26:8e:54:5a:29:16:d7:0f:d5:cb:78:
3f:c2:6b:24:2b:7d:2a:34:af:90:b6:ba:0a:dd:3b:6a:d1:d1:
e7:6c:52:8c:40:d4:b9:a9:ab:11:28:c0:eb:70:bd:83:a9:87:
a4:05:69:1a:57:1e:fb:83:d2:0c:03:14:ea:85:ed:d4:64:86:
ac:b2:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:20 2026 by rpki-client