Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2484E0529311F1BCD7B901CF1D38B0.roa
File: BB2484E0529311F1BCD7B901CF1D38B0.roa (raw, json)
Hash identifier: 2psOmEZjJdKJMwQH8itS9ZaCtzLSaJ30OQFvX9/LSAc=
Subject key identifier: 88:A6:74:7C:88:36:A5:AE:58:4A:1A:D3:02:B8:D9:CB:6E:4A:9C:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2484E0529311F1BCD7B901CF1D38B0.roa
Signing time: Mon 18 May 2026 08:29:48 +0000
ROA not before: Mon 18 May 2026 08:29:43 +0000
ROA not after: Thu 02 Jul 2026 08:29:43 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117835 (0x1cc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 18 08:29:43 2026 GMT
Not After : Jul 2 08:29:43 2026 GMT
Subject: CN=6a0acdfc-d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:2a:f8:30:a2:21:d7:e8:d2:27:67:36:7f:
c6:14:e4:1e:8a:02:97:2a:50:3a:6f:c6:16:61:e3:
fc:71:6a:a7:22:3e:56:a9:52:df:3e:59:38:26:86:
84:d4:ae:fb:4d:4b:33:d5:a2:33:c0:c9:fc:7d:5b:
21:aa:6f:f9:31:16:17:24:6f:a8:43:82:f6:b4:3f:
45:58:a1:be:b9:2d:98:83:46:56:87:eb:3f:6e:95:
fe:c6:77:68:03:78:12:ea:82:d6:83:ab:95:97:0e:
61:fd:e5:5f:ef:fd:0e:9f:c2:5d:1e:7f:44:56:3f:
16:a0:5a:14:23:ea:7b:4f:8a:8a:28:b7:dd:d2:8a:
58:19:fc:5d:10:ab:34:3e:7a:47:71:61:54:ca:30:
58:9e:ec:3d:f4:9f:fe:74:14:43:10:42:04:32:cc:
13:23:7b:33:89:66:0e:98:43:8f:35:da:33:99:c0:
a6:57:5e:52:17:4d:70:8b:26:3f:7e:de:8e:68:7c:
bc:3c:66:16:e3:66:c5:a3:53:8d:8e:f6:34:03:69:
79:1c:be:30:bd:a1:42:13:54:52:a4:d2:86:97:cd:
62:37:28:8a:e2:88:ce:35:8a:89:38:59:aa:d8:0f:
5b:2f:f3:e4:93:80:61:57:ab:3d:2d:41:77:5d:50:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:74:7C:88:36:A5:AE:58:4A:1A:D3:02:B8:D9:CB:6E:4A:9C:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2484E0529311F1BCD7B901CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
Signature Algorithm: sha256WithRSAEncryption
66:40:25:9a:d5:4e:c8:09:be:ac:e8:44:d6:86:ff:c9:dc:0a:
7b:53:7e:21:73:6a:64:a6:13:ce:de:56:0d:f7:fd:e5:40:28:
6f:8b:7f:a7:7e:e3:3e:8e:e4:27:4b:05:16:41:c4:b2:8c:db:
3e:68:de:0f:64:9e:fa:03:df:f6:a7:58:61:82:86:f9:40:2e:
e8:4f:ff:f4:de:19:a2:5b:4a:49:b4:c8:56:a7:16:9e:f1:50:
e9:68:32:1e:ec:d8:88:85:a7:ad:4c:95:7a:d7:3f:2e:d5:13:
bf:ae:ab:7e:6b:2b:6e:e6:ef:64:0a:fa:7e:77:88:54:a5:04:
94:2d:db:a6:df:8c:fa:8d:93:85:07:2a:d7:ad:f9:d8:6a:72:
f3:cb:8b:09:4b:2a:85:13:65:b7:cb:51:18:6f:7a:10:cd:c3:
ab:8b:9e:9f:67:d9:13:52:35:25:aa:48:e5:d8:27:61:c4:12:
43:ca:c8:c5:7b:0b:75:58:ae:2e:02:9d:a5:38:ff:e3:cf:df:
89:8b:d2:f6:7a:95:42:e5:7d:96:8a:ec:6b:a7:ee:81:2b:17:
d1:88:e9:80:72:d8:a7:21:76:8d:c0:54:c6:a4:af:cc:e2:37:
20:f8:da:bf:2b:54:1e:0f:80:26:ae:1e:01:2a:d4:08:30:65:
ce:4d:3b:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:23 2026 by rpki-client