Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB448020922A11F1874600ABCE1D38B0.roa
File: BB448020922A11F1874600ABCE1D38B0.roa (raw, json)
Hash identifier: CHXFhCC5zgv1MUJ47C5NE2qO+QYfXcDXkjGTvk9xcR4=
Subject key identifier: 41:C5:0E:A1:B9:B7:50:7E:50:EA:DE:04:F6:14:B4:30:45:4B:DA:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB448020922A11F1874600ABCE1D38B0.roa
Signing time: Fri 07 Aug 2026 06:39:26 +0000
ROA not before: Fri 07 Aug 2026 06:39:21 +0000
ROA not after: Sat 05 Sep 2026 06:39:21 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122143 (0x1dd1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 06:39:21 2026 GMT
Not After : Sep 5 06:39:21 2026 GMT
Subject: CN=6a757d9d-6234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:17:d2:8a:83:c7:e3:b2:1f:fa:53:44:26:
1b:47:df:db:4a:af:55:be:bb:ef:9b:eb:93:51:fb:
b3:d2:2c:83:dc:87:c4:4c:18:c9:ba:a3:b3:f2:10:
2f:75:e3:46:22:c7:3f:f5:fd:c0:2c:a9:8b:12:61:
c2:5f:f7:b4:12:0c:35:3e:87:97:f7:26:87:78:29:
77:fd:1e:15:ae:41:4a:4b:91:01:3a:73:d2:54:78:
2f:17:79:e4:a1:8a:04:ad:23:e8:54:90:f5:34:89:
f8:a3:1a:8b:d8:72:58:54:91:58:f1:5a:98:0f:3e:
0d:9a:b1:4a:93:7c:78:fc:43:fd:e0:0d:34:29:da:
6f:bd:2b:47:88:c9:2a:95:76:d9:81:b4:05:77:04:
73:e5:36:a1:c6:48:36:1b:50:d7:0c:7b:28:e4:44:
8e:ae:8a:16:a9:c5:c6:95:e0:1b:f0:45:4d:97:30:
78:8d:ed:2d:9f:ee:ce:3b:97:b7:71:04:72:4f:2b:
5b:c3:66:e8:3b:89:29:a7:08:c2:65:f7:f5:20:72:
c7:70:88:1a:5a:1b:b9:77:fa:1b:a6:62:f8:fd:7d:
92:b4:f9:02:e2:1b:72:1b:3e:4a:05:b7:7d:40:26:
b5:dc:a6:73:ee:c9:ea:37:c0:25:25:c6:29:67:e7:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:0E:A1:B9:B7:50:7E:50:EA:DE:04:F6:14:B4:30:45:4B:DA:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB448020922A11F1874600ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:78:53:b4:d9:27:ae:58:e2:5d:74:76:a3:b7:97:d1:fd:ab:
26:4c:a6:76:0f:b2:79:17:a2:db:ca:62:33:38:e7:fa:1a:9a:
f7:e9:0f:4a:aa:09:cc:9f:07:3a:9b:1c:05:ce:5c:3c:d5:a5:
38:88:35:ca:44:34:79:cb:42:a1:ee:e2:79:43:cd:11:8f:95:
97:d0:81:d6:3b:ef:81:d3:61:30:dc:96:29:04:30:7c:22:a5:
73:82:be:2e:6e:d8:9f:7e:01:5f:1e:24:d3:cd:e9:10:84:52:
c3:4e:9c:16:08:5e:f0:54:d4:b1:2f:fb:92:a6:c7:eb:88:49:
3b:9e:8d:a9:6c:4e:38:24:ff:f1:aa:7c:34:c6:f4:de:ad:6d:
a5:7f:45:95:bd:88:42:a1:e2:d7:fc:59:04:81:e3:c0:be:af:
15:7e:51:31:79:bc:9b:fb:7a:0d:35:59:9f:9b:be:ce:d2:00:
ac:e6:11:cb:22:a7:ff:46:1c:c6:06:70:19:82:c3:ae:a8:a0:
25:85:e6:f2:8a:0c:f1:7e:b0:08:da:7f:77:4c:c9:2a:52:b4:
88:05:c1:7d:a7:81:90:32:47:31:3a:29:bd:b8:06:ef:99:74:
45:4a:f8:b7:6b:3d:76:ed:a6:8c:90:3d:96:c3:78:34:fc:77:
1f:85:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:16 2026 by rpki-client