Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB5727286E0A11F188B3B8CECE1D38B0.roa
File: BB5727286E0A11F188B3B8CECE1D38B0.roa (raw, json)
Hash identifier: WLlPAXjkrpn970CCsEdGxBL0U8eczQNndbs2URRldWE=
Subject key identifier: B0:31:68:D7:67:43:67:0C:F4:42:A0:F5:65:45:0A:B2:F8:D2:0F:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D44D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB5727286E0A11F188B3B8CECE1D38B0.roa
Signing time: Mon 22 Jun 2026 07:19:40 +0000
ROA not before: Mon 22 Jun 2026 07:19:35 +0000
ROA not after: Mon 28 Dec 2026 07:19:35 +0000
asID: 18013
IP address blocks: 154.84.32.0/21 maxlen: 24
154.84.40.0/21 maxlen: 24
154.84.48.0/21 maxlen: 24
154.84.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119885 (0x1d44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 07:19:35 2026 GMT
Not After : Dec 28 07:19:35 2026 GMT
Subject: CN=6a38e20c-f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:c2:6b:1e:f1:52:36:b4:67:fc:0e:2b:3d:
13:66:13:55:e3:29:ce:66:1c:a6:74:f4:c2:9a:16:
10:e7:81:a7:b5:bb:2b:be:df:e7:f3:58:f2:42:76:
a0:b7:9f:71:ad:a3:71:89:4f:82:86:21:11:81:44:
55:51:bb:8c:ba:27:b4:80:55:11:b9:b0:e0:df:b2:
5f:6e:50:33:79:48:ce:2d:95:bf:1a:6d:de:a9:46:
ff:4e:9c:14:b7:b2:99:e5:71:fb:72:b2:74:9a:29:
48:4a:0a:7c:f9:77:4c:b6:72:4d:79:28:e6:38:6d:
7c:db:fb:a0:c8:90:4e:69:98:39:29:29:a9:c5:16:
49:bb:e7:0f:ee:ca:d2:f7:55:83:d9:5b:bd:86:6b:
3e:d7:70:98:47:8a:aa:e8:76:b3:93:32:93:71:10:
c5:bf:29:57:6c:48:be:f7:ab:7c:c7:46:d2:c3:8a:
b7:04:df:4f:c0:5c:9b:f4:45:d1:e6:d3:f2:ff:fd:
3d:9d:a4:19:57:87:3d:a6:fe:db:2e:e2:9b:ad:83:
82:a7:44:75:a9:0a:2b:db:8d:3d:82:2d:10:d0:ff:
f1:21:08:18:d1:1e:07:c4:98:28:0b:80:42:08:48:
3d:91:54:93:b0:38:62:90:ab:90:5e:21:31:e3:8c:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:68:D7:67:43:67:0C:F4:42:A0:F5:65:45:0A:B2:F8:D2:0F:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB5727286E0A11F188B3B8CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:95:5a:ba:35:ea:07:5c:66:87:72:a9:c1:b5:8d:f3:31:38:
d4:16:0c:0e:97:de:46:0b:b8:99:13:ca:13:7c:54:ef:a7:a9:
e7:cb:46:09:e9:b5:b2:29:c5:47:ab:eb:46:46:60:cc:84:40:
99:b3:b1:3c:31:af:95:2e:f4:29:32:dc:b2:af:02:6c:6e:c1:
27:2e:67:8b:07:4b:1c:2e:39:3f:7b:07:30:68:9b:1a:d8:20:
9b:00:d1:57:5a:bd:bf:63:bc:76:10:57:e0:66:d1:94:b9:dd:
57:eb:e7:be:d3:c9:8a:13:c3:77:63:9b:da:35:6b:3d:a2:2b:
46:8d:03:f2:dd:4d:f5:74:73:db:4a:e2:4e:7d:c9:37:d1:d9:
14:e2:89:fa:04:32:d3:d7:0f:c8:87:94:5e:d6:11:bc:10:ce:
ec:64:d9:cd:e8:74:e9:34:09:d1:45:5e:fa:6c:48:b8:b5:01:
c3:94:68:b3:eb:d1:8a:e0:23:85:80:61:04:44:55:a2:53:43:
c5:8a:30:92:14:9c:04:f0:6b:af:21:85:1e:24:87:4c:13:17:
e2:56:9b:01:ab:cb:4e:03:e8:bb:41:2a:89:b0:ef:75:ca:3f:
c6:c5:c3:f8:21:a8:cc:e3:7e:ca:62:6a:7b:57:57:9f:b4:ec:
c4:62:d3:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdRNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIyMDcxOTM1WhcNMjYxMjI4MDcxOTM1WjAYMRYw
FAYDVQQDEw02YTM4ZTIwYy1mNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvynCax7xUja0Z/wOKz0TZhNV4ynOZhymdPTCmhYQ54Gntbsrvt/n81jy
Qnagt59xraNxiU+ChiERgURVUbuMuie0gFURubDg37JfblAzeUjOLZW/Gm3eqUb/
TpwUt7KZ5XH7crJ0milISgp8+XdMtnJNeSjmOG182/ugyJBOaZg5KSmpxRZJu+cP
7srS91WD2Vu9hms+13CYR4qq6HazkzKTcRDFvylXbEi+96t8x0bSw4q3BN9PwFyb
9EXR5tPy//09naQZV4c9pv7bLuKbrYOCp0R1qQor2409gi0Q0P/xIQgY0R4HxJgo
C4BCCEg9kVSTsDhikKuQXiEx44wySwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLAx
aNdnQ2cM9EKg9WVFCrL40g90MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjU3MjcyODZFMEExMUYxODhCM0I4Q0VDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlQgMA0GCSqGSIb3DQEB
CwUAA4IBAQA9lVq6NeoHXGaHcqnBtY3zMTjUFgwOl95GC7iZE8oTfFTvp6nny0YJ
6bWyKcVHq+tGRmDMhECZs7E8Ma+VLvQpMtyyrwJsbsEnLmeLB0scLjk/ewcwaJsa
2CCbANFXWr2/Y7x2EFfgZtGUud1X6+e+08mKE8N3Y5vaNWs9oitGjQPy3U31dHPb
SuJOfck30dkU4on6BDLT1w/Ih5Re1hG8EM7sZNnN6HTpNAnRRV76bEi4tQHDlGiz
69GK4COFgGEERFWiU0PFijCSFJwE8GuvIYUeJIdMExfiVpsBq8tOA+i7QSqJsO91
yj/GxcP4IajM437KYmp7V1eftOzEYtPh
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:53 2026 by rpki-client