Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB92DF74448A11F1B87922A4CE1D38B0.roa
File: BB92DF74448A11F1B87922A4CE1D38B0.roa (raw, json)
Hash identifier: Y4vVjN0qIAHxA2MKd3E7nQNoUnHsonCStyZFqwWDJAw=
Subject key identifier: 40:CD:20:82:18:CB:7C:03:1E:6C:E7:8F:C1:43:87:52:C2:F8:A3:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C827
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB92DF74448A11F1B87922A4CE1D38B0.roa
Signing time: Thu 30 Apr 2026 11:50:07 +0000
ROA not before: Thu 30 Apr 2026 11:50:01 +0000
ROA not after: Fri 05 Jun 2026 11:50:01 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116775 (0x1c827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:50:01 2026 GMT
Not After : Jun 5 11:50:01 2026 GMT
Subject: CN=69f341ef-41b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:4b:a4:be:be:94:7f:89:29:37:f1:c6:87:
79:2c:45:34:68:33:66:38:04:76:6c:d2:11:2b:8d:
7c:c5:e1:07:8a:89:09:29:a0:b1:a4:e4:7d:8f:b7:
68:ed:7e:24:1e:9b:d7:61:fd:6f:20:c0:20:b2:31:
e4:f4:0c:d5:42:66:81:01:8f:a2:8d:8e:19:8d:3e:
f3:e1:cd:d8:cd:6f:08:74:58:ef:ba:ea:ab:45:ee:
79:a7:31:96:8e:30:d6:7b:bb:f1:c8:7e:29:21:58:
ef:63:6d:d7:6a:48:c4:0f:a9:ec:3d:bc:66:44:88:
64:9f:b3:e4:cb:53:e8:4c:f0:ee:ae:1d:bd:8f:7e:
e5:26:ca:32:05:d7:24:b4:55:3d:32:5c:a2:e4:8c:
ba:f5:8e:89:2d:2a:dc:54:ae:9b:11:c3:1b:f9:22:
03:3d:3f:10:c6:e2:8f:14:bb:2c:70:65:d9:39:69:
21:5b:ca:5c:55:ce:c6:f0:ee:66:5a:be:b5:5d:0b:
fb:09:99:fc:21:3d:4d:dc:bf:3f:90:39:f5:b3:02:
3b:a5:d9:38:0e:ae:ec:d6:64:b5:ac:07:a7:31:ce:
28:2b:0c:58:9f:66:9c:5b:2c:fe:c4:d4:88:e6:55:
bc:0e:8a:cd:31:a2:bb:8e:06:97:40:53:e4:c9:d6:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:20:82:18:CB:7C:03:1E:6C:E7:8F:C1:43:87:52:C2:F8:A3:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB92DF74448A11F1B87922A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0-154.209.139.255
154.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2d:53:20:4a:2f:01:d1:fb:7a:3c:fb:27:96:28:7f:0c:2d:
33:63:2f:98:e6:8a:ea:96:03:8b:9d:53:48:5c:7c:a2:82:06:
fd:63:27:9d:d0:b1:8f:f4:d0:68:3f:17:d1:23:39:8a:b3:bd:
a2:cb:c7:15:ef:f9:09:e0:ee:0a:f2:49:28:c2:41:c9:b1:0b:
44:a4:9f:4a:58:d6:77:78:9d:8b:29:7e:d4:db:fc:74:fc:04:
2c:14:e2:b1:8a:f7:6f:c2:96:11:cc:9b:fb:9d:10:92:78:09:
a5:95:57:f5:0a:f2:ad:eb:66:19:d5:c0:24:9f:4e:94:d7:1a:
d4:bc:a8:80:34:69:a3:40:a8:48:ab:cd:ff:ee:bc:e6:80:79:
86:2e:d8:65:28:70:13:0c:03:26:4b:b8:a9:2f:60:3d:47:4a:
f8:3e:8b:10:1f:dd:e5:0d:6d:33:2e:78:9d:96:a6:02:71:b6:
a7:b9:e8:01:6b:3b:14:08:fa:42:4c:0c:02:02:9f:1d:1f:ae:
a7:d3:e5:62:7a:b9:10:10:1f:51:c3:ff:f4:0f:cc:04:aa:bf:
5d:cb:f4:fe:a2:b3:b4:dc:ad:05:a9:a1:a4:33:52:5c:6b:38:
6a:af:05:8d:2f:ed:44:6b:5e:c2:66:31:d7:0a:f4:c1:0c:bf:
81:a5:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:19 2026 by rpki-client