Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9A703681C011F1A852E1ABCE1D38B0.roa
File: BB9A703681C011F1A852E1ABCE1D38B0.roa (raw, json)
Hash identifier: Z/c1AP57NoafSgpUUcUDhrgRc1bMhhKhKjmdnbNe+m0=
Subject key identifier: 91:A0:DC:35:0C:B4:69:D3:C8:B9:DC:D6:15:CF:17:38:85:0B:CC:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D96B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9A703681C011F1A852E1ABCE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:20:21 +0000
ROA not before: Fri 17 Jul 2026 09:20:17 +0000
ROA not after: Mon 24 Aug 2026 09:20:17 +0000
asID: 402169
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121195 (0x1d96b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:20:17 2026 GMT
Not After : Aug 24 09:20:17 2026 GMT
Subject: CN=6a59f3d5-fb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:eb:7d:c8:41:49:3b:16:53:96:3f:60:9c:
5c:05:22:73:71:a5:08:14:41:98:f1:ae:c1:35:92:
56:9a:b1:5d:49:ed:c5:e8:a4:77:6d:44:51:5f:50:
06:81:8f:b5:eb:06:21:be:05:47:db:a8:04:0f:14:
ae:83:3d:3f:ee:f5:c8:b0:b4:4a:48:3c:c4:6b:48:
c2:1b:72:3c:db:e9:be:12:c9:c7:0e:72:37:e2:13:
5b:f4:03:71:5a:ca:89:3f:79:4e:1e:cb:93:00:33:
26:42:cb:9e:3a:f5:a1:70:05:4a:02:9d:64:58:a8:
ed:4a:fb:ec:dd:29:d5:22:a0:07:ea:73:aa:94:b4:
a8:32:e9:4d:5f:18:3d:a5:23:f2:88:ba:dc:ec:6b:
3f:ac:33:7f:80:ce:8c:5f:b8:5d:bf:a5:22:7b:f6:
f9:e8:53:17:55:89:e6:8f:46:71:34:6e:eb:18:a4:
6b:70:32:d7:9e:21:2d:9f:f5:1a:a3:68:63:c9:07:
ed:77:20:5e:ca:07:b2:44:55:89:a6:85:e7:af:69:
3d:71:71:60:91:22:b8:db:e4:4f:e5:18:c9:0b:d1:
e2:7f:b7:21:c8:8c:b8:84:fe:c1:2a:d7:88:74:99:
d7:68:41:9c:f4:75:00:ad:ee:69:0f:27:3c:40:30:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:DC:35:0C:B4:69:D3:C8:B9:DC:D6:15:CF:17:38:85:0B:CC:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9A703681C011F1A852E1ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0/23
Signature Algorithm: sha256WithRSAEncryption
29:8b:8a:2d:f8:58:70:71:a3:9e:9b:23:cc:30:f7:8c:c8:45:
11:65:71:ba:2e:26:58:41:44:1e:ec:32:5e:a5:fe:8d:1c:c2:
cc:83:8a:52:5d:b1:31:3f:05:24:bc:25:6d:49:34:0d:cb:b9:
e4:56:01:59:64:24:9e:66:e4:7a:ea:e0:15:68:2f:40:c0:a0:
ff:b0:8d:38:08:a1:eb:0e:65:49:5e:f0:8d:5c:de:54:63:f9:
55:95:56:19:71:11:a6:cf:e9:74:0b:5d:20:91:8d:2c:37:3d:
77:88:be:4d:3e:0d:2b:08:65:0f:3b:34:e7:e1:72:0c:3c:3e:
d4:91:51:b7:cc:1f:6b:92:34:31:b3:9f:78:17:db:b8:ed:b2:
ab:fe:f7:f5:20:cc:de:b5:76:17:73:72:98:ed:b3:5d:98:f0:
13:0d:0f:9a:b2:6e:b9:d7:e5:ab:f5:f4:cd:37:0f:76:8f:e3:
43:58:f2:1c:ad:f4:d9:ad:07:eb:19:8b:cf:40:87:b6:d1:f2:
50:97:6e:1e:04:54:33:07:d3:2f:a1:7a:95:fd:1d:65:97:89:
23:47:0a:34:df:f6:54:19:b5:cf:5e:ff:04:83:ae:4e:fc:f1:
0f:73:63:0d:36:00:35:4f:84:fb:66:4d:c8:38:e8:36:15:42:
db:44:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:55 2026 by rpki-client