Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD7D74E68F911F1A16D97ACCE1D38B0.roa
File: BBD7D74E68F911F1A16D97ACCE1D38B0.roa (raw, json)
Hash identifier: b76fD3SAqepqFfkh8LvkWVi/FcNMGUcPhi+NG2hsmwU=
Subject key identifier: 9E:E8:E6:34:03:0A:31:D0:5A:1A:92:9E:E1:E6:D7:5F:4C:07:A0:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD7D74E68F911F1A16D97ACCE1D38B0.roa
Signing time: Mon 15 Jun 2026 20:35:24 +0000
ROA not before: Mon 15 Jun 2026 20:35:19 +0000
ROA not after: Sat 18 Jul 2026 20:35:19 +0000
asID: 200758
IP address blocks: 154.196.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119537 (0x1d2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 20:35:19 2026 GMT
Not After : Jul 18 20:35:19 2026 GMT
Subject: CN=6a30620b-1f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:b3:74:68:9f:3b:51:3a:36:ef:b0:9c:8b:
a1:db:75:7b:c4:31:da:6a:6e:5c:e6:20:cb:37:74:
1a:ae:a8:62:a9:bc:0b:64:40:97:4f:61:f3:cc:0d:
1f:4f:de:e8:5d:eb:45:03:7e:c9:15:fb:e1:5c:52:
b0:38:97:8c:03:9d:e0:c1:c4:a6:ee:f1:e8:95:d8:
b0:0d:7e:a7:bd:52:5f:bc:fa:35:1e:7d:b1:26:bc:
51:be:42:4d:d0:02:f1:1e:06:b8:5d:c3:1c:83:1c:
13:3f:4a:70:cd:f1:fc:1d:d9:7b:a8:d8:9c:d9:14:
ff:91:42:af:98:ac:bb:38:ab:05:5f:36:b0:4c:eb:
85:00:b9:86:d5:5b:d3:95:9c:27:4e:15:1f:95:ed:
e0:08:66:df:d7:21:15:bc:1f:b0:f4:94:f0:1f:5e:
ea:a1:76:71:2b:41:da:04:45:cf:5a:a3:a6:89:ad:
95:39:b3:ce:b7:e3:fb:dd:d2:d3:fa:83:98:ae:66:
5e:ee:dc:a5:ac:41:49:31:dd:28:6b:b6:13:42:f2:
a5:6d:e1:72:77:c0:cc:96:e0:d9:1c:be:35:97:15:
96:15:96:df:ec:cb:01:4e:5e:70:dc:fd:a3:4c:01:
c3:97:75:31:54:24:c6:f6:1a:af:17:06:7d:45:92:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E8:E6:34:03:0A:31:D0:5A:1A:92:9E:E1:E6:D7:5F:4C:07:A0:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD7D74E68F911F1A16D97ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bc:ca:14:23:81:f5:ee:69:3a:dc:11:76:b1:a2:94:4b:72:
7c:1e:bf:03:4d:22:7b:37:a0:3e:d7:88:96:fe:87:5f:69:a8:
c9:e6:59:3f:33:e2:0f:a3:44:5a:79:b0:d1:83:4d:4a:d8:12:
cc:29:0b:63:56:30:fa:28:e8:ae:9e:e7:04:6a:7d:7a:48:ee:
35:8d:b1:45:a9:4f:73:3a:51:0f:f5:15:7c:c3:e7:ad:8b:c6:
be:aa:8e:d6:e5:20:b8:26:cf:45:99:54:22:89:7f:20:dc:ca:
6e:bb:7d:db:90:47:41:2e:8c:ab:4c:1a:73:f5:4d:ff:12:08:
d9:75:f9:2d:c6:f6:9f:65:92:a7:be:a9:70:c6:c8:cb:93:7b:
b5:9e:31:aa:b3:fc:7c:a3:91:fd:bc:70:48:ca:1f:7b:59:03:
7c:09:cd:e1:34:bc:49:23:40:11:c1:ab:3d:bd:4e:ce:05:d1:
fb:32:35:cc:de:82:3e:8f:9e:80:71:c8:1e:be:59:12:ed:18:
5a:1c:92:3d:13:11:e0:63:d3:19:06:24:54:5e:e9:34:26:dd:
06:c0:77:cd:87:19:42:87:79:fb:24:27:a0:78:75:d3:65:89:
bb:9a:c4:12:20:4a:c6:4f:92:4b:17:f0:9d:f6:27:2e:e1:cb:
0d:3c:7c:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdLxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE1MjAzNTE5WhcNMjYwNzE4MjAzNTE5WjAYMRYw
FAYDVQQDEw02YTMwNjIwYi0xZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvtqzdGifO1E6Nu+wnIuh23V7xDHaam5c5iDLN3QarqhiqbwLZECXT2Hz
zA0fT97oXetFA37JFfvhXFKwOJeMA53gwcSm7vHoldiwDX6nvVJfvPo1Hn2xJrxR
vkJN0ALxHga4XcMcgxwTP0pwzfH8Hdl7qNic2RT/kUKvmKy7OKsFXzawTOuFALmG
1VvTlZwnThUfle3gCGbf1yEVvB+w9JTwH17qoXZxK0HaBEXPWqOmia2VObPOt+P7
3dLT+oOYrmZe7tylrEFJMd0oa7YTQvKlbeFyd8DMluDZHL41lxWWFZbf7MsBTl5w
3P2jTAHDl3UxVCTG9hqvFwZ9RZJwqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ7o
5jQDCjHQWhqSnuHm119MB6DcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQkQ3RDc0RTY4RjkxMUYxQTE2RDk3QUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsSLMA0GCSqGSIb3DQEB
CwUAA4IBAQAavMoUI4H17mk63BF2saKUS3J8Hr8DTSJ7N6A+14iW/odfaajJ5lk/
M+IPo0RaebDRg01K2BLMKQtjVjD6KOiunucEan16SO41jbFFqU9zOlEP9RV8w+et
i8a+qo7W5SC4Js9FmVQiiX8g3Mpuu33bkEdBLoyrTBpz9U3/EgjZdfktxvafZZKn
vqlwxsjLk3u1njGqs/x8o5H9vHBIyh97WQN8Cc3hNLxJI0ARwas9vU7OBdH7MjXM
3oI+j56AccgevlkS7RhaHJI9ExHgY9MZBiRUXuk0Jt0GwHfNhxlCh3n7JCegeHXT
ZYm7msQSIErGT5JLF/Cd9icu4csNPHxQ
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:30 2026 by rpki-client