Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE91ADBE5B9F11F19EFEC508CF1D38B0.roa
File: BE91ADBE5B9F11F19EFEC508CF1D38B0.roa (raw, json)
Hash identifier: Q+5cpEj4ayftyGm8NJQylTkhgIzB9lNE/tDQ8BuRhqk=
Subject key identifier: D1:E6:88:3E:A1:0B:EB:87:3E:C1:71:16:FF:18:7F:F5:1A:D7:C5:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D083
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE91ADBE5B9F11F19EFEC508CF1D38B0.roa
Signing time: Fri 29 May 2026 20:48:28 +0000
ROA not before: Fri 29 May 2026 20:48:23 +0000
ROA not after: Tue 07 Jul 2026 20:48:23 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
154.222.1.0/24 maxlen: 24
154.222.12.0/24 maxlen: 24
154.222.13.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118915 (0x1d083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 20:48:23 2026 GMT
Not After : Jul 7 20:48:23 2026 GMT
Subject: CN=6a19fb9c-d217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:25:9a:c6:be:c7:1d:74:69:c8:09:eb:48:
8a:96:03:8d:31:6a:fd:09:5a:d1:2e:c9:1f:8b:c6:
9b:50:bd:9c:7d:77:2e:1c:e2:f1:2b:a8:f5:bb:98:
d8:b0:6f:70:e4:1f:07:65:d1:2d:b2:18:e9:0f:c8:
87:87:06:9a:f9:1e:84:9f:30:07:68:72:c1:94:fb:
41:db:7e:bd:df:77:9b:73:65:24:48:4d:1f:af:86:
8c:a0:db:ca:69:3c:ac:5a:05:79:93:59:67:1b:0a:
69:37:d2:e3:d6:37:42:e6:ca:bc:5a:ac:55:c8:04:
a8:a7:9f:59:1c:be:45:27:be:1d:2f:f6:13:a0:e1:
7e:24:6e:eb:d6:f8:8b:ed:00:05:22:f8:15:4b:40:
e2:05:1d:03:44:2b:94:1f:a2:71:9a:32:6e:2f:83:
aa:7f:22:56:b8:55:3c:c6:34:37:1f:d2:40:5c:d9:
f6:b4:71:f4:59:85:ea:21:e8:7d:95:56:d3:25:5c:
9e:c5:58:79:bb:d8:68:99:03:d4:c4:85:63:e9:7e:
65:92:6c:ad:a7:7f:d8:bb:fa:1a:9a:5f:d5:a8:de:
9d:f9:88:95:be:04:8f:be:4a:1b:49:09:b1:79:1a:
4b:78:c3:2b:11:25:67:cc:eb:0d:02:2e:df:c5:fa:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:88:3E:A1:0B:EB:87:3E:C1:71:16:FF:18:7F:F5:1A:D7:C5:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE91ADBE5B9F11F19EFEC508CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0-154.219.196.255
154.219.198.0/23
154.221.56.0/22
154.221.61.0/24
154.222.1.0/24
154.222.12.0/22
154.222.43.0-154.222.47.255
Signature Algorithm: sha256WithRSAEncryption
70:ba:11:19:2f:85:33:74:1e:1c:8b:f3:55:3b:34:44:ec:fe:
80:25:ce:f2:dc:f9:1b:c9:f9:17:fb:5f:53:c7:b3:88:b7:f6:
bf:ce:a9:47:3e:b1:12:76:65:e6:4e:98:f8:fe:20:c1:1c:70:
f1:98:0c:8a:b1:c2:05:f0:f6:58:fa:70:fb:6b:57:b6:93:f0:
7e:9e:43:ad:a0:80:46:ad:82:d6:5b:2e:2c:34:d3:b1:3b:52:
71:65:c5:69:56:0c:7d:c9:b1:83:3d:e2:0e:3c:fb:ad:7e:f2:
f6:ab:ef:9d:25:18:5b:07:45:c9:dc:4f:b3:43:73:7a:11:a6:
78:e8:9e:bc:a0:cb:41:da:67:9e:09:5c:6c:e1:3a:1b:61:c8:
c2:f0:51:be:11:19:2b:7e:23:1a:2e:e6:89:40:d3:0a:c9:82:
a1:d0:cb:ce:ae:e7:99:0b:f7:38:9a:f2:3a:7c:d2:d6:26:4b:
ea:4a:28:67:3d:fc:2c:78:c0:8c:08:41:3a:fb:22:b4:76:f7:
b7:7c:86:88:4c:cd:80:49:7b:ba:5a:6b:49:3f:84:87:dd:16:
1a:55:70:b1:88:90:b2:61:e5:ec:8c:3f:48:d7:2c:05:55:0c:
57:6d:6e:35:39:96:67:a9:58:65:48:a8:b0:83:30:b6:30:75:
70:45:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:46 2026 by rpki-client