Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAF793069B811F19CE071BACE1D38B0.roa
File: BEAF793069B811F19CE071BACE1D38B0.roa (raw, json)
Hash identifier: NasmERfKbNbT5KwY4oc/gk9eem6b9yt1GwaerZKlhVc=
Subject key identifier: 74:F2:9B:33:D1:43:52:60:E3:AE:23:A5:D4:6F:2B:5C:4B:EC:16:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D38F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAF793069B811F19CE071BACE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:22:42 +0000
ROA not before: Tue 16 Jun 2026 19:22:38 +0000
ROA not after: Sat 25 Jul 2026 19:22:38 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
154.193.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119695 (0x1d38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 19:22:38 2026 GMT
Not After : Jul 25 19:22:38 2026 GMT
Subject: CN=6a31a282-5283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:7d:45:97:37:c3:6f:2f:f0:f7:90:40:4f:
92:6c:97:72:d7:b2:b6:a0:78:32:8e:7b:96:4d:60:
a9:79:42:2d:f2:b7:85:b3:fb:8e:54:e6:75:15:88:
9e:1b:ba:fa:81:e3:b8:78:6f:be:02:6f:69:08:98:
ed:14:93:9f:41:1d:22:e6:1e:7a:2e:20:06:5c:41:
2b:50:dd:2e:a9:98:14:35:10:dd:2b:5c:d2:5a:ec:
ea:7e:ec:cf:17:3c:c8:d7:76:70:6c:09:df:6c:78:
19:0e:a6:ea:74:3a:9a:a4:a1:29:55:38:d2:bd:02:
ff:79:d0:fb:08:98:2e:42:f5:1a:42:e8:fd:75:87:
37:2d:02:75:ac:06:3d:15:36:c3:e3:2c:01:42:5c:
5c:c4:40:6a:ff:f0:c2:b1:25:31:1b:43:98:90:58:
74:4a:3a:3d:6b:00:5e:a7:a3:8b:fe:e4:56:96:21:
27:ef:e9:58:16:2d:3b:4f:d9:f4:4a:06:fc:88:a8:
ba:c9:ee:52:ca:56:66:65:40:c9:0b:18:27:fd:c6:
37:54:74:24:26:a8:63:d6:ac:f7:a8:a9:b8:3c:35:
3e:53:e7:06:c2:fe:fa:2a:17:24:1f:09:bd:07:d8:
51:38:a6:2d:40:30:c3:99:e5:2d:98:44:f9:be:07:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F2:9B:33:D1:43:52:60:E3:AE:23:A5:D4:6F:2B:5C:4B:EC:16:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAF793069B811F19CE071BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
154.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ac:b7:90:15:16:86:ea:10:d6:c8:72:50:77:fd:9f:28:3d:
21:7c:ee:cf:0c:09:fd:fd:03:76:2c:d3:ef:e9:da:02:e6:37:
90:a4:21:ee:fb:42:cc:0d:54:90:d6:b9:a4:2d:2c:1e:7a:6e:
6c:f2:bf:0e:3b:18:ac:30:7f:3d:c5:4c:eb:4a:b9:71:1f:08:
7d:c6:58:29:83:13:e5:a6:7b:52:20:23:2d:10:e5:c5:34:93:
27:45:eb:24:65:ef:c7:2b:6b:d4:24:f0:02:9f:e4:88:d8:5e:
3e:4f:85:a1:b9:d7:ce:2f:59:da:2e:a4:5f:c4:96:cf:10:39:
0b:15:fb:40:79:b3:4d:cc:a6:5f:75:8b:bc:ed:a1:04:c0:b7:
6b:e3:73:eb:7d:23:93:fe:81:42:3c:61:e0:65:d4:3a:63:20:
04:49:e9:23:e4:76:61:0d:f4:5a:00:a9:d0:a2:be:af:68:e8:
a7:52:57:31:e0:e4:bb:6e:58:48:df:e0:fd:1d:15:1e:42:9f:
30:8a:c9:96:87:63:54:c8:33:2a:f8:44:03:0f:01:63:78:17:
84:44:d8:c7:75:c1:91:ed:b9:da:d0:22:2e:35:23:1c:c7:53:
de:c9:f6:51:03:c2:de:8b:6f:42:5b:5e:22:80:b3:56:44:dc:
b7:b3:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:18 2026 by rpki-client