Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3244CE6BB511F1B3A3A8D9CE1D38B0.roa
File: BF3244CE6BB511F1B3A3A8D9CE1D38B0.roa (raw, json)
Hash identifier: t1vLM2GC4wtIKTsTVoTcPu1Q4s0YLhA4QOao9cT0Tac=
Subject key identifier: 7B:CB:04:4E:B3:9F:B9:48:32:B2:CD:2E:A1:32:C9:F0:31:0F:ED:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3244CE6BB511F1B3A3A8D9CE1D38B0.roa
Signing time: Fri 19 Jun 2026 08:06:17 +0000
ROA not before: Fri 19 Jun 2026 08:06:12 +0000
ROA not after: Tue 28 Jul 2026 08:06:12 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119792 (0x1d3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 08:06:12 2026 GMT
Not After : Jul 28 08:06:12 2026 GMT
Subject: CN=6a34f879-eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:3c:b7:f9:79:ca:4a:b3:95:30:cc:57:fb:
b5:f3:af:02:bb:6b:5b:bd:fe:11:4c:00:90:89:0d:
11:71:c6:81:0a:ba:bd:1d:b8:36:7f:1d:a9:f1:cf:
42:56:32:b7:c7:1c:52:9b:54:b9:77:0f:19:10:39:
1d:14:bb:4f:f7:b6:bb:7a:b2:79:c7:c5:5d:2f:2d:
bd:8e:e9:d2:1b:52:51:78:00:cb:4c:07:b7:f6:57:
d1:fe:23:81:80:94:d7:41:e8:26:00:fc:28:34:7b:
e7:ed:fe:0c:56:0f:f7:09:48:12:9c:99:57:93:2f:
f6:49:f5:2e:ef:73:0f:07:88:d8:29:00:e5:0c:47:
32:fe:d9:94:11:77:56:02:d3:bb:b9:80:37:6e:f2:
82:6a:f5:e4:cb:cf:88:61:93:b4:1e:bc:e9:55:8c:
e4:ad:30:6a:79:4b:8c:f4:f7:ce:27:da:f5:88:ad:
b3:0e:89:4a:9e:a1:e0:c2:7c:d4:0c:76:bc:d2:fd:
00:1e:93:7b:f6:22:0a:0c:c2:c2:77:20:ab:d7:59:
e8:9a:45:93:4e:11:35:43:26:79:d7:59:6e:41:e8:
ea:8b:0c:24:c2:96:96:9b:13:a5:4a:f3:e3:dd:d6:
b4:d1:0b:46:f9:17:ef:d2:d4:79:0d:e8:37:0c:32:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CB:04:4E:B3:9F:B9:48:32:B2:CD:2E:A1:32:C9:F0:31:0F:ED:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3244CE6BB511F1B3A3A8D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5d:ea:41:d8:fb:e8:95:22:91:88:a8:28:a0:8f:e2:70:c9:
34:05:31:fc:0f:ae:1f:08:85:e5:f7:aa:41:6b:85:ae:50:25:
93:a8:39:53:1b:9e:f9:eb:17:ef:32:0c:77:c6:6e:45:8a:bf:
52:5e:f9:20:3d:c1:aa:a4:38:b8:a7:d6:46:4b:1c:a7:a5:bc:
cf:dc:34:01:40:e7:d6:26:2a:49:e4:fd:e3:33:7d:56:d2:8a:
02:6f:e3:a7:e3:51:e2:17:f4:7d:21:84:96:06:88:65:87:8b:
02:aa:d1:7c:69:26:8a:b5:d7:eb:c6:bc:01:c8:3d:be:44:e1:
67:55:81:cd:91:dc:2b:0a:8b:03:1a:3e:ee:bc:a0:ad:de:49:
83:dc:4f:b1:6a:a0:b9:a4:0b:6f:1c:b8:f0:3e:f0:fe:53:c6:
33:24:01:16:55:1c:b0:bf:56:49:28:79:b2:83:f5:c7:6c:99:
a3:3b:27:c3:3e:9f:00:f8:fb:5d:e2:0d:fa:8f:3b:7e:be:ad:
1a:68:e2:43:c1:72:68:46:5a:89:d5:59:e9:13:e8:0c:e9:d1:
30:84:ed:98:2d:59:32:90:a8:58:3b:3f:1d:fc:a5:f9:84:56:
ac:be:33:e0:25:ce:e9:5b:af:65:f6:57:d3:46:ec:2a:5f:ce:
29:9d:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:02 2026 by rpki-client