Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF94DC6259A211F186D43705CF1D38B0.roa
File: BF94DC6259A211F186D43705CF1D38B0.roa (raw, json)
Hash identifier: 7mqRrOIfc6JlY99UfAydyhDqmhigNdf3CzZYhD/McoA=
Subject key identifier: F8:DB:F4:7A:BC:27:06:6E:43:47:49:E0:F4:F9:C1:C5:98:61:89:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF94DC6259A211F186D43705CF1D38B0.roa
Signing time: Wed 27 May 2026 08:04:56 +0000
ROA not before: Wed 27 May 2026 08:04:51 +0000
ROA not after: Fri 04 Sep 2026 08:04:51 +0000
asID: 46071
IP address blocks: 154.209.6.0/24 maxlen: 24
154.209.7.0/24 maxlen: 24
154.210.178.0/24 maxlen: 24
154.210.179.0/24 maxlen: 24
154.210.180.0/24 maxlen: 24
154.210.203.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118765 (0x1cfed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 08:04:51 2026 GMT
Not After : Sep 4 08:04:51 2026 GMT
Subject: CN=6a16a5a8-d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:b5:71:ec:5f:a5:bb:54:4d:00:4d:1f:b3:
7b:79:06:c9:24:e8:f6:53:91:c5:08:b4:eb:76:fe:
ea:06:da:59:5e:d3:75:29:e0:7c:61:05:96:03:a1:
d6:cf:1a:e0:dc:dc:66:17:8b:d9:a9:f6:72:f4:5e:
ae:d1:74:43:1c:69:be:bc:17:4b:ff:69:13:83:58:
21:6e:05:2e:c8:d9:04:f3:98:52:b0:8b:01:7e:0c:
24:cc:6f:97:5e:09:de:95:ca:6b:6e:ab:bb:97:11:
0e:62:a1:48:26:f9:22:7d:a6:c2:7a:c7:20:62:41:
01:31:d0:ac:93:b6:4b:0b:cf:3b:85:08:89:55:86:
ac:ae:a6:d0:3f:2c:8d:71:09:91:0a:43:60:10:2b:
b8:c8:4e:e4:9f:55:9e:27:fa:95:f4:03:c2:e8:cc:
6b:45:5d:83:31:50:d6:3f:03:90:25:d0:63:49:4b:
66:ae:22:fc:3d:5f:8a:5e:ec:52:0d:0d:85:ef:8a:
09:fe:d2:f5:f3:18:cd:b9:4f:e9:32:62:22:ed:11:
71:ca:da:53:fb:b4:12:aa:d6:6a:19:de:bb:49:ee:
7b:a6:b1:7d:44:72:5b:48:3f:fa:64:ad:03:b7:4f:
fd:55:2a:a2:71:35:2f:2a:57:a1:a7:f8:96:72:30:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DB:F4:7A:BC:27:06:6E:43:47:49:E0:F4:F9:C1:C5:98:61:89:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF94DC6259A211F186D43705CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.6.0/23
154.210.178.0-154.210.180.255
154.210.203.0-154.210.204.255
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:51:57:0e:36:4f:94:2a:28:c7:df:81:17:25:bf:27:45:c4:
09:49:66:c3:13:3d:b8:44:bc:a0:2d:08:fd:a7:b0:8b:b4:12:
4a:fd:62:40:f4:da:a0:ef:07:3b:07:cc:1e:78:95:4f:ad:6b:
20:32:bc:1b:65:7f:aa:f1:81:26:3b:61:d5:5b:7b:ca:82:9c:
3a:c2:06:f2:65:19:c8:c2:66:69:3d:af:9e:fc:5b:49:01:a3:
21:b5:bb:9e:a5:70:fd:5c:bf:e8:37:df:fd:68:62:10:b8:dd:
de:50:31:61:a9:5a:cc:87:68:8b:22:ab:7a:6c:f7:b6:74:53:
91:f7:18:2e:be:92:f7:84:a5:17:16:ac:f9:d1:71:7c:70:a3:
04:0d:cb:22:f0:61:cc:84:87:8a:6e:be:df:06:7d:c0:b4:76:
cb:3c:ec:34:32:0f:c2:1e:3d:10:7e:8e:13:96:ee:83:fe:59:
e0:b9:bb:06:0f:12:22:43:72:07:20:a0:f2:bc:32:94:52:a2:
c6:69:ef:c1:7a:bc:a2:9d:32:8a:0e:c9:be:93:74:13:0f:15:
d2:62:a3:0d:75:28:18:09:86:b3:55:3d:49:b0:da:06:15:86:
92:70:bd:74:80:46:93:94:5c:6e:cc:65:ef:c1:5c:82:55:dc:
9f:2b:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:06 2026 by rpki-client