Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFE508B26C8611F1903EC4C9CE1D38B0.roa
File: BFE508B26C8611F1903EC4C9CE1D38B0.roa (raw, json)
Hash identifier: 8S416dNRBgfg3e07TOjID4XyGL0kcwMeg3yiS/1qziY=
Subject key identifier: C0:B7:E1:C0:B9:B0:93:90:A9:11:D0:FC:13:E2:5B:B3:25:54:BB:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D417
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFE508B26C8611F1903EC4C9CE1D38B0.roa
Signing time: Sat 20 Jun 2026 09:02:23 +0000
ROA not before: Sat 20 Jun 2026 09:02:17 +0000
ROA not after: Mon 27 Jul 2026 09:02:17 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.72.0/24 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119831 (0x1d417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 09:02:17 2026 GMT
Not After : Jul 27 09:02:17 2026 GMT
Subject: CN=6a36571f-e9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:f4:c9:e4:76:e2:36:6f:7c:e6:0e:d4:b5:
52:1d:d7:ac:f2:14:93:0c:97:28:a4:48:f6:ab:20:
66:e9:1f:8c:af:8f:4f:7d:fd:fa:f9:36:69:48:8d:
64:b2:0d:58:4e:44:b8:74:d2:c9:02:57:9b:1a:ff:
35:dd:85:77:c6:11:ae:67:44:e6:7a:73:1e:e5:b0:
dc:bc:6e:fe:d3:28:b2:f8:5b:41:d6:40:9d:14:dd:
db:23:2a:ad:62:8f:00:e1:80:e9:84:12:7b:23:bf:
57:b8:9b:4a:62:9b:aa:fd:4b:83:69:95:09:35:1d:
31:19:4d:14:a6:29:76:6e:ea:e2:fc:bd:18:5a:35:
99:e5:15:a6:c9:5a:96:76:a0:33:cb:2d:58:aa:4e:
e1:8a:57:4d:f7:b4:c6:ec:75:0b:a6:5f:47:29:0f:
93:4c:52:f0:d4:84:cd:60:a3:da:c1:ce:c9:e7:50:
54:86:ee:04:06:fd:7a:9c:72:74:94:3c:dd:5c:60:
70:d5:cb:a5:82:5b:bb:d6:2b:70:61:0b:d4:19:82:
9a:d4:59:2e:78:d6:91:75:3b:a1:31:61:41:fc:7d:
d1:a9:00:76:11:44:11:cb:89:ca:75:98:f1:61:f6:
49:8a:82:4c:c4:8f:be:ee:90:fc:ce:16:ba:27:99:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:E1:C0:B9:B0:93:90:A9:11:D0:FC:13:E2:5B:B3:25:54:BB:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFE508B26C8611F1903EC4C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0/24
154.206.72.0/24
154.206.78.0-154.206.91.255
Signature Algorithm: sha256WithRSAEncryption
26:4a:f2:5e:28:9b:8b:f2:4d:3f:c3:96:e7:33:ad:10:77:bb:
6a:31:14:b6:c5:d7:e6:e0:f8:83:f8:55:ee:a4:f4:aa:01:1c:
c3:ab:ab:5f:5e:5b:24:76:4e:27:b4:5e:e6:e4:63:69:79:58:
7c:d9:3b:cb:0d:54:e6:84:5c:25:8a:21:93:8a:98:5b:6e:54:
11:a6:90:ae:3e:e9:0f:a0:8b:47:8a:7e:ba:7c:10:02:31:1c:
8a:00:73:17:fc:95:19:28:8f:68:32:f3:09:4a:84:7e:c9:b5:
de:70:97:5d:cf:f2:97:ad:f6:9b:6b:05:6c:d1:bb:7d:9f:cf:
ec:89:41:76:b6:74:e9:1f:e7:d3:3f:bf:29:32:50:49:37:f1:
bd:aa:ac:4e:e2:f3:51:67:c7:28:16:97:ae:da:d8:c7:56:fc:
69:37:55:e4:1c:d6:65:7d:49:65:27:76:65:8d:7a:ae:6d:3f:
fd:b3:26:5d:aa:17:29:33:ee:dd:f3:a0:9e:d4:81:9c:1d:a6:
51:09:4b:f9:74:a5:44:ca:0f:21:85:32:53:e3:fa:6c:87:68:
fa:23:2b:8c:fa:a1:fc:c9:0a:70:e6:45:1f:14:18:67:db:b5:
8f:06:02:e2:de:bc:30:bf:9c:62:94:23:a6:25:af:79:e2:d8:
a1:2b:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:05 2026 by rpki-client