Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2DA74C5B3911F1B76C7AADCE1D38B0.roa
File: BB2DA74C5B3911F1B76C7AADCE1D38B0.roa (raw, json)
Hash identifier: 6+teIGHTTXCKkSOWQ+k6qS5dqwRGQR58xxNA1QODMA4=
Subject key identifier: 8F:28:57:41:A3:38:0B:C3:E7:6A:6C:10:50:98:42:E4:66:0F:09:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D052
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2DA74C5B3911F1B76C7AADCE1D38B0.roa
Signing time: Fri 29 May 2026 08:38:14 +0000
ROA not before: Fri 29 May 2026 08:38:09 +0000
ROA not after: Thu 02 Jul 2026 08:38:09 +0000
asID: 62240
IP address blocks: 154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118866 (0x1d052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 08:38:09 2026 GMT
Not After : Jul 2 08:38:09 2026 GMT
Subject: CN=6a195076-8663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:fd:51:3f:0b:42:83:43:0b:ce:3c:ac:90:
de:1f:40:dd:ed:33:e8:3f:b1:3c:7e:42:15:ac:d1:
f3:ee:f4:d3:f3:6f:c3:0f:a5:7a:54:77:05:ca:0b:
79:b5:b4:b9:b3:21:56:ac:0c:b5:6a:39:4f:54:54:
2c:54:38:9b:34:ab:e8:84:40:22:62:11:06:b9:ce:
38:99:4a:63:07:64:1d:1f:2b:59:77:8b:7a:37:d4:
a2:12:04:f3:8f:50:9e:19:48:1d:cb:6d:7a:ed:f9:
cf:0a:9c:3f:ba:e6:d6:cc:0f:a1:54:75:c2:da:7b:
2b:34:65:b1:64:df:7f:3c:08:d2:78:67:9a:d9:5b:
0c:46:78:63:33:e9:c2:4b:5f:b8:99:42:19:16:67:
07:da:5d:38:86:64:79:0d:c8:10:69:1b:29:cf:08:
42:7a:d5:91:43:cd:5f:12:7b:30:97:62:44:c4:05:
56:a2:ae:27:04:21:ea:d4:0c:8d:33:91:b1:5a:26:
c2:98:ae:a3:ff:29:90:e1:61:15:cf:b5:29:2a:7c:
f4:32:4f:01:67:8e:0d:18:94:7d:8c:51:9d:85:75:
0d:e9:ca:24:e2:b6:bb:b8:13:73:9a:13:02:ef:6a:
05:0a:28:5d:e3:0f:3c:f1:69:32:56:7a:21:27:38:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:57:41:A3:38:0B:C3:E7:6A:6C:10:50:98:42:E4:66:0F:09:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2DA74C5B3911F1B76C7AADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.222.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:67:bf:86:12:34:69:85:64:cc:8e:a5:eb:9a:11:8d:d7:94:
1d:df:22:08:9c:9d:72:56:a6:4c:b1:7c:66:e8:84:2f:05:92:
90:cb:64:03:a3:07:0a:d7:6d:4c:f4:57:00:c5:4f:97:25:86:
3d:9f:a9:6f:aa:e6:58:84:af:21:e5:22:e5:1d:d7:e3:a8:8b:
b4:59:0a:31:8f:85:2d:ac:e0:5f:78:cf:e2:d5:14:e0:fb:67:
bf:18:8b:50:f8:8c:22:59:a0:17:5c:cd:a1:bb:6f:f2:b2:6b:
ce:fd:25:94:ea:45:0a:41:af:91:57:d8:0f:c3:94:9d:cc:6f:
d3:d6:19:b5:a2:e1:eb:90:08:50:cd:88:bb:45:ee:c3:c2:22:
70:6f:49:49:02:44:d6:b6:f7:69:9b:b9:91:40:cd:cc:0a:0b:
98:aa:7f:51:a7:e1:e4:72:a3:5b:d5:6e:e8:bd:0b:1d:78:bf:
c5:13:94:ef:79:7a:61:21:d6:17:51:b9:60:3d:b0:1d:26:77:
27:36:e4:26:ce:48:8b:50:ad:da:e5:b8:a3:f3:8a:a6:4e:cf:
74:cf:c3:59:28:d4:a4:cf:7e:87:5c:e0:81:bd:ce:df:10:0c:
de:18:4b:5d:f0:f4:ad:f4:58:f5:ff:fe:17:aa:7a:5a:40:94:
c4:19:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:42 2026 by rpki-client