Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB5A71C65B2711F1BBF9E9C1CE1D38B0.roa
File: BB5A71C65B2711F1BBF9E9C1CE1D38B0.roa (raw, json)
Hash identifier: UdCGdbtnmGdF1YV2OFzIqDuqfuZpemGnfYj80SO6yaU=
Subject key identifier: 3C:DE:75:24:00:7C:FA:DA:72:7A:44:37:2C:1F:21:A8:20:4E:8E:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D036
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB5A71C65B2711F1BBF9E9C1CE1D38B0.roa
Signing time: Fri 29 May 2026 06:29:23 +0000
ROA not before: Fri 29 May 2026 06:29:19 +0000
ROA not after: Wed 01 Jul 2026 06:29:19 +0000
asID: 62240
IP address blocks: 154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118838 (0x1d036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 06:29:19 2026 GMT
Not After : Jul 1 06:29:19 2026 GMT
Subject: CN=6a193243-1261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:b0:52:a4:c8:ee:ec:6b:c3:30:fb:c5:2d:
df:9a:b4:81:5d:f5:45:84:f1:39:bb:b4:75:9e:eb:
9e:5f:d8:42:2e:65:2e:80:24:96:3f:80:95:9a:c0:
2f:40:d2:3f:41:a6:68:28:d0:a8:76:e7:d6:f0:7b:
7d:0a:f1:3e:d1:84:fd:4e:4b:43:29:88:d6:aa:93:
65:c4:bb:12:f7:4e:22:a7:cd:a3:92:c1:73:06:14:
15:ca:56:c7:e2:80:a1:72:d7:a4:35:b5:00:37:e8:
7a:a6:fd:a7:dc:fd:72:99:4d:4c:0c:ff:63:2c:dd:
66:8a:9d:d2:3e:87:e2:39:67:8b:78:d1:f7:2d:ce:
ad:bd:77:d5:0d:e7:f6:b7:2a:d5:46:96:09:1d:db:
a0:36:67:5e:6c:32:c2:00:48:62:10:e1:e3:83:ce:
34:2f:e8:7c:84:51:d0:bc:87:47:dc:62:da:5e:a6:
2d:45:62:ed:66:2d:55:b9:51:10:e4:b9:14:6c:86:
5d:92:a1:be:06:9f:b2:b1:e1:52:df:e6:8c:20:4e:
c1:a0:8b:14:1c:cc:90:d4:d6:a7:9b:c1:cd:f8:ce:
ac:c8:fb:4b:61:09:d5:eb:ab:01:c9:00:80:ce:4e:
9f:8a:70:a6:2f:a6:eb:d3:92:d3:3a:cc:0b:b5:ef:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:75:24:00:7C:FA:DA:72:7A:44:37:2C:1F:21:A8:20:4E:8E:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB5A71C65B2711F1BBF9E9C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.109.0-154.194.111.255
154.196.67.0/24
154.196.69.0/24
154.196.71.0-154.196.75.255
Signature Algorithm: sha256WithRSAEncryption
1a:b9:2b:b8:2b:db:99:bc:80:fd:c4:4a:a1:e9:a4:5d:9c:75:
ab:b6:71:c1:77:de:c0:dc:5d:8a:f9:ea:1f:58:85:00:b9:bb:
77:05:41:aa:e8:b8:c2:81:2f:e8:1f:0e:aa:89:2e:e0:7b:b1:
eb:eb:71:af:ad:ea:76:26:f5:57:a9:ac:00:d8:af:35:df:79:
5b:93:26:ad:ad:cd:34:ad:30:84:71:bb:6a:55:50:f9:f2:c0:
1a:bc:24:6b:c4:6f:79:15:40:93:61:d7:d4:f3:17:c3:4a:6d:
61:bf:3b:20:b3:84:9f:a0:d4:9a:84:07:75:38:c2:0f:80:ca:
fe:76:34:40:5e:5d:ba:f1:b0:bc:a9:36:ab:db:6e:35:46:95:
02:2d:12:ce:62:e5:b1:7c:b9:51:99:c4:b1:3c:ec:bd:7d:6c:
19:bb:c6:30:c2:ae:a3:4b:6a:e0:7c:bc:83:5c:1a:b2:93:f8:
37:5a:0a:0c:0f:e7:f9:c6:2e:1b:44:54:13:bd:63:15:19:2f:
d7:df:73:d1:89:dd:57:28:50:8b:95:07:e5:7c:46:ec:a2:84:
22:a3:74:58:0c:a1:bc:cb:f5:6d:2a:eb:22:e3:c4:72:1f:92:
43:47:1b:47:27:79:18:26:31:26:5d:fd:3c:5d:b4:89:28:45:
5f:26:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:34 2026 by rpki-client