Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7019F82A9511F1B7F2A199DAE4EC9C.roa
File: BB7019F82A9511F1B7F2A199DAE4EC9C.roa (raw, json)
Hash identifier: ++MNNKpMGb1mHIVvh1rin+du2E5vebThy5uuQ1gd43U=
Subject key identifier: 0F:81:E6:CB:06:F1:31:28:D5:74:E4:0C:32:6F:78:44:D3:88:DF:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C154
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7019F82A9511F1B7F2A199DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 11:03:21 +0000
ROA not before: Sat 28 Mar 2026 11:03:15 +0000
ROA not after: Mon 04 May 2026 11:03:15 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115028 (0x1c154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 11:03:15 2026 GMT
Not After : May 4 11:03:15 2026 GMT
Subject: CN=69c7b579-0225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:2c:08:cf:f2:60:31:99:0c:c5:a2:07:bf:
59:7a:0c:ed:ee:52:7f:5a:c9:5b:36:35:b3:8c:22:
5e:c3:70:7f:79:99:af:63:68:71:db:ad:f3:ee:c0:
b6:06:ca:c4:14:7f:94:9f:aa:52:5c:98:02:ce:bf:
84:5f:32:40:6a:4f:56:a4:ad:38:61:4c:b2:fe:40:
bb:a5:ed:57:d7:56:ce:d1:7a:53:a0:bb:67:be:71:
79:e1:b0:7a:75:0a:1a:4d:a5:58:80:27:c7:52:4c:
6c:39:3e:37:98:24:76:41:39:ce:5e:13:96:33:8e:
f6:41:35:5c:7d:93:5e:dc:7a:1e:e5:3e:8c:48:54:
3f:c8:47:13:9a:08:b4:3e:6b:66:1c:ef:e0:30:a9:
24:01:87:6b:0e:e0:fa:29:26:0a:99:2e:39:8e:54:
95:1b:54:5f:3f:80:98:b5:83:7a:f6:3e:78:0d:54:
bc:57:58:e8:af:b7:ff:d6:c1:e4:27:18:fe:65:08:
a0:40:9f:8e:cd:75:2b:06:3f:fa:bf:f3:dc:70:96:
cc:1a:c7:77:3c:c2:24:4a:73:c4:9c:d9:fd:a0:8f:
ca:b8:b2:1a:4b:be:cc:95:14:53:c1:89:59:b7:27:
cf:2a:e0:50:7d:1f:1b:3e:c8:a1:1d:fc:be:7a:ca:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:E6:CB:06:F1:31:28:D5:74:E4:0C:32:6F:78:44:D3:88:DF:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7019F82A9511F1B7F2A199DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
Signature Algorithm: sha256WithRSAEncryption
39:5d:b6:2d:3d:e3:c2:77:f5:d3:ee:ab:49:9d:14:29:aa:b0:
d7:9b:35:69:f6:9b:f7:dc:5c:5c:0d:fc:dd:91:8c:fa:84:f5:
98:f1:8a:cf:54:b1:6e:6a:5f:cf:25:c2:f5:48:7b:08:31:93:
c7:9c:1e:a8:a4:e1:54:6a:fe:04:1a:09:20:85:98:06:25:a6:
78:07:d7:21:ea:74:40:b6:d8:f5:36:8d:d8:71:25:82:0a:24:
7a:98:39:f2:3f:c9:fd:1b:20:cd:79:82:02:e5:92:c3:0f:a3:
1c:46:a6:43:8c:3b:00:53:5d:53:60:b4:38:21:95:f4:09:94:
fc:2e:ad:0f:93:64:8c:62:10:b6:d5:83:e2:f8:77:8c:db:0b:
f3:cb:5b:ee:8c:d0:ef:47:0a:26:53:f3:07:6c:6d:02:d0:c7:
19:b9:48:30:c7:67:cf:a5:42:ce:95:01:ae:b0:71:07:b8:ee:
62:a3:33:3b:50:e0:cb:3e:cb:17:0f:9f:aa:ee:6a:24:01:ab:
c7:b6:0b:f4:94:e1:a6:2a:c5:3e:4a:4e:ab:9f:ab:4c:fc:1b:
f0:30:55:cb:ac:26:5d:a3:af:70:89:5b:fb:7d:85:cb:d7:72:
61:1a:0d:3b:c5:ba:64:2b:2b:df:e6:5a:b3:78:18:8b:4d:58:
2d:ef:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:56 2026 by rpki-client