Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD90503E64B711F1952072DDCE1D38B0.roa
File: BD90503E64B711F1952072DDCE1D38B0.roa (raw, json)
Hash identifier: hD2t1eZ2CPp4hl+RFiW62CvBd0XCrTCICTvaq62NcRQ=
Subject key identifier: 89:8C:54:CF:98:21:70:C2:40:45:2E:06:58:71:FC:D2:95:E5:29:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D274
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD90503E64B711F1952072DDCE1D38B0.roa
Signing time: Wed 10 Jun 2026 10:32:55 +0000
ROA not before: Wed 10 Jun 2026 10:32:49 +0000
ROA not after: Fri 17 Jul 2026 10:32:49 +0000
asID: 22773
IP address blocks: 154.82.2.0/24 maxlen: 24
154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
154.85.121.0/24 maxlen: 24
154.85.122.0/24 maxlen: 24
154.90.18.0/24 maxlen: 24
154.90.149.0/24 maxlen: 24
154.90.150.0/24 maxlen: 24
154.90.151.0/24 maxlen: 24
154.90.152.0/24 maxlen: 24
154.90.153.0/24 maxlen: 24
154.90.154.0/24 maxlen: 24
154.90.155.0/24 maxlen: 24
154.90.156.0/24 maxlen: 24
154.90.157.0/24 maxlen: 24
154.90.158.0/24 maxlen: 24
154.94.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119412 (0x1d274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 10:32:49 2026 GMT
Not After : Jul 17 10:32:49 2026 GMT
Subject: CN=6a293d57-6fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:26:26:9b:37:68:a0:fd:0d:d2:c7:8e:ca:
56:a0:cc:35:47:1f:24:e8:3f:32:1d:f7:2f:48:b3:
c4:98:91:73:bc:85:05:b5:ae:e3:bb:86:da:95:b5:
92:29:48:93:92:e3:90:a5:a0:24:ce:f7:54:78:5d:
d2:f5:3c:4f:4b:d7:87:74:9f:c8:1f:e5:73:04:da:
10:cd:94:5f:60:19:b6:1e:4e:1c:11:6f:c0:3d:27:
83:9f:3d:d0:82:2b:2b:8a:be:03:c7:78:5d:96:a1:
f6:e3:1e:6d:d1:a3:cf:64:f9:aa:b7:a9:2b:22:6a:
d6:2f:d1:47:50:77:86:b3:96:63:0b:d5:ba:b3:63:
ba:f9:e3:83:b1:5a:33:91:64:b1:e5:d6:58:1e:48:
80:9d:35:4d:7f:62:78:6d:b0:4c:68:ef:f4:fa:34:
91:b6:9f:ef:1b:ba:78:56:b4:2f:17:76:d7:53:61:
41:69:28:c6:99:fa:1f:2b:92:e8:39:c4:e0:48:e9:
48:8d:9f:ca:b9:60:27:b3:50:30:f2:09:ce:7a:ec:
81:57:64:fa:b4:d6:15:a8:05:97:95:a3:ce:2f:be:
de:b9:1d:dd:6d:58:ab:67:f8:a6:47:7d:bb:ba:48:
da:98:85:c1:44:e6:ad:5b:37:f1:fd:fb:02:d1:dd:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:54:CF:98:21:70:C2:40:45:2E:06:58:71:FC:D2:95:E5:29:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD90503E64B711F1952072DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.2.0/24
154.85.22.0/23
154.85.104.0-154.85.106.255
154.85.121.0-154.85.122.255
154.90.18.0/24
154.90.149.0-154.90.158.255
154.94.32.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a0:72:b8:9d:8a:57:80:1e:ba:e5:bd:38:75:02:f5:67:1c:
7e:eb:56:19:a1:aa:2e:2a:31:2e:63:23:5e:a0:26:d5:dc:a0:
32:7f:bc:12:1b:ec:ee:69:55:9b:a1:80:a9:a6:f9:e5:ae:7d:
6e:68:28:4a:ad:ff:00:ba:b6:73:6d:a8:e4:e1:c4:2d:eb:9f:
73:53:76:f1:8d:47:13:95:41:af:61:b6:83:86:d0:4f:80:e6:
b2:b7:17:15:f6:41:10:1b:ec:e1:26:c1:d1:a6:79:be:c8:35:
be:e9:10:47:9e:90:3d:5b:4c:b1:9c:b3:46:76:13:9d:25:6c:
6a:5c:55:bc:5e:30:2a:13:1d:47:16:28:28:bb:ae:fc:91:fc:
a2:25:75:f4:6a:9e:17:c5:6e:c9:13:13:c3:a6:13:fd:3b:e7:
51:0a:be:9e:52:20:44:96:90:c4:25:0c:6a:35:51:01:af:25:
a5:c3:61:91:2d:22:04:d9:ba:4c:45:bb:e6:92:ad:ff:69:a7:
39:6d:de:46:fc:6a:f5:7c:cb:a3:a4:26:f8:3a:9a:95:f9:0b:
e1:2a:64:25:12:9f:02:7d:cd:45:c9:72:b1:fa:d7:b0:01:ba:
9b:0e:e5:c0:45:d3:69:71:84:ca:f4:7c:fa:0e:c4:f7:73:3d:
f1:b9:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:25 2026 by rpki-client