Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDB7FCAE64B911F19C4DCDE7CE1D38B0.roa
File: BDB7FCAE64B911F19C4DCDE7CE1D38B0.roa (raw, json)
Hash identifier: sL8pTYvSel7gSFSOeHvybt5Oy6rkYc4ZgvVmLfy1Ngg=
Subject key identifier: 1B:C0:86:F3:B7:49:2C:0F:28:6F:BB:BF:B7:98:62:13:66:BD:BF:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D278
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDB7FCAE64B911F19C4DCDE7CE1D38B0.roa
Signing time: Wed 10 Jun 2026 10:47:14 +0000
ROA not before: Wed 10 Jun 2026 10:47:10 +0000
ROA not after: Thu 16 Jul 2026 10:47:10 +0000
asID: 22773
IP address blocks: 154.198.20.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
154.202.69.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.73.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
154.202.110.0/24 maxlen: 24
154.202.112.0/24 maxlen: 24
154.202.113.0/24 maxlen: 24
154.202.114.0/24 maxlen: 24
154.202.116.0/24 maxlen: 24
154.202.137.0/24 maxlen: 24
154.213.192.0/24 maxlen: 24
154.213.200.0/24 maxlen: 24
154.213.201.0/24 maxlen: 24
154.213.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119416 (0x1d278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 10:47:10 2026 GMT
Not After : Jul 16 10:47:10 2026 GMT
Subject: CN=6a2940b2-97d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2f:5c:64:b1:1c:e6:96:46:c4:5f:c5:fa:58:
da:db:69:84:f4:69:6c:b0:91:e6:76:79:2f:b2:d7:
73:c8:6b:cb:0a:b6:06:ab:38:c8:bc:63:65:fa:62:
45:a1:f6:4e:3c:2f:e8:19:40:23:d7:b7:bd:3b:c7:
75:e2:6b:a0:97:10:03:71:07:f5:6d:53:a9:b1:5f:
33:55:b7:95:0d:4b:b7:29:d5:fb:59:10:11:86:9b:
bc:72:d9:82:61:f6:71:2b:fa:6c:3b:30:b3:ee:29:
ee:4b:6b:25:82:ca:5b:c9:a2:4e:de:27:f9:a5:3e:
77:ac:66:1a:d4:f0:2d:d8:34:77:70:46:13:9d:7a:
47:0d:a3:3c:82:2c:83:c3:fb:52:09:de:a3:47:80:
6a:94:85:37:cc:2c:a9:30:44:26:ad:2e:30:fd:20:
1a:65:8b:f1:70:82:d6:0a:73:ac:07:bb:c3:db:c6:
2a:1c:4d:c9:12:54:72:55:23:5e:db:a0:72:a0:f4:
8e:41:99:4c:0b:67:73:93:a5:e8:6b:13:e8:b5:e7:
3b:c2:88:ef:97:d3:7e:08:76:92:7c:3e:94:3b:00:
cb:4e:22:3e:62:0e:01:af:57:21:b8:1e:72:cf:73:
74:e2:9d:7b:bf:87:d1:eb:6c:c2:69:b4:10:44:89:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C0:86:F3:B7:49:2C:0F:28:6F:BB:BF:B7:98:62:13:66:BD:BF:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDB7FCAE64B911F19C4DCDE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0/24
154.202.29.0-154.202.31.255
154.202.69.0/24
154.202.72.0/23
154.202.76.0/23
154.202.109.0-154.202.110.255
154.202.112.0-154.202.114.255
154.202.116.0/24
154.202.137.0/24
154.213.192.0/24
154.213.200.0/23
154.213.205.0/24
Signature Algorithm: sha256WithRSAEncryption
74:59:64:26:41:36:0d:71:0a:98:d9:5e:d1:d1:a7:21:32:e2:
1d:c0:db:77:f3:f9:85:12:ed:55:48:8d:12:0e:04:41:65:f5:
ca:af:a9:ad:03:dc:84:12:49:ff:c9:ed:5e:c2:3a:bd:5c:00:
02:ab:d5:3d:82:2e:82:60:50:5c:6f:58:db:aa:89:9d:25:20:
e6:1f:ec:a1:26:80:af:2e:6e:b7:45:95:73:42:c7:9a:c6:c4:
da:fc:9f:db:fd:15:d8:b9:26:ac:e6:2b:e8:03:a5:32:cb:ab:
70:a8:51:e1:3d:69:71:41:a8:d8:7b:45:7b:e0:74:51:41:b1:
35:4e:e9:af:d4:b0:2d:48:72:75:f9:e2:09:cb:ce:75:40:09:
b3:6c:11:41:f1:c4:cb:d5:bc:da:2a:26:19:32:5f:51:9a:df:
cd:83:07:f2:b7:22:0a:70:63:c1:2b:29:ca:1b:c5:61:be:00:
21:e1:22:3f:c7:bb:6a:a1:2e:21:c3:49:69:0a:c4:c3:b3:98:
7f:e7:a7:4d:49:9e:46:a3:41:cd:b5:6d:ea:7b:5e:69:55:eb:
31:ca:b9:54:bb:61:01:2b:ba:26:96:be:e0:2a:9d:dd:a1:4f:
fb:ed:62:27:ba:7f:3d:3e:97:3c:1e:90:78:43:c0:65:5a:e7:
60:93:63:bb
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIDAdJ4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjEwMTA0NzEwWhcNMjYwNzE2MTA0NzEwWjAYMRYw
FAYDVQQDEw02YTI5NDBiMi05N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8y9cZLEc5pZGxF/F+lja22mE9GlssJHmdnkvstdzyGvLCrYGqzjIvGNl
+mJFofZOPC/oGUAj17e9O8d14muglxADcQf1bVOpsV8zVbeVDUu3KdX7WRARhpu8
ctmCYfZxK/psOzCz7inuS2slgspbyaJO3if5pT53rGYa1PAt2DR3cEYTnXpHDaM8
giyDw/tSCd6jR4BqlIU3zCypMEQmrS4w/SAaZYvxcILWCnOsB7vD28YqHE3JElRy
VSNe26ByoPSOQZlMC2dzk6XoaxPotec7wojvl9N+CHaSfD6UOwDLTiI+Yg4Br1ch
uB5yz3N04p17v4fR62zCabQQRIl2awIDAQABo4IC/zCCAvswHQYDVR0OBBYEFBvA
hvO3SSwPKG+7v7eYYhNmvb+iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CREI3RkNBRTY0QjkxMUYxOUM0RENERTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAmsYUMAwDBACayh0DBAWa
ygADBACaykUDBAGaykgDBAGaykwwDAMEAJrKbQMEAJrKbjAMAwQEmspwAwQAmspy
AwQAmsp0AwQAmsqJAwQAmtXAAwQBmtXIAwQAmtXNMA0GCSqGSIb3DQEBCwUAA4IB
AQB0WWQmQTYNcQqY2V7R0achMuIdwNt38/mFEu1VSI0SDgRBZfXKr6mtA9yEEkn/
ye1ewjq9XAACq9U9gi6CYFBcb1jbqomdJSDmH+yhJoCvLm63RZVzQseaxsTa/J/b
/RXYuSas5ivoA6Uyy6twqFHhPWlxQajYe0V74HRRQbE1Tumv1LAtSHJ1+eIJy851
QAmzbBFB8cTL1bzaKiYZMl9Rmt/NgwfytyIKcGPBKynKG8VhvgAh4SI/x7tqoS4h
w0lpCsTDs5h/56dNSZ5Go0HNtW3qe15pVesxyrlUu2EBK7omlr7gKp3doU/77WIn
un89Ppc8HpB4Q8BlWudgk2O7
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:57 2026 by rpki-client