Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE0DCE58574511F19E4090A7CE1D38B0.roa
File: BE0DCE58574511F19E4090A7CE1D38B0.roa (raw, json)
Hash identifier: OueAcWObJsdXSzRM5CEg4wemZqz+oK++1/LHQm5uOK4=
Subject key identifier: B8:CE:C2:B5:07:E8:06:48:14:C0:E7:E8:32:F2:57:79:E5:BA:DD:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE0DCE58574511F19E4090A7CE1D38B0.roa
Signing time: Sun 24 May 2026 07:54:08 +0000
ROA not before: Sun 24 May 2026 07:54:03 +0000
ROA not after: Tue 30 Jun 2026 07:54:03 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118447 (0x1ceaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 07:54:03 2026 GMT
Not After : Jun 30 07:54:03 2026 GMT
Subject: CN=6a12aea0-f448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:94:0a:22:c4:19:5d:f8:29:cb:85:f9:eb:
39:74:30:11:1c:b9:8f:a2:89:18:76:3f:b9:05:bc:
8c:62:b1:94:a4:17:92:c9:5b:62:44:bf:2b:b2:8e:
2c:ed:fa:85:81:40:78:c1:c6:10:10:23:c5:d0:cd:
fc:ec:ed:88:19:7c:93:8a:c3:94:55:82:70:db:5e:
69:0d:a6:8b:02:3d:0e:c6:9a:27:56:06:c7:83:c2:
49:13:41:3f:dc:a9:05:17:a5:75:b5:e4:f6:35:8a:
68:bd:0f:7f:d9:6f:39:17:fe:a9:30:3c:c0:b1:52:
89:ee:a4:5e:32:dc:d0:37:c2:8f:f4:ae:c3:dc:0f:
6a:3d:4c:20:24:81:5e:10:a9:0f:2f:d7:4b:30:57:
3d:fd:39:33:e1:42:9a:cf:cb:c6:f6:d9:67:0e:40:
f4:25:e9:ce:3b:f5:1a:15:0e:fa:be:2f:5a:d4:97:
59:bc:81:b9:0c:b8:2f:90:78:fc:f6:7f:0c:0b:02:
10:22:d7:7c:f9:84:9e:bd:bd:9f:3c:5d:c8:d4:47:
e1:0f:00:91:bf:f6:f2:7b:81:74:02:a1:47:a2:5c:
4b:4e:06:e8:52:51:23:0f:f4:12:e2:07:84:e0:fc:
e7:04:12:10:d6:fe:e9:9c:4b:0b:1b:4b:70:22:ab:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:C2:B5:07:E8:06:48:14:C0:E7:E8:32:F2:57:79:E5:BA:DD:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE0DCE58574511F19E4090A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:79:41:a1:ec:1b:40:72:9c:53:02:e6:ca:09:f1:de:ee:37:
18:cd:4d:e4:0e:51:9d:78:eb:ab:c9:fc:c8:fd:3c:6f:ca:85:
70:7e:d9:48:e9:a0:bd:34:db:da:33:9e:e6:22:67:5d:a6:5a:
41:e8:dc:04:83:7f:73:83:d3:36:a8:7d:f7:3d:d2:89:f2:15:
1d:c7:bc:86:ab:54:46:be:db:70:72:cd:e2:39:cf:dd:e2:46:
d5:f3:33:81:41:22:5d:39:e6:be:f9:4e:b8:b2:cf:99:27:79:
6c:c8:1e:63:22:6f:86:d9:69:00:f8:a5:fc:77:4c:28:f6:99:
d4:e1:60:d1:7f:63:aa:99:87:33:ff:9c:95:35:a4:78:64:13:
23:7c:fc:a2:22:1e:7d:4e:86:b0:4b:b1:fd:05:96:81:da:10:
59:9b:14:51:e4:a0:3e:32:16:43:c1:d6:f3:8a:9a:d5:80:a1:
86:5a:35:71:ba:3d:4d:db:68:e7:9f:17:58:51:a1:ac:7c:c4:
e5:7d:d9:32:88:7f:f1:40:d7:67:2d:ed:9b:b5:48:3a:24:b0:
76:38:d3:ce:d2:a0:c4:3f:8b:f3:8e:08:d9:e7:21:96:8c:94:
5b:3f:b7:e8:91:5d:ee:46:e0:9b:43:b8:c8:74:d9:d7:eb:be:
ff:3a:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:27:43 2026 by rpki-client