Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7BCDC876B211F1BFFB74EFCE1D38B0.roa
File: 5E7BCDC876B211F1BFFB74EFCE1D38B0.roa (raw, json)
Hash identifier: bQTT7xq3N5jqJBwMYT8Cizt0dowDxdcUijyjUWQ6a1g=
Subject key identifier: B5:05:15:5E:E9:17:AD:EA:A0:47:53:32:95:09:DE:8A:97:54:E6:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7BCDC876B211F1BFFB74EFCE1D38B0.roa
Signing time: Fri 03 Jul 2026 07:39:49 +0000
ROA not before: Fri 03 Jul 2026 07:39:44 +0000
ROA not after: Thu 06 Aug 2026 07:39:44 +0000
asID: 140227
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120494 (0x1d6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 07:39:44 2026 GMT
Not After : Aug 6 07:39:44 2026 GMT
Subject: CN=6a476745-9ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:8d:69:6b:da:be:d2:40:14:ea:b5:01:c8:
16:68:e9:54:06:5b:a6:e3:b2:02:67:b7:6d:82:e8:
82:69:83:f9:e4:b8:31:0e:73:0e:d6:1d:5d:91:2a:
f0:69:b9:0f:7d:5b:eb:5c:85:a3:74:69:a4:03:ab:
05:43:4e:00:fe:e5:7f:98:a3:91:08:71:22:5f:c9:
be:7b:76:68:cc:cd:e2:70:fd:3b:69:46:c9:90:4f:
d0:f1:ca:50:8b:53:c2:f2:65:0c:11:64:31:3c:e3:
48:d5:d3:78:91:44:dd:e5:f4:4e:b3:5c:3f:57:aa:
bd:bb:5b:8f:f5:00:97:c5:7e:c3:c2:d9:f8:ad:c9:
7a:6d:57:3f:e2:60:6f:1b:e8:8e:8d:f7:fa:91:11:
89:8b:bb:62:10:8d:b9:2c:3a:b8:ab:00:74:c5:43:
bf:52:26:5b:c7:a4:22:b0:71:3f:a0:e4:ba:89:99:
1f:b6:50:9b:15:d3:be:0c:29:da:fd:85:5c:f6:95:
5f:45:74:ea:c2:3d:b5:73:c0:f4:33:d2:1c:c0:6e:
29:9e:56:e7:8a:46:a1:6c:6e:4d:c9:0c:10:d6:b5:
55:65:3b:56:3b:16:10:45:60:6f:f7:a2:2b:94:b1:
a6:03:81:c1:1f:42:a9:21:03:90:88:c2:68:a1:6a:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:05:15:5E:E9:17:AD:EA:A0:47:53:32:95:09:DE:8A:97:54:E6:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7BCDC876B211F1BFFB74EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.20.255
Signature Algorithm: sha256WithRSAEncryption
26:6b:1a:56:fd:33:aa:60:68:26:5c:3b:86:d2:e0:f4:5c:f2:
18:66:67:42:4a:b2:38:eb:f6:2f:ec:91:3a:09:d6:6b:b8:f7:
64:fd:7e:90:ad:8e:5c:80:c1:db:ae:71:c8:36:e3:11:32:f2:
ff:cf:3c:b7:ab:4b:cf:71:95:58:41:39:b6:54:af:66:3c:df:
82:16:80:5d:33:4f:cd:63:c7:7a:f2:ae:a4:47:4f:43:8b:d0:
fa:18:08:4e:3f:18:99:7d:6d:bc:5a:f0:dd:6a:52:59:e7:e2:
e0:cf:06:8c:c1:49:15:b1:fb:5e:3a:c0:b9:5d:6e:5d:d9:7f:
3e:b6:cc:e2:c4:7c:da:01:e6:22:a5:d8:d9:8e:1f:3a:46:93:
2c:bf:f1:aa:b1:b4:6d:f0:14:aa:d1:92:00:59:c0:ea:a0:78:
4a:0d:87:25:7d:9a:7b:10:bc:7c:48:c4:36:a9:f4:81:90:3a:
84:57:dc:83:f3:3d:f7:6e:1b:67:a5:48:83:12:40:44:b3:55:
2b:55:41:5c:0c:8e:a3:f3:2c:2a:ca:1e:41:61:ff:bf:1b:2a:
36:56:c7:83:db:09:7b:37:a0:9b:62:68:20:a2:fa:dd:a6:d9:
98:29:08:25:df:2d:29:e3:52:ee:97:9c:e7:71:f1:78:3c:51:
2d:62:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:49 2026 by rpki-client