Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A524B0E581811F1ABFF6EA5CE1D38B0.roa
File: 0A524B0E581811F1ABFF6EA5CE1D38B0.roa (raw, json)
Hash identifier: ZeUeUh989obJA5E9jo4RWcPvZ35/eki62fOctDHhrwk=
Subject key identifier: 9C:16:D0:D9:03:49:E6:44:C2:EE:ED:2C:4E:52:7F:D5:55:64:9D:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A524B0E581811F1ABFF6EA5CE1D38B0.roa
Signing time: Mon 25 May 2026 08:59:34 +0000
ROA not before: Mon 25 May 2026 08:59:20 +0000
ROA not after: Sat 06 Jun 2026 08:59:20 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118606 (0x1cf4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 08:59:20 2026 GMT
Not After : Jun 6 08:59:20 2026 GMT
Subject: CN=6a140f76-bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:cb:94:55:7b:14:74:03:42:b6:0d:54:af:
3d:af:5d:7d:ba:ba:96:99:29:30:20:d3:13:ff:d7:
38:33:3c:e4:ee:00:47:85:e5:8a:ee:08:89:ea:ff:
83:f1:6d:9a:bb:c0:26:ec:af:f0:3c:18:f9:34:9d:
50:1e:f4:88:cf:24:0a:9e:64:19:81:53:ae:ed:ed:
25:8e:df:9f:a4:af:0f:4d:df:15:1e:aa:c9:2a:ab:
e2:5a:9e:cc:99:d2:3c:29:e3:bb:2a:9c:82:e0:2b:
a1:85:cd:e6:be:34:75:89:f9:8f:5c:29:b4:81:db:
f3:d1:8d:0b:fc:78:c6:00:00:75:80:3a:6b:9a:ae:
a9:9f:72:0e:7f:85:14:f4:22:60:2c:d7:ce:ea:0b:
1d:ae:12:e5:cd:d0:6c:dd:ea:ca:17:c9:e4:d0:9c:
dc:6e:3f:be:a3:a7:e6:d0:d5:87:57:81:3b:19:e3:
3a:42:1a:70:f1:1a:4f:1d:5f:f7:00:84:93:89:c4:
bf:f3:65:fb:78:91:f4:3f:ff:c4:34:cb:71:84:f6:
22:6a:5e:16:b5:88:73:19:95:18:fe:27:7d:2d:1a:
49:20:8e:46:8e:37:0b:45:fd:f5:3d:4d:48:a9:67:
8e:49:2c:68:82:1c:f3:a7:63:a9:96:43:61:4e:ed:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:16:D0:D9:03:49:E6:44:C2:EE:ED:2C:4E:52:7F:D5:55:64:9D:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A524B0E581811F1ABFF6EA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.25.255
Signature Algorithm: sha256WithRSAEncryption
1b:c8:fb:8a:fe:4b:46:fa:77:77:e2:b6:f6:09:d1:98:af:ca:
1c:73:68:f2:1d:fb:68:50:68:34:99:63:99:e1:f7:15:5b:d9:
5e:96:50:bc:cc:a3:04:a1:1d:52:75:2b:ab:32:98:ab:f1:c3:
fc:f7:97:49:77:19:b1:2d:6e:13:3a:97:5e:ce:70:70:59:bb:
08:53:49:18:68:3e:52:80:4c:7a:7c:a8:c7:47:58:e5:ca:9c:
14:7b:25:46:95:ff:9a:1f:ce:0e:0c:d5:eb:62:ea:1c:d3:cb:
1e:74:a8:50:98:80:20:bb:2c:d2:2b:d1:2f:df:7f:c3:e3:85:
76:c7:9e:9b:f6:2d:a4:f2:19:02:7c:c9:44:51:21:c3:e7:dc:
ea:e3:30:0f:03:44:3a:33:d2:ea:a2:08:5d:3d:7c:08:ca:4f:
16:a7:c0:16:8f:4d:58:0f:49:bc:77:51:c9:45:46:fd:1b:ca:
fe:fc:c6:af:6b:51:c7:71:9a:6f:06:d7:d0:f4:f5:77:b1:3a:
d5:5e:70:04:90:58:4b:7b:33:f0:fd:8a:10:e1:3f:75:04:03:
c7:67:23:61:06:44:e3:98:1e:4c:c3:30:9a:04:bd:1e:08:5d:
85:73:aa:69:33:c3:96:d1:d0:d6:9c:e9:64:da:3a:28:41:05:
d5:a7:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:08:26 2026 by rpki-client