Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/186F998A506111F1AC83CC1DCF1D38B0.roa
File: 186F998A506111F1AC83CC1DCF1D38B0.roa (raw, json)
Hash identifier: 8gmzddJ4k5LQLxTtGh0o8JqRM5+dd7xrvJd7kBBKZsY=
Subject key identifier: 27:9E:30:53:D6:FA:75:13:B9:1E:35:11:F6:15:FB:74:DD:C6:62:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/186F998A506111F1AC83CC1DCF1D38B0.roa
Signing time: Fri 15 May 2026 13:22:18 +0000
ROA not before: Fri 15 May 2026 13:22:12 +0000
ROA not after: Tue 16 Jun 2026 13:22:12 +0000
asID: 17497
IP address blocks: 154.197.16.0/21 maxlen: 24
154.197.16.0/24 maxlen: 24
154.197.17.0/24 maxlen: 24
154.197.18.0/24 maxlen: 24
154.197.19.0/24 maxlen: 24
154.197.20.0/24 maxlen: 24
154.197.21.0/24 maxlen: 24
154.197.22.0/24 maxlen: 24
154.197.23.0/24 maxlen: 24
154.217.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117686 (0x1cbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 13:22:12 2026 GMT
Not After : Jun 16 13:22:12 2026 GMT
Subject: CN=6a071e0a-e9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6c:85:69:f5:af:8c:9a:f7:89:bb:62:05:36:
72:fc:7f:e4:9e:33:6e:f7:12:e4:f2:c8:40:66:13:
4d:9f:6e:3e:7d:44:7e:5d:93:d5:8d:8b:65:a1:e7:
5b:d2:9f:d7:68:3d:e1:c7:15:5c:88:02:07:4d:2c:
7f:5c:1b:68:94:2e:08:4c:dc:7b:07:1f:a6:5f:ed:
47:51:5a:80:b1:74:87:bd:bd:57:9a:a5:9b:3f:07:
04:ec:d3:1c:20:d4:71:49:a1:db:2d:8c:c2:c3:53:
3c:85:5d:4c:30:ba:7b:88:a5:1b:33:ce:12:f5:0a:
1e:92:35:fe:42:40:a6:36:7a:4c:f8:11:ca:20:c3:
12:e0:9d:73:f0:06:4d:7a:fb:93:e0:f1:ef:99:34:
bf:b4:8c:73:39:27:16:fb:3e:5d:24:99:ba:ba:1e:
98:42:98:74:87:83:0f:c8:da:bb:3e:60:e7:82:6a:
93:c1:0d:1c:5e:9a:9f:31:c2:96:d2:8d:9e:8c:bd:
b5:73:69:46:1a:a9:e7:4e:96:90:c7:be:b7:fe:aa:
fa:47:a4:34:b8:36:7b:e3:13:1c:96:40:17:eb:eb:
3d:84:30:5e:6a:50:81:a8:78:73:05:c5:ad:e2:9b:
75:30:41:99:98:73:46:a6:b9:ca:53:f0:df:1c:99:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9E:30:53:D6:FA:75:13:B9:1E:35:11:F6:15:FB:74:DD:C6:62:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/186F998A506111F1AC83CC1DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.16.0/21
154.217.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:45:f7:18:b1:1a:b7:71:a7:7b:99:36:73:e5:d7:5b:e2:52:
46:43:3c:e6:81:47:c6:ce:13:bd:30:0b:71:b6:23:e6:58:8e:
c4:01:05:77:2c:53:b4:9d:06:bb:8f:30:90:d4:17:98:62:d6:
4a:0a:15:e6:09:7f:64:f4:c9:10:df:75:b0:63:cd:ef:1f:f8:
36:f5:c3:0a:2d:e7:f3:f8:cc:4d:15:15:73:06:15:31:8c:33:
89:6f:ee:ca:b5:13:ab:66:6b:1a:07:41:d2:2b:69:12:bd:d5:
9b:38:8c:8f:d6:4e:89:ea:1c:75:0a:47:92:bb:dc:1e:c5:97:
41:c6:b5:a4:79:65:c1:e4:53:80:40:fe:d5:24:35:37:14:d0:
7a:50:94:3e:7b:34:64:d2:3e:85:a1:43:7d:72:42:6d:6c:12:
6c:c3:0b:12:67:59:3d:48:58:f6:bf:80:68:62:01:9f:e8:24:
55:00:2d:0a:c1:66:3e:b7:57:a5:26:3d:a4:1d:b2:b0:15:50:
86:69:94:0a:d7:ca:1b:6c:86:6b:af:90:72:62:a9:05:03:e7:
e8:22:46:85:25:ef:3d:c9:9b:26:b8:bf:4a:a7:fc:9c:e6:74:
68:ba:8e:09:d9:4d:b2:a9:6d:8a:4e:07:a1:e1:04:fb:df:b6:
9d:43:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:06 2026 by rpki-client