Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24765C8E916E11F1B45544B5CE1D38B0.roa
File: 24765C8E916E11F1B45544B5CE1D38B0.roa (raw, json)
Hash identifier: ++YB1F2CVtO7bOTE/RFM3VgSzXyHP6Dl0GQtDbrVcQM=
Subject key identifier: F2:B9:9C:90:47:6B:5B:8E:E0:27:5B:15:9D:05:7C:96:59:F0:18:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24765C8E916E11F1B45544B5CE1D38B0.roa
Signing time: Thu 06 Aug 2026 08:09:27 +0000
ROA not before: Thu 06 Aug 2026 08:09:23 +0000
ROA not after: Sun 16 Aug 2026 08:09:23 +0000
asID: 40115
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122083 (0x1dce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 08:09:23 2026 GMT
Not After : Aug 16 08:09:23 2026 GMT
Subject: CN=6a744137-d5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:7b:96:ed:06:ab:d9:f4:92:f1:3e:4f:34:
88:8f:4d:aa:aa:3b:a1:32:76:20:a2:36:05:22:51:
9a:7f:56:03:16:57:bb:03:08:2f:6e:44:c0:40:a3:
50:2d:b1:92:49:be:4c:9a:0b:d1:de:28:b9:0f:e5:
ab:83:81:1f:e7:af:88:3f:02:14:99:29:c1:c3:5c:
da:6a:a8:28:c4:6c:39:3a:fb:22:18:57:24:f8:d5:
bf:61:0f:ad:5e:a0:b8:1f:5f:e3:98:c8:aa:e5:39:
ac:29:52:d4:73:37:ce:d9:b7:3f:3a:ca:5b:c5:3a:
41:e5:a7:fe:5c:b7:a1:fc:c3:5a:43:48:4b:f1:9e:
7f:1b:32:16:b5:67:c2:1c:41:25:6b:ea:79:19:20:
3f:76:a1:d3:41:58:c1:4f:e1:8a:48:e2:b2:17:3e:
c4:e0:bb:d6:34:49:52:f8:24:e3:1d:e3:d2:08:35:
fa:b9:a3:cf:89:b4:a4:0f:79:59:8d:ea:3b:60:01:
fc:59:e5:2b:6b:30:79:84:cc:b7:88:ba:a6:fe:5c:
5c:29:78:27:ad:a8:17:b1:a0:99:c1:88:81:5f:b1:
5d:c5:28:46:ee:e5:ce:00:24:02:02:06:49:20:03:
ad:ba:bb:1a:b3:cd:aa:78:ea:61:c4:15:a0:11:79:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:9C:90:47:6B:5B:8E:E0:27:5B:15:9D:05:7C:96:59:F0:18:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24765C8E916E11F1B45544B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
28:6c:4b:16:c4:ae:29:c7:47:1c:7c:05:d8:96:73:8d:bf:3c:
73:0f:09:ae:db:85:59:2b:3b:4a:ef:7c:f4:40:52:e5:c2:59:
51:a9:a3:e0:74:0e:98:b9:c2:6c:14:cd:e6:98:1c:17:82:ac:
5e:05:74:58:b8:99:96:08:93:58:70:42:89:aa:d2:f9:df:b1:
6e:ab:b2:42:1d:e8:f1:c2:56:81:25:11:1a:79:ef:85:11:c3:
04:ca:70:69:56:63:f8:fa:35:c1:0f:c7:d8:b7:02:cc:d8:dd:
21:83:84:b7:04:8f:e6:20:f3:23:9d:6e:26:37:b7:62:51:92:
92:3d:d1:a3:81:6f:c9:51:95:cd:e5:fe:67:5d:83:00:3b:1d:
ae:ed:bc:a0:9b:df:b2:e7:0f:92:b8:86:14:00:12:86:d7:b9:
34:d3:7e:8a:5c:ac:5e:44:e2:9a:65:d0:b2:06:38:b1:1a:88:
e1:56:f1:80:28:2a:19:ee:7f:a5:25:30:b6:d2:8d:b0:4b:7e:
ec:e2:0c:8c:ba:48:d2:7b:9b:a8:29:eb:16:bd:18:d4:ea:99:
51:58:56:bb:25:ef:a8:2b:22:8d:53:26:e2:07:3a:ee:b2:ba:
41:a4:e5:c3:c7:91:aa:94:32:e4:44:8b:c9:ef:eb:e5:64:53:
b0:a7:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:18 2026 by rpki-client