Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3810F34A923A11F195A3D208CF1D38B0.roa
File: 3810F34A923A11F195A3D208CF1D38B0.roa (raw, json)
Hash identifier: AbYphB+MGcsSyiXsy+czyXZ6CruZl8MM73vfXzhBu5U=
Subject key identifier: 88:64:B3:AC:C9:46:00:15:56:00:EA:50:FC:3D:A6:1A:96:F9:62:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3810F34A923A11F195A3D208CF1D38B0.roa
Signing time: Fri 07 Aug 2026 08:30:18 +0000
ROA not before: Fri 07 Aug 2026 08:30:13 +0000
ROA not after: Sun 06 Sep 2026 08:30:13 +0000
asID: 140224
IP address blocks: 154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122190 (0x1dd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 08:30:13 2026 GMT
Not After : Sep 6 08:30:13 2026 GMT
Subject: CN=6a759799-aa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:4e:8c:71:e0:9e:bb:81:69:74:e1:2d:03:
82:67:a4:92:e2:4e:cb:4e:2b:3f:62:49:8e:54:3b:
d0:4c:fd:55:2e:f7:64:d2:e4:c3:b4:a3:3d:0a:86:
90:31:15:21:c3:4d:31:0f:c9:54:bd:03:b5:fe:28:
73:65:47:69:3e:00:f6:44:f5:54:a9:f5:35:4c:54:
7b:e1:89:93:24:95:4c:77:ec:da:ac:39:1e:64:3c:
65:e4:ad:7e:51:7f:c8:b8:71:ea:97:1a:47:77:dc:
59:4d:b1:3d:be:0b:80:3a:3b:61:15:fb:fa:42:fe:
eb:2d:4e:72:cb:6a:ab:3f:f8:24:4e:da:31:ac:69:
49:7f:7a:e0:ec:df:10:78:d2:35:4a:db:fb:7c:36:
f9:7d:cd:da:89:65:7c:73:77:54:35:26:fc:21:b9:
d9:da:c2:38:76:ce:4e:db:2b:42:79:bb:94:97:0e:
82:7d:e3:c4:77:40:30:16:27:83:9e:4c:15:20:7f:
d0:de:4f:72:21:7c:27:f7:a7:fa:f3:70:d8:db:05:
ac:91:33:9a:06:b3:2d:b3:d1:87:b6:02:85:70:54:
a7:aa:c4:64:43:fa:28:d1:a8:e2:6c:2d:f9:f3:af:
95:75:14:80:d7:1a:1c:b6:1d:47:ed:ff:f8:f3:e7:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:B3:AC:C9:46:00:15:56:00:EA:50:FC:3D:A6:1A:96:F9:62:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3810F34A923A11F195A3D208CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.20.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
0f:6d:05:b7:ce:d7:52:63:f0:11:f9:c6:44:d7:1e:cf:75:54:
0f:ec:5e:64:2f:01:f6:81:1c:e5:f9:53:f5:00:1f:e0:c2:16:
d9:26:58:c5:9b:08:79:3b:59:9c:64:e4:53:85:c3:ac:ba:ae:
17:33:ec:8f:77:5b:6d:cb:a9:f2:ce:22:2d:95:4e:e0:cf:b8:
1f:77:f3:c2:38:34:a1:c5:94:a2:4c:13:a2:3f:64:4f:5f:80:
36:2e:dd:a0:af:10:22:92:74:ce:d7:26:48:d7:1c:da:f3:1f:
25:65:57:f1:b0:24:91:1f:15:a8:67:1f:e9:20:44:fd:ef:15:
b8:b2:45:8c:ff:78:bd:2f:3e:69:95:6c:56:f8:9d:be:b1:30:
7d:5f:49:2e:76:94:f2:b5:06:80:6b:2e:6d:d2:04:68:89:c0:
df:fd:1b:5e:07:3c:2d:db:2b:5e:ba:82:77:10:7b:f5:43:3a:
16:8e:79:20:77:8e:8b:86:bc:c8:5c:f4:08:fb:76:65:fa:d2:
4f:42:cf:f5:91:db:b5:85:f4:59:b8:e7:09:1e:98:97:8f:b3:
03:ba:dd:d2:dc:ef:81:34:92:e3:08:84:98:26:6a:fb:04:55:
08:65:9b:43:32:4c:8b:27:42:2f:cb:89:a0:39:29:64:91:ca:
ef:02:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:15 2026 by rpki-client