Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9B3EE08C7C11F18F6DBC15CF1D38B0.roa
File: 4E9B3EE08C7C11F18F6DBC15CF1D38B0.roa (raw, json)
Hash identifier: GtBWggxxJIaEUr8mojNPL9sFbw15mLiNir8iTBJJKOE=
Subject key identifier: 9F:5D:85:24:B0:94:1F:0B:16:A9:FC:4D:EF:C0:C3:AB:2F:EB:89:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9B3EE08C7C11F18F6DBC15CF1D38B0.roa
Signing time: Fri 31 Jul 2026 01:08:15 +0000
ROA not before: Fri 31 Jul 2026 01:08:11 +0000
ROA not after: Sun 09 Aug 2026 01:08:11 +0000
asID: 140227
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Aug 2026 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121862 (0x1dc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 31 01:08:11 2026 GMT
Not After : Aug 9 01:08:11 2026 GMT
Subject: CN=6a6bf57f-63a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:a6:29:8b:eb:8a:f8:9a:e9:33:41:6e:14:
d8:be:3f:de:22:0e:3a:e9:fa:35:aa:38:02:90:d7:
c5:5b:12:c1:46:7e:00:6a:33:bd:c7:d2:5f:2b:74:
86:75:4e:59:9a:84:0e:da:9a:87:58:29:6f:23:ce:
d4:fa:a7:fe:6f:6a:dd:71:33:ad:c1:56:b4:ea:95:
57:b1:fc:d3:9e:11:5b:6f:01:eb:60:18:53:cf:50:
04:1a:26:c4:30:49:97:aa:97:e6:59:d9:af:10:67:
9e:fa:b3:99:39:7a:24:2f:36:3b:6f:e2:00:f4:ac:
92:72:37:94:b9:4e:16:ef:23:7f:d5:95:20:17:f2:
99:1f:65:7b:d8:db:50:df:e8:6e:1a:a2:2d:e0:ef:
86:14:01:cc:46:b5:35:f5:df:f2:5e:9b:89:2c:82:
e5:46:08:be:d2:46:3d:d4:06:37:91:d7:8a:6a:22:
f2:80:27:92:0b:b4:ee:55:f8:04:6c:da:87:b5:30:
c5:b0:90:9b:ae:2d:aa:25:d1:57:0e:9c:09:a2:75:
1f:d9:be:5f:29:73:c0:75:a7:e9:e6:92:b8:c7:d8:
c0:15:c3:49:9a:d5:a7:a4:8b:cd:b0:3f:e8:c0:0f:
ae:26:16:f8:8a:1d:d1:d0:d5:14:15:97:6b:dd:10:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:85:24:B0:94:1F:0B:16:A9:FC:4D:EF:C0:C3:AB:2F:EB:89:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9B3EE08C7C11F18F6DBC15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/22
154.86.23.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
71:44:d0:2b:a3:36:48:93:59:c1:3a:31:05:1a:96:e6:04:58:
8b:ef:ac:78:f7:ae:ae:aa:e5:b6:58:68:e8:08:7f:ee:6c:ec:
e8:bb:31:ad:dc:91:70:2e:d8:f7:20:ee:14:bc:c3:cd:1e:b9:
cf:0d:2d:c9:fb:d2:26:76:97:b9:8f:42:6b:7b:b9:f6:e3:c0:
eb:03:12:9a:4f:97:58:a2:5d:5e:11:59:17:e9:d3:5b:2c:ac:
54:35:6b:43:d0:47:5e:12:de:6b:ef:3e:73:c9:71:79:21:56:
b1:54:27:ae:bd:2d:58:57:6e:cb:0d:3b:57:8d:fe:1f:da:8d:
0e:dc:14:28:23:79:b7:f4:81:2b:56:b4:f0:42:7c:df:0d:b3:
35:20:37:ff:f7:37:60:f2:24:77:33:47:2a:41:5a:c1:f9:d4:
49:d9:d9:b9:15:9f:47:2a:62:31:59:00:0a:f0:3b:2e:75:57:
ce:46:c2:db:1f:eb:e1:79:02:26:b2:23:7c:a4:45:60:e5:1f:
50:9f:67:98:7c:3b:7c:ad:72:eb:1c:16:18:f7:f4:b3:a7:59:
a5:53:7c:8d:92:9f:9e:e4:12:2a:e2:a9:fc:0e:28:92:2c:b6:
c6:ea:c0:26:df:02:25:3b:db:34:95:b6:c9:b8:9b:4b:d7:33:
4e:ac:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:21 2026 by rpki-client