Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57ECB7E4491511F1B1D412CACE1D38B0.roa
File: 57ECB7E4491511F1B1D412CACE1D38B0.roa (raw, json)
Hash identifier: D1wZtc6uip009USTvFjTAFMNEBf8wMjn9WEIodywNoY=
Subject key identifier: FC:FA:F5:19:A4:EE:D0:AC:B0:02:D3:67:84:4A:69:19:B9:10:12:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C967
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57ECB7E4491511F1B1D412CACE1D38B0.roa
Signing time: Wed 06 May 2026 06:32:25 +0000
ROA not before: Wed 06 May 2026 06:32:20 +0000
ROA not after: Wed 13 May 2026 06:32:20 +0000
asID: 153517
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/21 maxlen: 24
154.86.16.0/22 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/22 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/21 maxlen: 24
154.86.24.0/22 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/22 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117095 (0x1c967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 06:32:20 2026 GMT
Not After : May 13 06:32:20 2026 GMT
Subject: CN=69fae078-5f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:bc:41:57:21:44:46:f2:f3:6e:2a:84:8f:
24:38:66:9c:3a:ef:36:10:fb:79:ba:67:1c:da:d2:
ad:32:fe:5c:a3:74:33:6d:43:21:31:d5:e6:6f:d2:
77:9c:ec:b0:72:86:da:1c:91:23:9a:52:9c:33:4b:
9f:11:f0:53:1a:12:dc:c3:68:d1:00:bb:c2:e3:79:
02:f6:ba:c9:90:e8:33:f6:23:65:94:15:7b:05:df:
d7:ca:01:49:f6:f9:cd:ea:fd:28:b4:01:33:01:76:
00:1b:4c:b5:fe:f9:f4:06:77:a2:df:08:e8:6b:f8:
59:a2:35:b7:c6:ea:d0:53:f3:87:2b:2e:cc:c0:18:
91:69:84:9a:b9:64:26:e7:0f:23:5d:38:1d:6b:71:
2e:43:71:6b:27:ee:63:99:05:5f:76:7e:ba:a1:cd:
3d:9a:7d:3e:83:19:40:37:0a:4d:dd:8a:ba:83:56:
12:ba:c4:d0:f5:81:c7:af:e1:6f:c3:b9:aa:c8:d2:
38:04:65:0c:2c:6c:64:a9:c0:7b:44:ca:d5:62:ee:
d0:9c:8f:dc:d1:2d:a9:e2:75:26:b0:44:d1:dc:18:
97:6a:73:29:cf:c9:7f:f8:cc:26:6a:95:2e:5b:8e:
28:03:81:87:cf:8d:2f:b9:9a:bb:4a:94:07:b9:25:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FA:F5:19:A4:EE:D0:AC:B0:02:D3:67:84:4A:69:19:B9:10:12:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57ECB7E4491511F1B1D412CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:6b:76:4e:9a:6f:1f:3b:d5:3c:3c:dc:5c:9c:1b:a2:fd:34:
68:ee:c2:82:db:ae:64:9b:86:cf:5d:52:19:ef:dd:13:c4:d5:
84:6c:2d:58:07:b6:fe:3e:0f:0a:0a:c1:cf:86:26:ff:04:04:
d2:41:6f:e0:8b:4e:2f:60:cc:c8:55:63:00:ae:f7:25:84:7f:
9c:c2:14:2f:95:f8:ad:93:3d:3d:6f:e1:ca:11:68:c7:31:44:
59:d0:03:35:1e:26:92:ab:8a:34:e8:40:ac:93:e2:80:47:fd:
59:92:3d:7b:6e:55:0c:98:d1:40:47:f1:a1:db:4b:16:ef:6a:
31:60:79:1e:63:d2:e0:91:63:0d:5a:0b:91:f3:d7:83:56:28:
b6:a0:df:30:c2:7b:6f:a0:eb:6f:98:c5:38:77:ac:52:f5:0a:
50:12:df:65:0e:b3:70:93:44:f2:d5:0d:32:88:94:2e:39:dd:
14:b2:29:32:47:a2:0a:57:65:b0:42:1c:e6:c9:6d:da:96:d1:
24:8d:d3:96:0e:e5:0d:20:e8:e6:9b:64:4f:f4:92:1b:18:60:
73:b3:63:08:88:ad:30:ae:4f:ec:e7:60:c8:3a:7d:88:47:e7:
be:41:97:bd:1a:03:2a:8a:34:66:74:5d:b6:31:8a:3c:7a:09:
46:25:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:50 2026 by rpki-client