Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8255DAE6917811F1BB12EFEFCE1D38B0.roa
File: 8255DAE6917811F1BB12EFEFCE1D38B0.roa (raw, json)
Hash identifier: vEEmA8iBofMyQKKliLiyZixK1U8kVEJvJrR6s5n7hNw=
Subject key identifier: 66:B0:53:36:E6:A4:98:B6:95:70:F6:A1:4E:69:B7:6C:23:AD:F6:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8255DAE6917811F1BB12EFEFCE1D38B0.roa
Signing time: Thu 06 Aug 2026 09:23:40 +0000
ROA not before: Thu 06 Aug 2026 09:23:36 +0000
ROA not after: Sun 16 Aug 2026 09:23:36 +0000
asID: 8796
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122099 (0x1dcf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 09:23:36 2026 GMT
Not After : Aug 16 09:23:36 2026 GMT
Subject: CN=6a74529c-e2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:c8:62:ee:63:98:64:99:2b:e1:91:ab:6c:
12:46:b9:79:d5:2a:c2:e2:4a:da:93:ae:c0:b9:63:
63:4a:d0:bd:05:a6:96:32:f5:f4:ce:1f:05:31:e4:
d6:33:c0:6f:ed:15:8f:02:da:77:a3:88:d7:ec:5f:
30:45:a1:87:06:4b:0e:80:b8:b7:a5:30:25:0e:74:
c6:53:cd:b5:4e:ec:3b:9a:56:ab:d0:6f:04:f5:42:
6d:20:b9:74:4c:06:07:07:50:8f:f6:30:3a:60:d8:
f6:c4:94:6b:e3:79:ad:aa:37:64:85:e5:c7:22:2a:
07:3b:c7:e8:69:e5:37:5e:b2:86:34:30:a8:ae:e2:
ce:b0:98:2b:ac:6a:26:f2:73:4b:c6:5d:d6:14:b5:
23:71:9e:81:12:ff:c9:aa:33:c2:9c:75:62:67:f2:
86:ab:1c:90:4f:aa:63:c7:42:c7:fc:9e:61:13:e3:
60:7c:f6:19:ef:ca:68:61:43:fb:0a:6e:a7:b5:05:
6d:3e:73:87:48:c7:56:e2:1c:ec:b9:03:62:06:40:
af:da:b2:17:d0:ea:9f:e1:f8:7c:cf:78:8a:1b:78:
2c:c9:f3:75:4e:1e:1c:c6:bf:18:39:4a:3c:ef:85:
5c:9a:bf:e5:e8:b5:0e:aa:60:6a:f4:8c:5e:4e:53:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:53:36:E6:A4:98:B6:95:70:F6:A1:4E:69:B7:6C:23:AD:F6:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8255DAE6917811F1BB12EFEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
25:eb:6a:56:b3:1c:43:40:ec:49:19:b9:b5:4b:86:a2:64:b3:
7b:13:58:86:97:f8:93:4f:fb:23:86:d7:07:a9:df:9e:ff:77:
0c:ab:4f:57:a2:3f:2f:2b:de:b5:ff:22:a3:d4:66:20:1a:d6:
d9:38:c6:b7:80:c9:c5:e5:00:34:b9:5e:86:94:e2:98:bf:f6:
d5:31:4b:e5:99:96:61:d2:d5:fc:74:90:ae:18:e2:da:7d:86:
8e:22:25:d1:50:7a:6c:5f:9e:66:3d:05:e3:4d:fb:41:5d:48:
88:6d:e8:ad:5e:5e:aa:54:d4:a0:8d:b8:42:13:c9:62:e4:58:
61:bc:75:54:bd:65:4e:d7:c6:01:c0:d5:f9:f8:14:1f:a6:be:
91:bc:55:d5:a6:eb:0d:f3:33:62:a9:f3:27:b7:05:32:43:43:
0f:a6:6d:42:74:71:24:81:62:3f:b8:e5:f6:b2:68:04:cb:17:
5f:b0:9c:dc:2c:08:44:4f:2b:90:68:ae:74:8c:31:02:87:a7:
e7:f1:8a:c2:a1:be:6e:c3:13:2b:5e:48:cd:9a:da:ff:32:61:
16:68:b8:1a:12:6b:cb:fc:63:b2:1c:8e:24:1e:d6:17:ed:9d:
f6:80:c5:16:ba:2d:eb:82:a9:77:0a:d6:a9:46:a9:70:44:34:
2b:45:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:57 2026 by rpki-client