Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86738AAE42EC11F19AB4C9CFCE1D38B0.roa
File: 86738AAE42EC11F19AB4C9CFCE1D38B0.roa (raw, json)
Hash identifier: /W8Pp9LE25Nwz1DNmXt2D0+/cQdC6V49oWCz9GA1TuI=
Subject key identifier: B9:15:0F:B5:EC:52:FB:FE:5D:83:8C:5A:7D:D9:81:2E:1C:6D:86:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86738AAE42EC11F19AB4C9CFCE1D38B0.roa
Signing time: Tue 28 Apr 2026 10:25:06 +0000
ROA not before: Tue 28 Apr 2026 10:25:02 +0000
ROA not after: Fri 05 Jun 2026 10:25:02 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116657 (0x1c7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:25:02 2026 GMT
Not After : Jun 5 10:25:02 2026 GMT
Subject: CN=69f08b02-7d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:d1:5e:8e:33:aa:ca:b3:b0:ac:35:7f:6a:
62:e6:0b:14:44:98:70:18:a3:4e:9f:cd:92:83:d5:
00:d2:64:2a:0e:28:ae:5e:1c:2b:fb:6e:6b:39:f9:
aa:5f:9a:7c:2a:ef:7d:1b:71:bb:c5:20:96:ce:72:
6b:e4:c9:c3:d5:fc:fb:9e:42:ed:67:68:39:59:3e:
6b:47:f6:58:17:04:ea:ac:1b:73:cf:bc:56:85:81:
10:42:67:ae:aa:62:41:e7:45:b3:51:7f:ef:70:5d:
6f:73:84:70:14:2c:b3:03:fe:bc:eb:98:58:62:e8:
28:69:f1:8e:43:b6:ec:97:91:c1:58:4a:90:78:34:
1d:9a:96:cf:45:bc:40:ff:fa:16:41:f4:c3:9e:92:
9d:58:7b:83:19:fb:ca:7c:49:60:29:50:a2:9f:8a:
3c:00:73:e5:08:b9:81:e9:d8:ff:5f:6d:7d:9f:30:
02:58:4f:09:a7:52:9c:94:fc:b7:bc:3d:36:89:b2:
2e:6d:1d:c0:13:35:4e:83:de:81:54:b6:21:2f:24:
08:b0:55:3b:fa:bc:5b:e7:0f:80:c1:e5:f4:24:21:
95:b6:42:b7:fb:c8:02:12:6b:6b:47:47:09:ac:7d:
3b:50:de:41:2c:b6:8e:78:5b:90:b3:43:02:7a:a6:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:0F:B5:EC:52:FB:FE:5D:83:8C:5A:7D:D9:81:2E:1C:6D:86:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86738AAE42EC11F19AB4C9CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
55:0b:b4:6a:e1:7a:aa:a5:7d:1c:ab:1d:05:7a:12:1b:e8:ae:
ac:cb:8c:a5:de:ca:87:a7:86:83:2a:7a:9a:86:e5:54:f3:3f:
16:f4:b5:4d:9c:d1:bb:e5:6f:e1:2a:6d:f5:e1:a3:73:5d:1b:
8b:4d:68:d0:2c:c6:58:4b:d0:69:b1:b1:29:84:af:40:4d:0e:
c2:8a:5a:7e:9c:bb:0c:86:bc:02:ba:2a:bc:86:89:1b:a8:4e:
85:a2:ec:ca:cc:c8:77:cb:74:12:ee:c9:c2:e1:2e:fc:dd:d1:
1e:21:c4:c5:54:f3:07:e5:8c:e6:09:00:3d:23:0e:83:f4:81:
14:a0:04:32:42:db:db:29:a6:49:0d:0c:72:63:6a:33:3e:63:
f0:ff:84:bd:c2:c8:d2:da:87:8d:c3:eb:0f:d4:7b:1f:aa:59:
da:4b:d3:c9:bd:47:8b:45:da:38:dd:09:87:53:64:ae:45:53:
2c:ae:41:25:31:eb:15:da:6c:7f:b4:8b:16:34:98:7d:78:ce:
96:f5:e5:74:3a:eb:14:75:ec:7b:29:22:b5:db:dc:17:2d:1f:
a6:09:0d:c8:23:83:d5:a3:84:fc:bd:61:5b:be:9b:60:84:37:
a6:15:5e:30:0c:9d:35:ed:9f:de:15:a4:eb:59:eb:05:61:ac:
2b:96:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:59 2026 by rpki-client