Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86909DDC177811F18D21F9CBDAE4EC9C.roa
File: 86909DDC177811F18D21F9CBDAE4EC9C.roa (raw, json)
Hash identifier: ejRHscQzVfrPrtLBJh6BssYCleUanyTnWEycwxJ68Z8=
Subject key identifier: C6:C2:38:6D:78:52:80:1C:4D:80:EF:6A:3B:4E:29:91:A9:A5:D3:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86909DDC177811F18D21F9CBDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 03:16:25 +0000
ROA not before: Wed 04 Mar 2026 03:16:20 +0000
ROA not after: Wed 01 Apr 2026 03:16:20 +0000
asID: 984
IP address blocks: 154.193.62.0/24 maxlen: 24
154.193.84.0/24 maxlen: 24
154.193.85.0/24 maxlen: 24
154.196.133.0/24 maxlen: 24
154.196.161.0/24 maxlen: 24
154.200.155.0/24 maxlen: 24
154.202.136.0/24 maxlen: 24
154.213.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113995 (0x1bd4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 03:16:20 2026 GMT
Not After : Apr 1 03:16:20 2026 GMT
Subject: CN=69a7a409-400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:d0:05:4c:fd:5b:be:28:35:fa:50:c6:ff:
62:51:81:a2:b4:b2:28:f1:24:fd:dd:b2:d5:54:1a:
4d:81:24:1c:fa:1d:92:53:7b:7e:5a:65:65:d2:c5:
83:bb:7b:ac:3d:11:76:79:47:08:fc:3c:bc:31:f2:
20:69:fd:79:d5:cc:af:cf:61:f3:36:1a:5e:7e:b5:
12:08:52:fc:da:b4:59:7d:95:79:ad:3b:af:ed:eb:
3f:d8:47:83:d2:9c:e4:0c:86:a0:b9:98:60:7e:66:
c1:cb:61:fe:da:99:42:7d:10:70:c9:d9:4e:e8:a4:
d0:89:bd:ea:50:c1:42:b9:52:21:3c:8f:ef:d3:8b:
27:d6:24:94:8b:5d:39:18:7e:10:fe:a3:d5:ba:1f:
e1:2d:ec:ee:f3:a6:3e:48:b0:5b:62:f4:39:8b:7d:
88:5d:a8:df:dd:26:ae:f9:60:ee:26:06:73:9a:3a:
4e:ca:2e:dd:d3:32:7b:cf:d3:0f:75:ea:05:23:1b:
db:9f:d6:62:fc:55:e7:17:61:7b:33:57:77:73:19:
53:4d:03:e8:aa:8c:dd:15:24:01:ce:81:72:81:70:
3b:84:be:56:39:59:77:dc:c8:16:22:44:d9:39:ec:
d9:c6:c4:67:f7:45:a4:4d:db:c1:a6:38:ec:af:1d:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:38:6D:78:52:80:1C:4D:80:EF:6A:3B:4E:29:91:A9:A5:D3:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86909DDC177811F18D21F9CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.62.0/24
154.193.84.0/23
154.196.133.0/24
154.196.161.0/24
154.200.155.0/24
154.202.136.0/24
154.213.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b9:fc:b5:36:1e:6a:a5:4e:c1:25:55:bf:ba:90:92:29:42:
7c:10:f7:9f:d6:17:34:09:46:e9:63:c4:d8:b8:47:99:30:3c:
0c:9a:b6:ee:e2:14:73:c0:57:1f:96:00:3c:17:77:ee:cb:f4:
bc:86:53:e9:e0:ea:1b:37:47:35:0e:59:4a:08:1a:f8:fa:a9:
56:7c:7d:b0:00:10:3b:3d:f7:be:7a:d0:4a:17:91:f0:41:3b:
c2:07:ba:f3:9b:92:2b:7e:26:64:99:a4:25:f4:64:29:5a:55:
e9:c7:4c:df:51:62:9a:4a:ce:87:bf:b8:f1:44:2e:9b:f7:be:
28:45:60:0b:7a:96:92:93:d2:a1:e2:a5:70:53:0d:56:09:1f:
c0:ef:ad:b9:da:10:07:26:ed:43:91:2e:fd:26:54:d9:69:6b:
c1:0a:24:c4:c0:4c:c3:50:a4:40:58:d2:12:e5:32:f2:2d:ed:
7d:9b:b0:59:56:84:11:d6:94:91:be:88:fe:c0:98:1a:ba:1c:
e3:d1:2e:9d:97:f1:9a:97:da:c6:6d:88:fb:2f:ec:c7:bb:30:
39:6d:e3:7e:3e:f3:b7:c3:22:7c:e9:27:df:e4:21:79:69:aa:
e4:0b:1b:99:6d:9e:f7:27:83:e4:a4:7e:4b:56:81:21:a4:2a:
e4:0a:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:08:14 2026 by rpki-client