Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86BAC53E574D11F1879340D5CE1D38B0.roa
File: 86BAC53E574D11F1879340D5CE1D38B0.roa (raw, json)
Hash identifier: lBzzQYrjaQCco5hk0x0RVrdfLqA5xKBTs3heBuFMpQI=
Subject key identifier: 68:32:D0:F2:9A:E0:B4:0C:9B:53:38:A8:D7:8A:03:B0:F2:C4:F1:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86BAC53E574D11F1879340D5CE1D38B0.roa
Signing time: Sun 24 May 2026 08:49:51 +0000
ROA not before: Sun 24 May 2026 08:49:45 +0000
ROA not after: Wed 01 Jul 2026 08:49:45 +0000
asID: 401783
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118459 (0x1cebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 08:49:45 2026 GMT
Not After : Jul 1 08:49:45 2026 GMT
Subject: CN=6a12bbaf-6697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:ce:6a:1c:5a:02:0f:53:4d:3e:82:a8:89:
42:db:d3:5f:f0:ab:bc:b1:10:8e:f5:11:1d:2f:ff:
34:06:71:9e:85:b6:a3:6a:bd:92:89:64:af:6b:ae:
08:03:ba:82:39:3f:53:ca:6c:ce:e8:31:94:7b:8b:
b3:c2:e4:4a:cc:d8:10:3d:08:a8:01:ae:1d:13:c3:
b9:82:15:d9:75:61:92:d1:5b:8b:c0:a1:44:62:77:
95:cc:6e:ce:29:89:7f:49:67:ec:f1:fe:34:d3:98:
a4:81:55:45:46:0d:f4:10:c2:22:89:46:70:c9:9d:
20:0d:ad:2e:ba:33:99:4a:9e:0d:b5:e9:d5:1b:b0:
2d:32:ee:d4:02:6c:e1:3f:bc:3a:6b:23:aa:79:1b:
39:57:0e:90:6e:8b:ae:9d:a4:44:5e:18:80:19:06:
df:70:16:26:14:c5:a8:4a:c1:0d:33:a4:96:81:46:
2e:46:6d:b8:5c:21:71:a0:9d:85:d9:9f:8c:6a:f1:
20:b3:39:c2:d8:71:44:f8:74:04:df:d6:71:cc:3a:
09:64:5b:e7:21:04:61:8d:f4:3c:83:bc:3e:aa:8a:
9a:43:3d:17:48:f1:ad:7e:1d:55:e3:c9:bd:0c:38:
cb:ae:9d:04:80:e3:ec:02:ec:82:b4:3a:b8:43:16:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:D0:F2:9A:E0:B4:0C:9B:53:38:A8:D7:8A:03:B0:F2:C4:F1:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86BAC53E574D11F1879340D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.158.0/24
154.83.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
154.92.210.0-154.92.214.255
Signature Algorithm: sha256WithRSAEncryption
22:93:53:be:5e:73:ed:23:c6:c5:c3:61:4b:6a:30:6c:32:62:
77:cb:36:4a:fb:03:0b:99:b5:4c:53:c8:a7:04:56:c7:ff:60:
96:ec:45:c0:33:70:02:99:89:b8:7d:08:c0:0b:85:af:12:73:
32:b5:71:b2:ad:66:f4:3a:4e:66:78:3e:f9:de:90:f7:ad:c1:
48:57:64:63:e0:2a:75:d6:8e:44:8d:dd:dc:c6:a0:7a:3b:d7:
89:1f:3e:7e:f6:f1:aa:e2:a8:da:22:0f:76:b6:c2:15:18:83:
16:11:23:d6:40:df:0b:ea:8a:75:06:d5:85:1f:b5:9b:a1:80:
d7:6a:9f:34:47:eb:8e:10:8a:9b:f1:b2:5d:ab:5e:54:50:06:
73:da:55:c2:c8:eb:50:65:57:7d:86:cb:a3:ab:49:ae:03:e4:
1b:65:f5:16:49:f9:ee:ef:73:03:ec:ee:58:9c:e5:cf:ba:01:
5d:3a:c2:7d:aa:05:79:bc:c0:98:8a:58:f4:d7:4a:74:f5:a9:
7b:91:53:56:76:92:e4:08:78:af:9e:61:23:1c:5c:ea:68:62:
19:55:9e:3a:3e:cd:98:30:04:fe:b0:2b:e2:77:fc:36:b6:86:
39:c8:60:a1:b4:e6:27:d7:35:59:12:28:ba:4f:38:48:bd:aa:
cc:55:a7:10
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIDAc67MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI0MDg0OTQ1WhcNMjYwNzAxMDg0OTQ1WjAYMRYw
FAYDVQQDEw02YTEyYmJhZi02Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsX/OahxaAg9TTT6CqIlC29Nf8Ku8sRCO9REdL/80BnGehbajar2SiWSv
a64IA7qCOT9TymzO6DGUe4uzwuRKzNgQPQioAa4dE8O5ghXZdWGS0VuLwKFEYneV
zG7OKYl/SWfs8f4005ikgVVFRg30EMIiiUZwyZ0gDa0uujOZSp4NtenVG7AtMu7U
AmzhP7w6ayOqeRs5Vw6QbouunaREXhiAGQbfcBYmFMWoSsENM6SWgUYuRm24XCFx
oJ2F2Z+MavEgsznC2HFE+HQE39ZxzDoJZFvnIQRhjfQ8g7w+qoqaQz0XSPGtfh1V
48m9DDjLrp0EgOPsAuyCtDq4QxbWoQIDAQABo4IC6TCCAuUwHQYDVR0OBBYEFGgy
0PKa4LQMm1M4qNeKA7DyxPERMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NkJBQzUzRTU3NEQxMUYxODc5MzQwRDVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAmlKGAwQAmlKUAwQAmlKe
AwQAmlNBAwQAmlpDAwQAmlqAAwQAmlqGAwQBmlqIAwQAmlqMAwQAmlq9MAwDBAGa
XNIDBACaXNYwDQYJKoZIhvcNAQELBQADggEBACKTU75ec+0jxsXDYUtqMGwyYnfL
Nkr7AwuZtUxTyKcEVsf/YJbsRcAzcAKZibh9CMALha8SczK1cbKtZvQ6TmZ4Pvne
kPetwUhXZGPgKnXWjkSN3dzGoHo714kfPn728ariqNoiD3a2whUYgxYRI9ZA3wvq
inUG1YUftZuhgNdqnzRH644Qipvxsl2rXlRQBnPaVcLI61BlV32Gy6OrSa4D5Btl
9RZJ+e7vcwPs7lic5c+6AV06wn2qBXm8wJiKWPTXSnT1qXuRU1Z2kuQIeK+eYSMc
XOpoYhlVnjo+zZgwBP6wK+J3/Da2hjnIYKG05ifXNVkSKLpPOEi9qsxVpxA=
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:38 2026 by rpki-client