Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86E218C8779611F18695E9D7CE1D38B0.roa
File: 86E218C8779611F18695E9D7CE1D38B0.roa (raw, json)
Hash identifier: 8EfAINl7unUlp6EddVen7ACrpypXR86QG+zGaW/wsjg=
Subject key identifier: B0:C2:2F:79:49:F3:9C:0F:14:0E:54:B0:FD:57:1B:59:54:D1:A0:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86E218C8779611F18695E9D7CE1D38B0.roa
Signing time: Sat 04 Jul 2026 10:53:02 +0000
ROA not before: Sat 04 Jul 2026 10:52:57 +0000
ROA not after: Mon 10 Aug 2026 10:52:57 +0000
asID: 401615
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120569 (0x1d6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 10:52:57 2026 GMT
Not After : Aug 10 10:52:57 2026 GMT
Subject: CN=6a48e60e-ab18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:b0:7b:2d:2f:f3:fd:fb:04:3b:fd:28:ff:
45:1e:ee:4e:48:d3:f1:e3:2c:19:7a:b0:de:7e:92:
2d:3a:c5:12:6a:63:c1:48:94:f9:06:28:e8:21:84:
c9:0f:0c:8d:da:82:02:3a:8d:9a:0c:cb:9c:2d:e0:
4e:4b:a5:23:bc:6b:1a:5b:21:40:db:fc:64:98:ee:
ba:79:f6:87:e2:77:a9:d7:6b:c5:b4:32:7d:21:81:
b4:19:61:3b:d8:74:b5:38:16:e4:9b:8a:25:13:bb:
a0:06:cd:d1:fa:3c:68:a1:6b:45:af:04:d1:38:93:
ed:55:d6:e5:d5:c7:97:e7:7f:39:94:5e:8a:93:be:
d2:c7:c1:51:d3:1a:89:84:e8:f9:50:28:e0:25:63:
5a:e5:80:f8:fc:2e:8b:46:fa:8c:ee:41:c8:90:a3:
0f:9a:4b:9c:94:af:5a:e8:d3:b1:b9:7c:9c:e4:7c:
5d:51:44:8e:0b:e8:59:78:8b:01:68:a2:1a:62:80:
d5:96:80:d0:e5:38:a1:33:4b:b4:04:e1:61:eb:92:
8c:70:43:3d:a5:ef:18:f5:9d:70:f3:21:54:99:ca:
45:fd:14:b7:80:b8:f0:86:cb:97:0a:11:06:c3:85:
af:f8:5c:cf:36:d7:97:a3:ef:9a:3a:0a:9a:67:52:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C2:2F:79:49:F3:9C:0F:14:0E:54:B0:FD:57:1B:59:54:D1:A0:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86E218C8779611F18695E9D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2f:6f:42:9b:66:fe:97:97:e3:ba:69:1f:fc:58:dd:ea:0f:
03:77:b1:bf:85:ff:f8:b8:16:8c:6a:6c:7e:c0:61:92:2a:35:
85:89:31:9e:3c:8b:f6:5c:24:c6:9a:fe:db:95:13:c0:56:1f:
90:c2:ce:b9:ab:21:dd:04:d5:27:04:c7:35:28:77:7d:30:95:
37:71:f4:d0:2f:17:86:39:f6:1e:55:5e:35:ea:bf:f4:44:0b:
d9:6f:d9:2d:df:c0:7b:ef:fa:04:47:77:b8:9e:2c:75:1d:98:
6e:69:50:20:af:cf:8e:20:11:29:ab:20:15:f5:5e:28:08:30:
f0:45:cf:7b:91:a6:ef:c6:99:d4:90:0a:b9:9b:e6:0f:cc:19:
96:12:ce:e8:95:b9:3b:c2:1c:53:8f:b2:8a:cd:9f:bc:1e:39:
87:8d:65:3e:de:73:04:1d:ab:7f:ae:1a:a9:a9:a8:10:1a:75:
db:25:57:01:c2:ab:2f:2b:41:93:23:89:9a:e0:5b:92:8e:d4:
17:76:66:0d:e1:60:a9:fb:c2:21:08:df:31:8b:9f:93:0a:44:
bd:74:34:ca:a3:56:20:0e:0c:32:c7:cf:fe:8e:17:1e:18:73:
6c:77:1c:9d:48:3f:a2:f6:80:29:b0:c1:c4:cc:bc:d1:d0:ac:
7f:f8:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:25 2026 by rpki-client