Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F17266E581F11F1BAB43ED3CE1D38B0.roa
File: 8F17266E581F11F1BAB43ED3CE1D38B0.roa (raw, json)
Hash identifier: 3unRiWBIUehREzR+Crf/RxdhkMPG890bXPHeN8bghrU=
Subject key identifier: 3A:B5:96:8A:67:6B:C3:25:92:68:EF:70:76:CC:ED:FB:DF:53:84:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F17266E581F11F1BAB43ED3CE1D38B0.roa
Signing time: Mon 25 May 2026 09:53:20 +0000
ROA not before: Mon 25 May 2026 09:53:14 +0000
ROA not after: Sat 06 Jun 2026 09:53:14 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118630 (0x1cf66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 09:53:14 2026 GMT
Not After : Jun 6 09:53:14 2026 GMT
Subject: CN=6a141c0f-8d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:b0:da:6f:04:69:7f:b9:13:f5:91:a9:ee:
16:aa:77:a0:e3:4e:8a:0f:9d:b7:b8:94:35:7a:90:
79:1e:ee:fe:7b:da:47:af:24:61:e8:e7:ee:e3:62:
0e:02:46:44:09:95:a5:61:90:ad:c5:29:e3:b7:1d:
93:1d:63:f5:97:4c:a2:92:cd:31:34:a0:db:ca:14:
bc:84:00:74:23:ec:d6:da:d0:e5:8c:41:69:96:e6:
ba:0a:81:e5:cc:96:62:9d:b1:cf:66:af:5a:fc:60:
ff:6b:8f:d9:87:1f:31:44:2a:d9:40:6c:a6:44:29:
cb:ce:0a:a7:4a:6c:9b:92:7e:95:28:39:95:2a:56:
ae:c4:1f:44:02:1e:29:d8:27:86:90:39:b3:6b:11:
f2:0c:0a:66:18:34:73:26:b4:d1:d1:1f:a0:f4:5c:
f7:04:3d:b3:e6:a9:2f:3a:7c:d2:f4:a8:17:0e:fc:
d7:2b:84:2e:a0:17:a6:15:13:b1:bc:d0:28:ed:e3:
51:ed:94:65:11:6b:ee:63:ae:c9:f8:15:49:d6:5c:
bb:a1:93:bc:e3:c3:a6:32:54:ee:54:75:7f:1d:9d:
1f:8c:f9:27:ae:6d:3e:40:3b:a8:65:f5:2c:d4:cb:
b5:6d:1b:b3:5f:9e:8e:d1:4d:08:4d:28:ae:fd:b9:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:96:8A:67:6B:C3:25:92:68:EF:70:76:CC:ED:FB:DF:53:84:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F17266E581F11F1BAB43ED3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
12:01:dc:e3:7d:6b:f5:6b:d6:60:15:c1:38:9b:9d:48:57:58:
eb:30:f4:f0:7b:cf:d1:f3:5b:40:58:fd:33:6d:ee:84:47:32:
ad:1c:86:7e:da:39:61:70:1c:dc:58:75:83:54:67:c7:93:f1:
ab:7f:28:5e:88:3a:0f:79:99:0b:82:e9:62:8d:31:01:ed:60:
67:30:7d:79:dc:20:7c:4a:04:1b:c0:00:d6:cb:8e:29:47:27:
d2:b6:c4:fc:03:4b:52:64:db:e2:b6:f8:90:48:1c:76:6f:3d:
e7:6b:4c:d2:4a:1c:ab:79:46:93:c7:a1:55:26:8c:92:26:f5:
c7:3e:79:0d:16:1c:15:c8:78:6c:68:da:e4:33:89:20:8d:96:
eb:82:30:e2:09:e1:48:0d:5c:18:85:44:9e:8b:4d:4d:60:59:
2d:a3:8b:32:73:7a:20:7c:62:8f:1d:41:43:37:b3:47:19:f2:
b9:86:35:3b:3d:c9:9b:12:4d:7c:57:1c:d5:3f:b9:d0:ac:38:
d0:e7:62:46:e0:0d:84:8b:eb:9f:f6:78:39:47:33:91:94:6f:
d0:b5:94:3b:4e:3d:cb:ba:6c:82:c9:80:7f:d0:51:84:d8:3b:
08:5d:66:18:ae:cf:e6:6e:2c:b4:51:ba:26:85:13:45:4b:b9:
49:6f:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:58 2026 by rpki-client