Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9243F81E8C6111F19CD9D1F5CE1D38B0.roa
File: 9243F81E8C6111F19CD9D1F5CE1D38B0.roa (raw, json)
Hash identifier: 9tf5eID/uJEgXnoEltUfmW+ztnSnYHuZ1lr0xNc9KWg=
Subject key identifier: FF:35:AB:39:25:DB:7E:E2:D7:19:65:86:A9:94:62:3B:DC:16:AD:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9243F81E8C6111F19CD9D1F5CE1D38B0.roa
Signing time: Thu 30 Jul 2026 21:56:52 +0000
ROA not before: Thu 30 Jul 2026 21:56:48 +0000
ROA not after: Sun 09 Aug 2026 21:56:48 +0000
asID: 140227
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Aug 2026 21:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121842 (0x1dbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 21:56:48 2026 GMT
Not After : Aug 9 21:56:48 2026 GMT
Subject: CN=6a6bc8a4-5ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:3e:e3:e5:27:e3:51:cb:bd:d8:6e:97:49:
2c:4b:f8:1b:f4:a2:5a:17:8e:cc:63:2c:f7:b4:c4:
ee:58:ef:99:83:77:4d:56:92:8c:7b:3e:cd:07:9d:
23:f7:41:f4:64:11:7f:15:60:08:72:e2:85:30:b7:
9f:4a:db:21:ad:b0:63:9e:01:bf:70:da:76:06:2b:
ba:67:59:86:e0:4d:1c:72:20:75:1b:0f:e7:c0:cc:
5a:2c:6d:4c:59:94:c5:ab:18:97:65:3d:4f:22:ae:
e7:73:bf:08:0c:47:c1:f5:c5:2f:4f:65:f6:20:22:
35:3a:40:b8:9d:2a:00:d5:26:32:5f:b5:ce:ad:95:
07:11:36:47:7d:6e:a3:78:68:f7:91:5b:96:a2:90:
36:e0:86:40:98:9b:fa:86:34:b7:ef:ee:f8:99:55:
13:54:13:05:ec:d0:20:10:ec:2e:78:c2:98:5e:bf:
57:4d:59:52:40:28:7b:4d:d9:55:c7:9f:7a:97:6a:
b8:b7:75:02:57:a4:d8:01:ac:60:50:06:f3:06:21:
fb:89:4c:20:46:27:27:97:20:05:76:9b:e8:99:00:
72:0e:0e:07:2c:68:e0:ce:ba:15:34:25:b2:1c:f7:
5c:67:2c:38:b7:b3:83:33:53:19:a9:17:3a:57:05:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:AB:39:25:DB:7E:E2:D7:19:65:86:A9:94:62:3B:DC:16:AD:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9243F81E8C6111F19CD9D1F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.20.255
Signature Algorithm: sha256WithRSAEncryption
0d:a3:aa:cd:96:e3:54:de:39:6a:95:c1:d5:91:e5:ca:b7:77:
07:61:f7:0e:dc:f3:57:6b:7e:2a:7c:2b:b4:3d:53:cb:cd:9c:
6f:a8:45:a4:cc:f2:16:77:32:7c:07:09:9e:91:ed:e9:b8:25:
fd:2e:62:75:57:b5:48:ae:be:17:41:2e:e7:b2:7d:8c:73:56:
09:ce:21:c2:d7:76:f9:3b:4f:ad:98:d6:e7:47:8e:b4:11:c8:
d0:c2:0a:89:40:48:98:7d:53:fe:ea:c7:90:1c:5d:05:84:72:
5e:c3:59:ea:f9:70:88:be:d2:d0:43:d3:e0:04:61:98:df:81:
a9:fa:10:7a:a8:ec:6c:91:bc:85:44:91:76:86:14:00:38:55:
71:6d:36:36:79:ce:54:39:76:2d:d3:e2:19:08:93:28:94:d5:
e4:aa:fd:51:8f:8f:ca:4c:72:b0:f0:10:c0:bb:a3:b5:9b:c3:
8f:5f:88:6f:34:e4:1f:ed:07:97:a4:38:ef:03:4f:b4:39:19:
9c:3c:41:21:d9:29:ef:2d:67:c1:df:96:98:cd:93:28:c1:7b:
fb:ea:66:72:7e:5b:22:bc:e0:92:d7:40:39:db:6e:b5:2f:f4:
50:58:5f:4f:3a:62:38:64:22:d7:9a:44:94:57:2c:43:76:54:
4f:cd:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:24 2026 by rpki-client