Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9958B682948911F1B56DA604CF1D38B0.roa
File: 9958B682948911F1B56DA604CF1D38B0.roa (raw, json)
Hash identifier: bvdJ8BrQXQHYawmnB9HMA6w+P467ZTspc/9hgHzzZ80=
Subject key identifier: AC:C4:C8:7D:40:11:93:0E:CA:14:4C:68:68:1D:26:EF:99:2B:C3:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9958B682948911F1B56DA604CF1D38B0.roa
Signing time: Mon 10 Aug 2026 07:03:33 +0000
ROA not before: Mon 10 Aug 2026 07:03:29 +0000
ROA not after: Mon 17 Aug 2026 07:03:29 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122292 (0x1ddb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 07:03:29 2026 GMT
Not After : Aug 17 07:03:29 2026 GMT
Subject: CN=6a7977c5-b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:85:b9:82:f1:d9:63:b5:18:e3:bf:0e:73:
74:16:cc:e5:83:6b:89:cb:2a:98:df:90:57:d4:72:
e9:0b:f4:b0:65:1c:e9:24:80:0c:3b:e8:64:f5:83:
d4:65:71:3d:72:cd:b9:d0:ef:0a:9e:2e:63:78:5a:
87:24:75:ba:61:b1:c3:52:56:68:eb:d5:a6:c5:c9:
bf:47:d5:44:0b:38:16:b0:45:9b:ab:a2:83:11:dd:
b9:c4:64:28:a3:61:92:5e:fb:0f:39:01:24:3e:4b:
74:21:79:2f:ae:1b:aa:80:49:9e:c0:56:63:34:b4:
f1:34:14:6d:86:05:27:11:1b:8c:88:ad:83:91:a1:
db:ba:99:cf:38:3d:82:53:df:37:d9:d7:23:98:22:
ee:9c:59:b7:57:de:13:ba:58:fb:5b:6f:91:06:ed:
8b:1d:9b:7c:72:85:5b:6a:46:af:6b:b8:57:10:3e:
70:ee:aa:e0:63:75:a4:6e:b9:da:f7:8f:d2:53:28:
f5:91:48:65:40:e9:e6:35:03:77:fe:f3:41:e5:41:
1d:48:8e:ca:3a:d2:50:a4:df:ba:11:b1:ef:f9:c9:
35:a2:5d:74:51:cd:b9:de:ad:1d:fb:03:f0:90:fa:
9d:4c:26:59:35:de:77:2c:dd:6b:8b:62:92:f8:33:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:C8:7D:40:11:93:0E:CA:14:4C:68:68:1D:26:EF:99:2B:C3:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9958B682948911F1B56DA604CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f9:0c:b2:64:09:10:9e:85:9c:f7:24:ec:49:1a:35:60:5e:
79:d3:61:e2:90:8b:0a:bb:48:96:11:60:b9:11:f1:19:46:61:
e4:5a:54:9e:26:da:9d:83:0b:85:d7:60:0b:d3:e0:3d:c7:c6:
87:de:c5:40:cc:78:fb:78:27:d9:3d:21:aa:9c:24:41:e1:79:
11:c2:38:1b:37:a4:1f:ad:3c:ae:82:00:51:e5:7d:d7:46:a1:
97:b6:2a:3a:61:58:0b:54:bc:6b:ef:77:b1:a6:87:82:06:2a:
ba:e6:e9:48:be:5c:af:d2:0c:b9:e7:10:15:ea:f5:6b:7d:31:
1e:ea:38:ae:4b:ec:58:e9:33:b1:b6:58:30:b7:31:9a:0b:86:
f8:2a:7d:46:0a:d3:b9:17:10:a5:e4:29:15:6a:fc:07:b1:74:
20:c2:7a:28:54:e2:33:35:24:b2:7d:eb:a5:72:1c:cd:ea:e9:
ee:6a:b9:41:24:49:5b:e8:0e:46:bc:8c:2e:22:2e:0f:a8:28:
37:1d:9c:d0:bc:ac:f7:db:06:0f:76:08:5e:3c:53:be:6e:f0:
9d:dc:25:f6:6b:6c:3a:64:1b:28:b7:9b:62:96:95:14:1d:5c:
7a:b3:69:c3:10:c0:c1:80:c0:94:74:a5:80:b3:6e:93:85:53:
aa:44:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:38 2026 by rpki-client