Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C97385A76AC11F1AEE50ECDCE1D38B0.roa
File: 9C97385A76AC11F1AEE50ECDCE1D38B0.roa (raw, json)
Hash identifier: oMKp6v425lobaPDoozQw6/7yxyDfqlQvrmJVRUiOorU=
Subject key identifier: BA:03:B2:80:13:14:CE:2F:E3:F6:A6:4D:15:19:EB:7F:1D:9D:17:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D69D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C97385A76AC11F1AEE50ECDCE1D38B0.roa
Signing time: Fri 03 Jul 2026 06:58:36 +0000
ROA not before: Fri 03 Jul 2026 06:58:31 +0000
ROA not after: Thu 06 Aug 2026 06:58:31 +0000
asID: 153517
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120477 (0x1d69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 06:58:31 2026 GMT
Not After : Aug 6 06:58:31 2026 GMT
Subject: CN=6a475d9c-501b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:37:93:c3:f3:4e:66:7d:fe:1a:dc:99:e9:
3c:a5:32:b5:eb:30:37:1a:cd:fb:6c:d4:c0:2d:71:
8f:fd:91:83:54:86:cd:48:10:7d:49:80:88:d8:0a:
09:1d:7e:02:c7:3e:f8:d5:e3:2f:0e:de:ff:0d:d8:
52:fc:39:24:b6:da:de:a1:2c:55:dd:63:f8:9d:a7:
82:09:f8:d5:a0:9e:b8:60:b5:bf:f1:28:9c:f8:50:
f0:1d:07:93:cc:d6:2e:df:9b:1e:1c:de:80:74:6a:
26:ce:41:b0:15:89:f2:55:19:ce:89:90:54:12:2a:
2f:ac:3a:98:c8:9b:90:42:4f:a2:2d:35:bd:f9:fd:
f0:0e:53:3a:66:55:eb:c4:d8:87:fa:3f:cd:3f:a5:
3c:bf:89:66:50:f7:f6:ef:f3:7e:70:e8:c4:4d:08:
10:19:0e:7f:95:fd:81:28:f0:3c:3b:a0:ba:08:e5:
32:1e:c7:60:82:9d:1f:a8:f7:e9:b7:44:00:56:40:
5c:e9:c9:ed:7c:fb:f2:d5:4c:46:80:21:e8:35:50:
45:36:2b:b3:a5:e4:e8:47:d7:70:fa:23:cd:7e:24:
bb:61:5d:ac:23:5c:ef:02:4a:ed:d2:3f:39:03:ac:
52:7f:8a:62:bc:a9:b2:c6:c8:5f:0b:d7:21:53:29:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:B2:80:13:14:CE:2F:E3:F6:A6:4D:15:19:EB:7F:1D:9D:17:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C97385A76AC11F1AEE50ECDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.20.255
154.86.22.0-154.86.31.255
Signature Algorithm: sha256WithRSAEncryption
8e:8a:1e:53:aa:15:e5:eb:ae:bd:3b:98:12:25:a2:40:0c:c3:
6f:0b:20:96:be:24:02:0d:5a:95:39:95:34:3c:9f:65:6d:a6:
b0:ac:8a:f5:df:09:82:92:f8:94:f3:1c:02:03:37:d5:09:86:
9c:02:c4:5e:a3:5c:0c:e7:60:9a:52:4c:da:a5:7c:87:9c:4c:
39:2e:45:b2:38:36:1c:f6:19:d9:fb:47:6a:80:66:af:dd:b5:
90:1c:f8:99:ad:7d:69:b2:c4:5a:51:05:c3:da:2b:cf:db:df:
a5:b3:39:e0:44:c1:d5:71:87:17:9b:b1:7b:05:aa:1f:b3:8c:
a2:17:c7:88:4e:93:c3:07:b7:09:2b:1b:c4:e8:30:67:d2:69:
6c:86:ca:24:3d:ae:28:b8:40:fc:12:cd:04:88:b9:b1:2e:11:
d4:07:e9:29:4f:34:f2:28:ee:6a:34:d9:ec:8a:7d:b8:08:37:
ac:e6:d8:98:9a:84:80:76:7c:60:40:74:9a:a7:c6:1a:88:ad:
9f:5f:73:8a:25:1b:35:69:bd:55:80:62:e7:49:80:3b:dc:14:
73:96:42:8e:e8:ef:71:04:96:d2:c9:3f:c3:1f:b5:99:e1:8f:
2a:a6:c8:29:a0:ca:89:9e:4e:e1:a5:f8:6a:d7:3b:a4:65:6e:
f2:55:35:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 9 02:46:06 2026 by rpki-client