Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF16656491811F1BE0946DECE1D38B0.roa
File: BBF16656491811F1BE0946DECE1D38B0.roa (raw, json)
Hash identifier: Fcg0rQ0BNUzZjfGcB2wyptfnBMKoK/xzIg0sv4v0Hto=
Subject key identifier: AC:BE:02:D3:D3:31:FF:3E:C1:5A:6E:B6:72:EE:BF:55:0F:4C:0B:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C96B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF16656491811F1BE0946DECE1D38B0.roa
Signing time: Wed 06 May 2026 06:56:41 +0000
ROA not before: Wed 06 May 2026 06:56:36 +0000
ROA not after: Wed 13 May 2026 06:56:36 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117099 (0x1c96b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 06:56:36 2026 GMT
Not After : May 13 06:56:36 2026 GMT
Subject: CN=69fae629-5130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:0b:ea:75:39:2a:0b:74:de:80:cb:8e:be:
d7:1d:68:28:b8:a1:cf:4c:f6:40:c2:61:ee:47:22:
fb:81:95:0e:c2:81:80:22:43:df:58:92:62:04:96:
6a:f4:16:c9:92:fa:be:d5:31:ca:e6:09:21:80:88:
d2:c3:4f:0d:7c:39:9d:03:47:c4:ba:52:14:8a:74:
8a:2f:36:e3:31:83:29:8f:bb:ea:28:0d:be:9d:49:
fc:38:18:33:39:e3:09:39:ec:75:bc:82:a5:77:11:
29:0c:ec:dc:ec:c2:26:02:dd:3d:f3:0e:18:ec:f5:
58:55:f9:88:35:8c:d7:c0:25:92:ff:f4:af:cb:cf:
0f:c5:d8:e1:a3:bb:cd:ed:f5:8e:53:7f:e4:bb:52:
32:48:33:d0:27:c8:67:33:4f:21:46:c6:55:59:44:
d6:49:a2:f1:1e:b1:5a:80:9d:ef:39:81:f1:5b:b0:
f5:2c:b8:a1:91:94:9e:52:bc:90:08:4e:49:e2:62:
70:76:fb:e2:e6:7f:93:bc:dc:74:3c:f0:e3:82:ea:
17:65:4d:4e:da:ef:df:18:22:f3:37:34:34:dc:0d:
9f:72:e0:45:f2:de:ea:0c:ff:d9:80:ac:49:a7:4d:
66:cc:56:be:1b:10:f6:56:1c:0d:88:50:be:a1:41:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:02:D3:D3:31:FF:3E:C1:5A:6E:B6:72:EE:BF:55:0F:4C:0B:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF16656491811F1BE0946DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:5f:65:76:49:cb:63:62:2e:88:63:9c:25:9f:b5:6f:da:1f:
94:c7:38:14:a3:ea:47:8a:ec:63:1b:d8:90:2c:90:72:86:cd:
f0:b4:da:74:1d:ae:86:08:e3:e3:46:3f:3c:22:ec:5f:b0:44:
c4:af:9c:42:01:5c:36:0c:77:90:7f:6e:a1:8d:94:e9:07:fa:
43:0e:ed:3f:08:c9:16:12:26:7e:d0:5f:2e:91:04:3d:dc:f4:
cd:6e:91:a4:b6:06:dc:bc:fd:9a:cc:80:6d:cc:6c:de:fd:14:
fc:3c:7c:d6:bf:4c:e5:24:a0:08:e0:7f:93:84:a9:1e:65:5c:
e8:06:d1:3c:20:71:a0:24:26:67:be:38:f9:23:5f:80:03:ed:
4f:ec:d7:c6:fd:5d:ef:33:7d:35:09:cf:61:77:f5:46:eb:e6:
27:60:51:e9:51:af:13:fa:81:d9:01:3d:86:e2:20:28:51:0c:
1a:c5:e8:fd:03:ae:ed:4a:a4:b6:a2:fa:08:ff:6d:b7:69:c7:
9a:dc:1c:fa:41:3d:97:d8:0c:e1:cf:78:5d:84:55:6a:1b:95:
24:a1:b2:7a:1e:b8:ef:a7:75:7c:9c:1b:3d:f2:ca:88:13:6b:
08:cb:50:fb:a8:4d:2a:bd:59:1f:b0:f5:80:d1:28:9d:a9:42:
cd:fd:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:50 2026 by rpki-client