Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD596DB8917A11F1AA0EAAFFCE1D38B0.roa
File: BD596DB8917A11F1AA0EAAFFCE1D38B0.roa (raw, json)
Hash identifier: QQZhvICaylGtaSJCN7YQXdj3VQS00SmIIEOVEwUtJVQ=
Subject key identifier: E7:15:EF:4C:32:32:B6:E9:8D:7E:2F:4C:6B:DB:3A:A0:3C:94:40:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD596DB8917A11F1AA0EAAFFCE1D38B0.roa
Signing time: Thu 06 Aug 2026 09:39:38 +0000
ROA not before: Thu 06 Aug 2026 09:39:34 +0000
ROA not after: Sun 16 Aug 2026 09:39:34 +0000
asID: 137535
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122103 (0x1dcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 09:39:34 2026 GMT
Not After : Aug 16 09:39:34 2026 GMT
Subject: CN=6a74565a-9209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:46:a8:81:85:b7:c8:50:e3:b2:62:21:8b:
d3:32:d9:8c:57:4f:2d:8a:f4:22:ef:9d:06:ec:17:
f2:d7:aa:42:52:8a:e1:71:3b:b0:47:ec:df:2e:82:
bc:c7:d9:12:96:c5:1d:8f:5a:ff:18:ab:c8:0d:9e:
6e:3d:26:38:ea:48:85:dc:99:2a:3d:2b:8d:c7:8a:
28:5e:50:ff:84:7b:6d:38:16:ba:83:c9:57:3a:f9:
e1:74:6b:46:4c:d2:a4:a7:a4:50:21:11:ac:3c:e6:
0c:af:05:a6:a5:2b:13:91:0b:bb:25:eb:ff:a9:84:
25:9f:b3:26:08:b4:ec:2a:7e:47:29:11:c1:cb:db:
74:06:09:39:da:fb:78:ec:b3:48:e5:fb:78:39:b3:
a9:c8:aa:8b:5d:5b:ef:a6:e0:b0:8b:b0:38:6c:0e:
2f:8a:d2:d3:a8:15:ba:9a:49:24:de:b7:1b:cf:a1:
28:c4:71:7d:f1:bf:ef:fa:c3:47:71:7f:64:74:ce:
8e:b8:f3:bb:73:dc:d6:a0:9c:95:86:6f:22:45:fc:
c0:6e:ac:2b:d6:18:73:74:7f:0c:2a:aa:b7:90:47:
fb:1f:f8:40:e7:00:1a:59:61:dc:de:92:3d:c7:e5:
74:7a:dd:57:13:63:1d:14:a6:83:db:fc:03:ab:c4:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:EF:4C:32:32:B6:E9:8D:7E:2F:4C:6B:DB:3A:A0:3C:94:40:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD596DB8917A11F1AA0EAAFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:5a:a8:39:3a:0f:cc:0e:ff:52:e7:b3:32:36:e7:36:b4:17:
4f:b1:25:ee:5e:3d:98:7d:b5:35:14:5e:92:d1:25:cc:d5:2e:
e5:de:ca:9b:78:03:02:91:8b:97:62:f6:ce:f7:f3:04:2b:6b:
2c:ec:8a:73:48:00:0a:50:80:52:c9:47:e7:5f:8b:14:3b:1b:
26:7f:d8:da:18:0a:08:78:13:3d:64:47:e7:ae:1e:99:71:ff:
ff:af:57:71:c2:e0:88:3c:8c:3e:b1:8a:5b:a9:1d:f1:62:13:
cd:e6:af:7f:61:f3:d4:2a:d0:26:04:00:63:74:de:ea:78:8c:
95:9d:d5:69:3f:b5:d8:05:0a:e6:1d:3b:e0:84:64:43:d0:6a:
65:a4:01:a3:36:01:04:cd:af:53:16:e7:11:dd:88:b4:66:f6:
9e:8b:fd:63:03:6a:58:24:4b:c4:7f:74:d5:cb:57:e7:d8:64:
bb:a9:b1:c0:9b:df:46:c1:fe:2f:4e:bd:f3:c7:1f:da:93:46:
af:f6:c5:4e:1d:a4:28:59:e2:e5:bd:4d:2f:9f:2c:d9:5b:02:
ae:69:aa:0e:32:e9:35:2e:7c:5c:57:f1:c5:24:b9:6d:56:f8:
cd:a3:89:bf:4f:ce:0a:25:ef:30:0c:ba:09:09:63:4c:36:3b:
25:c0:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:59 2026 by rpki-client