Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAC9901A491611F18C692DD2CE1D38B0.roa
File: CAC9901A491611F18C692DD2CE1D38B0.roa (raw, json)
Hash identifier: SagUWtLlfIB/lqoGzBx/ueA0QUyma0RpE4KUiqMy8Xs=
Subject key identifier: DC:32:83:78:F1:A2:8A:59:2A:3B:11:8C:07:60:BC:18:A6:0C:D9:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C969
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAC9901A491611F18C692DD2CE1D38B0.roa
Signing time: Wed 06 May 2026 06:42:47 +0000
ROA not before: Wed 06 May 2026 06:42:41 +0000
ROA not after: Wed 13 May 2026 06:42:41 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117097 (0x1c969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 06:42:41 2026 GMT
Not After : May 13 06:42:41 2026 GMT
Subject: CN=69fae2e7-1d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:92:c1:77:36:d5:1d:db:28:c8:bf:36:b1:
34:e8:eb:ab:73:7f:1a:fc:1b:f2:d4:94:a7:f8:7e:
1e:de:4b:df:54:91:c8:82:72:ac:8f:fb:52:40:03:
d2:7c:0c:90:4b:26:55:76:33:2e:a0:30:b3:e0:ca:
e8:ae:96:97:ae:4e:0f:26:84:1a:3a:4e:00:af:df:
76:28:81:9c:28:c9:ef:69:e5:d2:d6:a7:1e:9c:df:
5c:18:31:f3:73:c8:1e:91:b5:93:57:68:43:f0:53:
7d:7e:38:8b:81:ea:9f:09:36:20:e2:ec:6f:e8:08:
ce:4b:ce:5c:76:d5:8f:4a:df:8b:1d:e5:e0:ad:74:
cc:a0:73:42:12:71:7d:b2:b5:0d:57:a0:c4:86:bc:
da:f3:bf:76:38:b1:58:54:62:89:85:e1:a1:bc:6d:
6c:3a:1b:f4:c3:dc:8f:5c:be:49:e0:fd:88:7a:77:
1d:1b:dc:fa:f6:a6:b3:3c:ad:f4:92:c4:c5:fa:fa:
d1:c1:8a:d5:3a:61:6d:fd:ce:76:97:7f:17:54:35:
c4:9f:c5:4a:9b:ac:8f:fd:17:fe:b3:8b:11:2f:f2:
69:7c:4b:72:29:16:62:41:49:3d:cb:e4:bb:68:e8:
9d:df:4c:c4:98:21:8d:68:d3:5d:37:2f:be:33:e8:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:32:83:78:F1:A2:8A:59:2A:3B:11:8C:07:60:BC:18:A6:0C:D9:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAC9901A491611F18C692DD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
a4:a5:05:b8:33:ed:33:10:51:11:9f:0f:a9:27:31:24:c6:64:
ef:b8:24:08:9e:4a:d8:fe:49:54:4e:80:71:d1:0d:15:07:dc:
51:ab:b7:64:17:71:d4:00:3f:39:56:33:42:c6:9b:24:eb:9e:
e3:d1:b0:5b:98:ef:6d:3e:92:f6:f0:b3:93:da:a4:07:33:81:
75:b1:c6:31:78:c5:c4:85:14:7d:a8:8f:61:c5:dc:fa:04:2e:
c0:b7:10:d2:14:19:7d:be:a6:36:25:17:ae:c9:a1:e4:d8:6a:
11:fc:c8:a9:e5:53:18:47:26:6c:fd:19:1a:5a:dc:60:6c:29:
f9:09:7a:a5:7b:ac:ba:13:5d:d1:bd:73:92:6d:fa:8e:9b:26:
b2:45:dd:91:31:89:50:b8:54:a6:74:65:ea:a1:ed:20:f2:0b:
36:35:a4:99:ab:d5:64:55:76:56:55:e0:dc:06:46:b9:09:e3:
4d:9a:89:3a:91:52:6e:62:7b:7c:21:89:ba:15:94:a7:2f:03:
0a:8f:c1:aa:4b:98:48:f6:f0:2c:ab:3d:33:70:54:81:93:b4:
c6:11:8e:04:64:a4:bf:6b:ca:0d:23:2c:89:27:af:46:92:a5:
23:5e:08:ea:f3:52:fe:e0:a6:29:dd:a5:b4:11:37:38:2a:49:
39:e9:6d:f9
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAclpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA2MDY0MjQxWhcNMjYwNTEzMDY0MjQxWjAYMRYw
FAYDVQQDEw02OWZhZTJlNy0xZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv8SSwXc21R3bKMi/NrE06Ourc38a/Bvy1JSn+H4e3kvfVJHIgnKsj/tS
QAPSfAyQSyZVdjMuoDCz4MrorpaXrk4PJoQaOk4Ar992KIGcKMnvaeXS1qcenN9c
GDHzc8gekbWTV2hD8FN9fjiLgeqfCTYg4uxv6AjOS85cdtWPSt+LHeXgrXTMoHNC
EnF9srUNV6DEhrza8792OLFYVGKJheGhvG1sOhv0w9yPXL5J4P2IencdG9z69qaz
PK30ksTF+vrRwYrVOmFt/c52l38XVDXEn8VKm6yP/Rf+s4sRL/JpfEtyKRZiQUk9
y+S7aOid30zEmCGNaNNdNy++M+jtXQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNwy
g3jxoopZKjsRjAdgvBimDNl8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQUM5OTAxQTQ5MTYxMUYxOEM2OTJERDJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaVhADBAGaVhwwDQYJ
KoZIhvcNAQELBQADggEBAKSlBbgz7TMQURGfD6knMSTGZO+4JAieStj+SVROgHHR
DRUH3FGrt2QXcdQAPzlWM0LGmyTrnuPRsFuY720+kvbws5PapAczgXWxxjF4xcSF
FH2oj2HF3PoELsC3ENIUGX2+pjYlF67JoeTYahH8yKnlUxhHJmz9GRpa3GBsKfkJ
eqV7rLoTXdG9c5Jt+o6bJrJF3ZExiVC4VKZ0Zeqh7SDyCzY1pJmr1WRVdlZV4NwG
RrkJ402aiTqRUm5ie3whiboVlKcvAwqPwapLmEj28CyrPTNwVIGTtMYRjgRkpL9r
yg0jLIknr0aSpSNeCOrzUv7gpindpbQRNzgqSTnpbfk=
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:05 2026 by rpki-client