Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF290DBE76E011F19D386302CF1D38B0.roa
File: CF290DBE76E011F19D386302CF1D38B0.roa (raw, json)
Hash identifier: BZMfK8lT0AZ64mNJsFQ+t/fEJ/l/CLZsz+KRft2YpLA=
Subject key identifier: 0A:EE:F2:CC:68:6D:C8:86:F5:2C:7D:72:8F:0F:89:EF:20:76:E5:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF290DBE76E011F19D386302CF1D38B0.roa
Signing time: Fri 03 Jul 2026 13:12:15 +0000
ROA not before: Fri 03 Jul 2026 13:12:07 +0000
ROA not after: Thu 06 Aug 2026 13:12:07 +0000
asID: 137535
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120508 (0x1d6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 13:12:07 2026 GMT
Not After : Aug 6 13:12:07 2026 GMT
Subject: CN=6a47b52f-371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:91:e1:d8:16:86:b2:99:aa:3f:7f:c0:83:
4f:00:30:69:34:87:5a:3e:5a:70:bb:80:09:26:a5:
97:a4:3b:5e:aa:b6:8f:02:df:ea:a2:99:b6:15:d1:
69:f2:46:2c:42:6f:3d:d5:73:7a:a9:e6:ea:7f:86:
05:66:af:07:5d:0d:20:de:9b:cf:c7:39:8d:4c:35:
0f:fd:ae:72:bf:d6:7f:35:3f:3b:41:29:0f:e2:de:
63:6b:eb:b4:fd:77:97:e5:b6:e1:bd:a3:8f:6d:c2:
2b:6d:8b:3c:94:7d:71:90:04:43:16:bc:7b:67:38:
e6:37:52:f9:f0:b3:e6:a2:2e:93:eb:81:ce:b9:8d:
68:88:9c:c0:33:c3:3b:c3:f0:da:bc:c7:0b:80:ad:
9a:a4:f3:2a:d5:97:fd:a9:8d:99:e2:03:c5:97:12:
4c:bd:0b:3b:4a:c0:84:6b:60:db:e1:bd:ec:9e:8b:
9f:d6:b8:06:a9:17:f6:dd:3e:74:fe:09:c0:6b:ea:
f1:6a:0e:a4:86:f5:c3:e5:0e:78:4f:a6:ed:69:8e:
30:af:b7:73:13:12:8a:aa:c2:10:3f:88:d6:f1:d5:
0b:9f:0c:02:38:86:af:90:09:2b:cd:da:e4:5e:81:
a0:5c:8a:ad:b3:ab:9d:02:f9:c2:f6:02:aa:57:29:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:F2:CC:68:6D:C8:86:F5:2C:7D:72:8F:0F:89:EF:20:76:E5:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF290DBE76E011F19D386302CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/23
Signature Algorithm: sha256WithRSAEncryption
be:0b:7a:0f:33:c0:a5:aa:14:4a:60:f6:0b:38:21:e8:f5:13:
26:13:57:b6:07:25:79:da:ed:3a:27:55:3e:2e:7b:7a:32:b9:
7b:66:b9:0e:10:bd:08:12:c2:c5:2a:81:8e:8a:6d:f4:cd:95:
e1:ce:8c:d1:2c:9f:dc:d9:0f:01:a3:7b:04:5c:d7:b9:d4:8f:
f3:ee:b3:6d:51:59:7f:30:cf:e1:f0:ec:e0:b8:92:7a:ab:13:
ae:23:61:b1:de:5a:27:4d:c4:74:2b:98:bd:b9:3d:2d:fc:9e:
b1:86:f7:07:2d:84:3e:68:5d:6f:da:65:92:23:9a:0e:42:13:
7a:ba:e5:3c:dd:8e:b2:97:4c:22:81:78:be:f6:28:01:2d:2e:
af:d9:0e:f4:69:03:8f:66:fb:70:6e:2a:7f:59:2a:60:22:33:
45:e0:37:a8:0e:c0:b4:bc:61:ae:63:dd:5a:4d:2a:b7:f1:60:
30:b2:23:15:39:97:27:25:04:ec:db:77:77:db:48:96:81:80:
ce:34:ea:e2:78:5a:57:09:12:b2:08:67:14:e9:1d:1e:9b:a5:
a5:30:00:3e:67:50:f4:b8:d1:b7:ee:00:e4:3d:de:4a:15:6e:
2a:20:b3:43:d3:14:23:e8:ed:14:40:4c:3c:b4:93:d5:ff:85:
bc:6d:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 02:41:44 2026 by rpki-client