Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF4A086491911F18E865EE4CE1D38B0.roa
File: DEF4A086491911F18E865EE4CE1D38B0.roa (raw, json)
Hash identifier: 9M+P6u6n/LafVqDsH2uB0UIZEl09g3eeZTq5c2zq5DQ=
Subject key identifier: B7:B0:C0:5A:9A:65:31:80:DB:F0:CD:0B:4D:F6:79:06:75:B3:99:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C96F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF4A086491911F18E865EE4CE1D38B0.roa
Signing time: Wed 06 May 2026 07:04:49 +0000
ROA not before: Wed 06 May 2026 07:04:45 +0000
ROA not after: Wed 13 May 2026 07:04:45 +0000
asID: 395886
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117103 (0x1c96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:04:45 2026 GMT
Not After : May 13 07:04:45 2026 GMT
Subject: CN=69fae811-70ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:9f:ee:93:d3:68:0d:bd:95:31:e8:8d:f9:
c9:b7:1d:7a:dc:bb:a2:c5:2f:3e:45:78:b4:4a:44:
2e:40:2b:91:c9:96:0a:78:c0:22:1b:15:2e:f9:93:
8e:c5:d3:8e:1a:18:10:29:01:7e:93:f2:9f:46:4a:
b6:61:9f:a2:f3:ea:7f:fc:3c:72:3e:63:c0:84:46:
33:de:bb:40:c0:80:50:fb:0a:15:5c:0e:11:1a:72:
33:67:c6:58:80:d5:2d:6e:a0:45:29:8c:07:78:2d:
26:76:a7:56:da:56:44:58:e2:c8:f7:04:a9:ab:c3:
f3:28:5c:ac:0d:d2:f1:00:28:c4:72:89:d2:46:f9:
2d:01:64:76:43:9b:d7:fd:51:e1:71:57:99:65:b8:
20:e0:7b:e5:96:05:2c:d0:79:50:bc:19:c8:87:1c:
9f:f4:40:0b:b1:b1:8a:bf:32:d0:77:40:cf:98:1e:
94:f7:da:71:b1:87:d1:f1:1d:db:69:65:d1:1d:0f:
5a:bf:2d:90:fb:7e:cb:40:69:48:96:0d:d4:6a:b1:
8c:84:97:3f:b0:9c:41:6e:d9:83:d4:61:af:5a:cc:
10:f6:c5:56:12:3a:8c:71:da:0e:46:b3:e5:7b:3f:
ba:66:20:6d:d8:ce:cb:d8:cf:8a:50:6d:16:7b:ab:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:C0:5A:9A:65:31:80:DB:F0:CD:0B:4D:F6:79:06:75:B3:99:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF4A086491911F18E865EE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:14:a8:7c:fe:c3:19:2d:33:93:2a:5f:42:5a:fe:4a:21:47:
d5:8b:f4:0a:83:67:05:27:68:8c:c8:24:68:d7:0e:f9:f6:53:
f8:63:ab:85:0c:f1:d3:a9:57:bf:ce:7a:71:6f:cc:d5:2b:9e:
17:2e:46:bc:99:ca:29:c2:fc:3b:27:48:6e:a0:a5:1b:1e:bb:
36:7f:bc:d4:fd:08:bd:68:dc:9a:3f:e8:57:81:fc:1f:c6:b0:
b5:7f:de:9b:56:d8:68:3f:ce:98:ef:4f:28:4f:a1:fc:eb:68:
a2:52:05:0d:3f:93:52:8c:1a:ab:da:40:c7:33:a5:fd:8b:a4:
62:6d:fc:ca:bb:95:1f:e9:ee:41:f0:36:4b:0b:9f:d0:54:f2:
06:cf:67:ac:78:60:bc:d3:48:ae:8a:50:cb:79:73:3f:65:8f:
80:d5:8b:de:a8:3d:76:b1:bb:33:28:0d:1f:4c:dd:af:63:a9:
5a:73:d7:95:9d:9a:e4:23:75:e3:08:27:1a:b8:ed:10:40:cb:
f5:5c:9a:43:06:e8:ec:51:80:e1:f2:47:c5:cd:54:6c:dd:42:
f0:2e:ff:45:be:e9:75:7f:1e:30:20:c7:29:4f:85:24:2d:c0:
c2:0e:e0:d4:a3:c8:06:6c:3e:8b:9e:a5:4f:68:4c:07:df:49:
a1:fc:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:08 2026 by rpki-client