Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F44EF02A923A11F1B755000DCF1D38B0.roa
File: F44EF02A923A11F1B755000DCF1D38B0.roa (raw, json)
Hash identifier: UVz9iP8urmh0WMdah5Lxgu8VW+foB34uquTu+jWmUG4=
Subject key identifier: D0:7A:E6:34:11:E4:30:C9:BC:31:32:09:CE:4C:1A:B6:DB:CE:7C:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F44EF02A923A11F1B755000DCF1D38B0.roa
Signing time: Fri 07 Aug 2026 08:35:33 +0000
ROA not before: Fri 07 Aug 2026 08:35:29 +0000
ROA not after: Sun 06 Sep 2026 08:35:29 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122192 (0x1dd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 08:35:29 2026 GMT
Not After : Sep 6 08:35:29 2026 GMT
Subject: CN=6a7598d5-787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:e7:4d:41:78:17:58:f2:da:08:0c:b2:28:
a7:8c:f2:83:b5:ad:65:42:cd:0e:28:6b:86:e3:e2:
2d:8f:5b:95:d6:74:a4:78:17:01:ef:9b:f3:6d:b9:
51:5d:ce:27:ff:a8:76:e4:b5:d5:2c:39:7d:21:75:
82:b6:49:27:e6:d2:f5:f1:63:86:98:d9:7a:ed:5c:
a6:53:3a:ee:2f:97:44:4c:15:ca:a3:80:8b:0d:97:
b3:34:08:06:fb:99:f9:69:37:3b:72:0c:72:ab:58:
51:c8:05:bb:fc:7d:f6:55:15:09:0c:e8:d9:2c:2f:
96:73:ff:3c:34:a5:60:2f:86:eb:68:57:78:e1:9b:
1e:b2:b1:9e:90:72:86:e1:62:ab:90:97:18:2a:d8:
5e:bd:2f:96:a9:2a:91:f1:8b:1e:c7:af:2b:47:10:
96:55:c7:18:da:c9:20:d4:36:5f:da:e8:af:b3:c7:
6d:13:33:a2:c7:fb:fe:12:18:4d:50:bd:26:f2:55:
1f:31:8b:ad:5e:2f:70:88:f7:e0:6d:d9:74:27:25:
5d:e6:c8:70:cb:47:53:72:0a:27:71:0b:5e:07:1a:
0e:2e:7c:60:2b:7b:b5:ee:16:63:5a:df:20:bf:00:
1c:49:17:3f:5a:b9:f8:19:80:c8:f7:94:14:b0:7f:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:E6:34:11:E4:30:C9:BC:31:32:09:CE:4C:1A:B6:DB:CE:7C:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F44EF02A923A11F1B755000DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:79:fb:57:41:1e:2b:b9:da:9d:95:13:c5:e4:85:bb:df:25:
2e:23:d5:86:5c:89:66:48:11:a8:21:50:1d:67:09:e2:02:ec:
50:51:85:bf:3c:ec:38:67:83:98:a4:d6:69:99:01:5d:f6:ac:
83:2f:ba:0c:c7:de:cd:68:63:c5:44:2c:6a:cf:c7:63:87:ee:
cb:5e:7c:d4:b4:a0:f4:f8:d7:48:ff:9e:07:ea:e7:cb:45:31:
14:20:ff:bb:b4:d6:41:1d:6d:44:d7:13:40:74:79:42:c7:f4:
48:46:82:9f:36:ba:93:ac:83:ae:14:91:b5:d4:41:02:fa:6d:
eb:76:ae:26:1a:78:8f:01:18:12:5c:c2:b5:8f:a7:6c:49:5e:
5e:95:5e:46:4a:6a:65:82:a1:fc:3b:6e:a5:d3:17:93:19:0d:
4f:52:7b:23:c4:a5:de:48:a8:6b:0f:93:5f:8d:c2:43:ef:e9:
c1:52:26:b8:9d:ea:60:86:9e:ce:95:e6:66:a5:6c:e6:c6:73:
8d:aa:89:4f:1f:58:d2:df:a0:d3:17:df:7e:26:16:ca:c3:40:
48:22:fc:2c:d1:ab:ac:6d:3a:de:14:7b:ec:32:78:5c:7e:20:
23:20:98:1b:c1:40:3c:da:81:45:60:0a:04:0d:a9:73:e9:4c:
b3:f6:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:45 2026 by rpki-client