Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03BEA8904D6A11F1A11CB412CF1D38B0.roa
File: 03BEA8904D6A11F1A11CB412CF1D38B0.roa (raw, json)
Hash identifier: 4XCv0mJeB287Lj/lKatMiJ4TiC0q0fokOR4Uo5rHZPo=
Subject key identifier: 70:87:21:E4:6A:46:C4:17:A2:DF:AD:32:AE:2C:85:53:98:8F:22:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03BEA8904D6A11F1A11CB412CF1D38B0.roa
Signing time: Mon 11 May 2026 18:48:35 +0000
ROA not before: Mon 11 May 2026 18:48:29 +0000
ROA not after: Mon 18 May 2026 18:48:29 +0000
asID: 153517
IP address blocks: 154.86.16.0/21 maxlen: 24
154.86.16.0/22 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/22 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.24.0/21 maxlen: 24
154.86.24.0/22 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.28.0/22 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117549 (0x1cb2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 18:48:29 2026 GMT
Not After : May 18 18:48:29 2026 GMT
Subject: CN=6a022483-22d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:cc:d9:52:7b:c2:b9:46:a1:3f:7e:70:07:
e8:50:79:f0:99:28:95:de:0d:40:89:5e:1d:f9:3d:
53:ba:39:64:2d:a8:c0:65:4f:ee:b6:ab:19:3b:bb:
e7:1e:21:8d:92:ca:4e:1b:07:a1:6e:31:c1:a5:72:
36:f7:7a:24:93:e2:bb:4b:33:91:41:ab:8a:cb:da:
48:85:dc:fc:c0:d9:e9:79:35:e1:74:f3:95:a8:f0:
96:2b:b7:db:67:42:a2:2f:e1:f3:b6:53:c6:f7:2a:
e0:ed:82:a9:a2:f6:9f:75:d0:f8:86:6e:52:f9:71:
6e:90:56:10:3c:bf:82:95:43:76:bc:1a:5c:39:d7:
cd:6e:64:7f:7a:98:32:7c:0e:20:4d:41:a0:b4:29:
a4:fc:4a:b3:9f:26:7f:95:3f:9b:e9:00:b3:9c:9c:
21:aa:84:94:14:e4:1e:ea:a4:9b:7a:aa:97:30:74:
1a:2e:be:9e:13:bb:c1:d6:bf:95:6e:e4:88:25:02:
d9:cf:49:2f:0a:ae:b7:25:1a:28:22:bf:fe:d0:3e:
0c:a8:86:65:ed:46:02:03:b0:d1:bc:8d:d9:72:68:
c4:63:a0:21:da:6e:26:9d:94:42:25:ec:57:fb:ee:
34:25:53:a6:be:46:7a:28:ee:ba:01:27:b2:db:c9:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:21:E4:6A:46:C4:17:A2:DF:AD:32:AE:2C:85:53:98:8F:22:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03BEA8904D6A11F1A11CB412CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
75:a6:ef:90:da:87:ea:99:3b:a0:1b:b1:e4:0f:f1:1e:74:a9:
21:aa:ce:30:49:ec:22:75:38:0d:3d:4b:c7:50:08:3f:e9:47:
47:56:ec:63:3b:56:b1:85:77:38:0e:f9:a2:ca:3e:13:fb:b5:
92:84:3f:c4:b1:61:84:33:da:a1:6d:c4:20:d5:7b:16:20:19:
f4:0b:cf:9d:40:af:3c:92:6f:23:f5:4d:6f:de:5a:59:06:87:
66:db:09:96:98:99:d9:20:40:50:40:f6:57:7b:00:38:c4:b6:
09:da:ed:cf:58:39:89:8f:9b:ee:5d:a3:e1:4e:6d:be:99:a9:
ed:0c:cf:f7:cc:81:7e:86:44:d8:64:4e:a0:7d:36:d2:81:36:
22:16:ee:8c:2c:d1:f5:94:d3:72:45:46:32:26:8a:07:cb:a0:
0f:e2:1f:c7:f3:18:e0:e2:b2:4c:2a:7a:1d:0e:af:7d:52:28:
fc:3f:4e:5a:e4:db:54:a4:01:2b:77:9a:82:44:c8:2e:3a:9e:
48:6d:1f:77:f1:c2:62:9f:22:f4:57:bf:3a:be:30:11:c2:87:
ae:31:d1:f6:fc:a4:ca:46:e0:d6:fd:35:d9:bc:bc:44:54:27:
c0:09:aa:4d:db:48:bc:b9:a0:0c:63:d0:d3:ae:24:2d:c7:85:
fd:2f:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:27 2026 by rpki-client