Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086A712E4A8311F19FE906EDCE1D38B0.roa
File: 086A712E4A8311F19FE906EDCE1D38B0.roa (raw, json)
Hash identifier: N/YsPHh32syWsP3tCMMoJ/l/x3gYfA6sdWr7xoPBCnY=
Subject key identifier: 1E:C3:CF:C4:D6:92:87:96:03:43:07:BA:DE:D8:E5:50:7D:04:17:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086A712E4A8311F19FE906EDCE1D38B0.roa
Signing time: Fri 08 May 2026 02:10:07 +0000
ROA not before: Fri 08 May 2026 02:10:02 +0000
ROA not after: Fri 15 May 2026 02:10:02 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 02:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117289 (0x1ca29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 02:10:02 2026 GMT
Not After : May 15 02:10:02 2026 GMT
Subject: CN=69fd45ff-6832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:50:1b:06:3f:39:fa:25:c1:a7:85:42:28:
48:f4:08:1a:27:a8:a9:2e:fe:74:5d:f0:3b:c2:63:
79:6e:f0:0d:db:cb:1b:6e:7a:2a:ed:52:19:7b:cf:
83:db:c9:d9:48:74:9b:27:1e:ce:11:47:f8:20:83:
46:fc:8f:d7:b6:1d:dc:48:1b:ba:1a:99:a4:02:21:
c6:96:8f:d4:b3:ce:db:b0:71:b7:0c:f2:96:17:29:
6c:f4:c8:3c:f5:d6:cc:20:ed:8a:af:df:8e:e5:e6:
b9:a4:ac:3e:f8:01:d4:49:cd:c3:b6:b4:a5:16:c0:
5d:67:58:5e:e7:ef:63:2b:aa:cd:5e:fa:8f:af:c0:
ca:fe:4e:e9:87:be:50:a5:38:66:98:ac:7b:77:11:
fd:a1:67:3d:05:16:04:ab:57:f1:e2:39:b2:63:46:
05:52:83:c4:4f:68:28:b4:9f:c6:81:94:41:cf:09:
5e:3e:91:c9:d3:35:73:44:3e:df:dc:bd:49:2d:bc:
ea:16:a7:33:53:40:18:bb:5f:f5:bf:84:31:e8:57:
df:42:3d:73:63:a4:7f:33:01:5e:f5:e5:c9:47:23:
10:cf:4d:10:64:19:ab:27:8f:b0:98:14:8c:05:f1:
c4:ea:3c:8a:cf:fc:e0:60:86:0a:b2:6c:40:d0:a1:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:CF:C4:D6:92:87:96:03:43:07:BA:DE:D8:E5:50:7D:04:17:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086A712E4A8311F19FE906EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:00:ae:23:68:23:af:7e:7b:a7:db:12:4b:6a:a2:f0:16:2b:
ea:35:69:45:d3:25:93:58:b5:80:e9:5c:29:00:40:97:37:41:
59:ff:5a:92:c2:86:35:28:af:ff:9c:a8:0a:d4:6c:45:2e:e0:
3c:ec:99:7c:8d:8f:14:4d:45:e8:55:9c:79:07:6d:2e:ff:ea:
66:d7:2f:35:c2:25:d1:30:2d:f0:f7:78:58:2e:9c:6e:8b:e6:
93:77:1f:a8:5a:1c:e2:ce:68:23:ab:15:b2:30:30:d7:15:d2:
4b:30:dd:f4:3a:46:bd:47:d7:94:af:26:45:6f:75:5c:10:4a:
a8:34:e0:71:9c:05:a6:e0:c8:39:1b:fd:16:19:9a:47:6b:65:
b1:56:35:9d:0b:d7:53:22:dc:01:5d:70:21:3e:a0:09:7e:5b:
fd:37:00:df:24:ef:d6:d6:e1:18:b0:e8:57:bd:fc:d8:30:dd:
11:d2:b6:63:d2:71:d6:7d:09:7e:57:25:33:21:4d:db:e8:e1:
ab:d4:3f:2e:ef:13:24:87:46:df:c6:41:0b:aa:8e:e2:91:b1:
af:1e:1e:25:5d:69:b4:1b:d2:db:75:24:2e:97:b0:48:5d:93:
2c:5b:c1:57:5d:5f:95:ca:49:3b:ab:2f:30:79:09:08:72:cf:
79:99:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:54 2026 by rpki-client