Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168CE8344C5111F1A821F7F2CE1D38B0.roa
File: 168CE8344C5111F1A821F7F2CE1D38B0.roa (raw, json)
Hash identifier: WizEDMQxXxNU2WlMV6GMZAjU+ZBEcfjCCY72tEpxPwk=
Subject key identifier: 07:29:A2:A2:45:45:FF:3E:EB:14:98:C1:B2:94:42:21:90:57:48:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168CE8344C5111F1A821F7F2CE1D38B0.roa
Signing time: Sun 10 May 2026 09:17:38 +0000
ROA not before: Sun 10 May 2026 09:17:34 +0000
ROA not after: Wed 10 Jun 2026 09:17:34 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117425 (0x1cab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 09:17:34 2026 GMT
Not After : Jun 10 09:17:34 2026 GMT
Subject: CN=6a004d32-02ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:ed:b1:54:eb:94:75:2a:00:1e:78:b5:ca:
2c:99:39:63:47:cd:fe:52:c3:bf:e6:b1:40:b2:f2:
ea:74:9c:44:26:45:04:34:79:a0:6e:ec:8b:d8:7e:
4b:d9:c4:66:92:ab:e8:f1:7b:fc:7c:60:0b:91:df:
9e:45:a4:11:18:85:c1:79:cf:4a:f0:75:75:02:e7:
2c:08:a2:c1:b4:2d:3f:3f:3e:70:45:ad:fb:eb:41:
1f:c8:c3:fb:c2:07:91:18:3a:87:16:0f:c6:fe:25:
ad:db:b4:a3:31:cf:bc:70:47:19:77:41:2e:9a:d6:
91:93:b0:e9:68:f2:aa:f0:03:23:86:bb:8b:01:11:
62:f8:15:4a:ed:1a:4f:9c:da:16:c4:c7:9f:4c:a6:
cf:42:8e:06:d4:97:20:03:3b:23:7b:fe:56:79:23:
e9:89:27:dd:96:01:3c:65:31:20:3e:07:71:30:85:
7d:6a:a4:a8:43:7f:58:c8:5a:91:81:e8:cc:24:ea:
e1:df:7d:8a:54:9e:71:08:19:21:08:17:27:d2:08:
54:9c:58:ec:90:76:c3:3a:cc:1d:55:20:69:33:19:
e8:dc:c6:d1:ad:cd:7e:c2:62:ea:5d:92:6a:da:2d:
d4:ed:fd:03:85:2b:ac:20:33:8c:c7:78:c3:e1:d5:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:29:A2:A2:45:45:FF:3E:EB:14:98:C1:B2:94:42:21:90:57:48:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168CE8344C5111F1A821F7F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0c:44:db:e0:83:a8:28:a9:b9:bc:00:17:d5:a4:44:e7:ac:
5e:4b:42:05:7b:1a:93:be:32:60:6a:63:a4:33:2f:01:8c:4a:
32:b1:48:ab:ff:23:ff:9c:41:49:cc:81:68:fc:da:3f:ce:91:
6e:f1:4a:19:5c:25:60:3b:63:18:32:3e:4a:e7:67:02:5f:61:
c5:d7:08:74:c3:f6:61:96:5e:f0:53:c1:23:20:2e:fb:3b:43:
77:ab:41:17:8a:6a:17:43:99:c1:73:fd:37:98:aa:96:fb:e3:
96:29:72:c0:3d:a5:3c:8d:f9:1a:ab:63:2a:39:89:db:51:8f:
8f:e9:d8:17:ab:f1:f4:07:1c:b7:42:c2:1c:82:5f:88:d3:22:
3a:61:e2:8c:36:99:3d:20:9a:c5:8b:2b:51:a9:da:7f:e8:3f:
80:d3:70:ad:fc:55:c6:5b:48:8a:96:f9:db:99:90:da:1c:f6:
c3:6f:08:da:08:1f:84:60:8e:ab:66:80:1f:9e:28:09:47:ed:
2d:7d:57:9e:c4:16:27:f5:72:4e:77:db:22:da:a9:cf:f9:57:
90:47:9e:48:f6:0b:08:d1:82:9b:87:31:19:a0:21:cc:d1:15:
11:f1:38:18:e3:7b:3f:13:1b:7d:22:c3:98:13:64:7f:b3:62:
72:41:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:07 2026 by rpki-client