Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2390D6264D5511F1B92B6716CF1D38B0.roa
File: 2390D6264D5511F1B92B6716CF1D38B0.roa (raw, json)
Hash identifier: mM/n/ffdaR7zVhV84YEJPrOBrOtSOYUm0zWA8yJU5Fc=
Subject key identifier: 71:99:3C:68:6A:F1:44:CF:C8:FB:10:17:00:3F:30:F8:A4:84:40:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2390D6264D5511F1B92B6716CF1D38B0.roa
Signing time: Mon 11 May 2026 16:19:09 +0000
ROA not before: Mon 11 May 2026 16:19:04 +0000
ROA not after: Mon 18 May 2026 16:19:04 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117531 (0x1cb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 16:19:04 2026 GMT
Not After : May 18 16:19:04 2026 GMT
Subject: CN=6a02017d-bfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:1a:36:71:2d:dd:a0:c9:c1:5c:73:95:13:
11:37:da:59:9d:14:db:1d:ee:af:3e:70:fc:bd:43:
a1:3e:55:b4:9e:fd:a5:e5:ca:d0:2e:30:df:b4:72:
0c:c3:0f:8c:56:8f:5d:fe:10:12:2f:bb:df:af:d7:
bd:70:6d:19:d3:1c:5e:37:13:00:de:41:63:2d:e5:
27:8c:37:34:db:6b:ce:af:d1:0b:c5:d7:77:27:69:
5a:d4:23:25:84:b0:3c:d3:f9:17:7f:31:d2:c5:f5:
c8:69:49:e2:b7:9a:9c:42:03:17:a5:2e:47:cd:54:
c3:1a:f8:03:e2:cf:1d:c8:4f:59:09:3b:9f:4f:49:
76:93:03:82:7b:72:a8:67:a2:0d:80:a0:43:7a:77:
f2:23:f9:c7:32:2f:00:df:f5:80:14:11:5b:35:83:
7a:87:42:6c:af:b1:50:da:52:b2:68:f9:2e:cd:ca:
79:43:2f:6c:ef:68:70:d9:7c:1a:4b:d2:87:26:e8:
28:91:55:e0:b0:96:42:4a:37:1e:ad:1b:d6:c1:b7:
dd:75:12:ba:ad:38:e4:d9:ec:e5:55:ae:db:f7:0b:
a0:0a:e7:10:f1:ff:47:63:bd:30:b7:e0:4a:a5:73:
f0:2a:91:4c:c2:fb:36:3c:97:ff:1d:74:e9:d2:ea:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:3C:68:6A:F1:44:CF:C8:FB:10:17:00:3F:30:F8:A4:84:40:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2390D6264D5511F1B92B6716CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
84:e1:c3:bf:cb:8f:f1:dc:20:84:fc:9d:13:fa:76:1d:c2:40:
0c:75:ff:fa:4b:45:c8:70:7a:09:1e:df:ae:56:1e:0c:b5:29:
de:d3:d8:5b:31:a4:8e:07:cc:60:e3:e0:d6:f0:91:22:40:9a:
71:0b:53:2a:5c:fc:a8:1d:e0:da:b2:6a:a4:e5:04:a9:4d:30:
57:46:fe:9c:13:fc:64:6c:39:c2:74:9b:bc:c0:fb:56:56:f7:
51:c8:88:1b:7d:59:62:83:29:da:11:a5:d8:a1:61:99:4c:29:
e2:fc:76:ac:55:47:c4:d3:fd:02:60:7c:29:08:d0:ab:b8:55:
a8:d6:35:17:02:30:2c:8c:49:2c:6d:06:32:80:a8:bb:d4:a3:
45:43:f8:bb:d9:66:86:67:c0:a7:56:ec:19:31:d3:34:ce:6b:
75:85:28:02:82:a0:35:5e:08:50:20:ad:fd:85:ca:be:f4:94:
7d:c6:db:79:69:46:ce:19:ae:f3:d3:cc:9f:c5:60:0c:99:5c:
89:e0:b0:6e:70:ad:34:b9:a3:79:2a:cf:3b:90:17:bf:a9:4e:
75:be:9e:4b:2c:8f:22:b1:e9:a4:54:ff:5f:a9:25:93:b6:54:
9c:fc:0d:09:fc:db:5e:64:5f:4e:bc:2a:5f:27:46:d6:b6:e9:
83:89:0a:ef
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcsbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTExMTYxOTA0WhcNMjYwNTE4MTYxOTA0WjAYMRYw
FAYDVQQDEw02YTAyMDE3ZC1iZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs5UaNnEt3aDJwVxzlRMRN9pZnRTbHe6vPnD8vUOhPlW0nv2l5crQLjDf
tHIMww+MVo9d/hASL7vfr9e9cG0Z0xxeNxMA3kFjLeUnjDc022vOr9ELxdd3J2la
1CMlhLA80/kXfzHSxfXIaUnit5qcQgMXpS5HzVTDGvgD4s8dyE9ZCTufT0l2kwOC
e3KoZ6INgKBDenfyI/nHMi8A3/WAFBFbNYN6h0Jsr7FQ2lKyaPkuzcp5Qy9s72hw
2XwaS9KHJugokVXgsJZCSjcerRvWwbfddRK6rTjk2ezlVa7b9wugCucQ8f9HY70w
t+BKpXPwKpFMwvs2PJf/HXTp0uojQQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHGZ
PGhq8UTPyPsQFwA/MPikhEAXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzkwRDYyNjRENTUxMUYxQjkyQjY3MTZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaVhADBAGaVhwwDQYJ
KoZIhvcNAQELBQADggEBAIThw7/Lj/HcIIT8nRP6dh3CQAx1//pLRchwegke365W
Hgy1Kd7T2FsxpI4HzGDj4NbwkSJAmnELUypc/Kgd4NqyaqTlBKlNMFdG/pwT/GRs
OcJ0m7zA+1ZW91HIiBt9WWKDKdoRpdihYZlMKeL8dqxVR8TT/QJgfCkI0Ku4VajW
NRcCMCyMSSxtBjKAqLvUo0VD+LvZZoZnwKdW7Bkx0zTOa3WFKAKCoDVeCFAgrf2F
yr70lH3G23lpRs4ZrvPTzJ/FYAyZXIngsG5wrTS5o3kqzzuQF7+pTnW+nkssjyKx
6aRU/1+pJZO2VJz8DQn8215kX068Kl8nRta26YOJCu8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:44 2026 by rpki-client