Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FD4B304D0411F1A1CBADB8CE1D38B0.roa
File: 65FD4B304D0411F1A1CBADB8CE1D38B0.roa (raw, json)
Hash identifier: b19YTORvMISBD/Nu1X63UG2PlhGx6a7I9SZ5vPcEhsM=
Subject key identifier: BE:36:D2:27:5C:33:5A:FA:29:69:5E:4E:9F:1C:B4:B8:0E:C8:20:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FD4B304D0411F1A1CBADB8CE1D38B0.roa
Signing time: Mon 11 May 2026 06:41:11 +0000
ROA not before: Mon 11 May 2026 06:41:06 +0000
ROA not after: Mon 18 May 2026 06:41:06 +0000
asID: 153517
IP address blocks: 154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117484 (0x1caec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 06:41:06 2026 GMT
Not After : May 18 06:41:06 2026 GMT
Subject: CN=6a017a07-cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:7e:79:69:de:a6:a2:11:71:d7:9e:d6:a2:
0c:0e:34:bd:5d:3b:bb:8d:6d:cb:93:6e:09:21:58:
9d:8a:fd:65:1e:68:8a:e6:90:40:73:1f:dd:5f:4c:
98:9c:ce:17:35:40:3c:53:23:9c:ae:40:c6:1f:1f:
2d:94:c5:94:07:db:ec:88:3e:3d:7a:e4:38:fb:1b:
51:93:c2:df:22:99:9e:35:38:89:81:4d:58:47:59:
dd:7f:a8:84:6c:16:f3:d3:31:b1:63:24:61:87:60:
3d:39:82:c4:a8:01:eb:44:09:0f:fc:11:09:86:a7:
39:45:55:a5:ca:0b:c9:95:ea:6b:54:9f:35:b7:a1:
3c:4d:53:58:c7:58:a1:95:15:47:7c:a2:ea:ad:1a:
a8:e3:63:c7:92:3f:a6:bf:25:ba:d4:cd:04:dc:30:
d2:80:51:a6:d7:c3:55:13:66:15:07:60:da:22:4f:
a9:8a:78:df:1f:a0:ab:be:6a:8b:5a:a8:d4:ca:d6:
15:a4:a4:88:ce:60:e1:d2:bb:78:77:48:4e:59:31:
dd:b3:f3:18:99:7b:49:80:da:38:11:7d:19:dd:df:
d1:53:32:06:14:94:80:ec:27:42:0c:96:60:5e:81:
9d:19:b0:49:d9:75:c0:74:fe:3b:2a:d3:02:a2:fe:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:D2:27:5C:33:5A:FA:29:69:5E:4E:9F:1C:B4:B8:0E:C8:20:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65FD4B304D0411F1A1CBADB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.21.0-154.86.31.255
Signature Algorithm: sha256WithRSAEncryption
8b:9c:53:29:f0:28:d1:11:65:46:27:b1:73:07:fa:02:22:78:
6e:ca:28:4c:d7:13:d0:1d:d6:51:45:63:38:bf:78:82:24:36:
c3:6f:35:99:a4:9b:b9:f8:1b:2e:9d:ef:09:8e:32:b1:f8:bf:
9d:56:34:f0:b4:09:d3:f2:8f:de:bf:4d:05:9a:d8:b0:5a:c9:
dc:2a:20:05:42:68:68:77:f9:cf:68:bb:ad:41:0c:c1:34:a2:
29:51:34:fb:13:ed:ae:1f:64:81:34:77:fc:4d:87:3a:1b:e9:
ac:d4:29:48:ca:08:be:a2:f0:9e:1c:6a:b4:96:18:33:ba:df:
40:a5:33:f1:02:22:ea:ab:c0:e0:9f:79:9b:fe:2c:e3:b2:ef:
f0:aa:86:cd:ea:51:7b:69:cf:57:72:43:54:f2:26:c7:a4:aa:
d0:1b:8d:b6:90:a0:3c:5b:3a:8c:38:b9:88:64:e6:8f:04:dd:
3a:c0:92:38:28:e9:4f:a8:d8:a0:c4:4c:93:d1:79:54:f6:f3:
6a:ed:9c:be:c2:89:bb:b6:ce:8b:1b:34:dc:d8:3a:79:df:48:
8d:b4:a3:6f:8f:d6:1b:8e:b6:ba:39:af:2e:3c:31:50:1b:ea:
84:72:0a:65:07:64:3e:e2:0c:5d:9f:1d:9d:a2:92:76:b7:f3:
15:c7:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:15 2026 by rpki-client