Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/674A5B0C4D0611F1A7EAD5C4CE1D38B0.roa
File: 674A5B0C4D0611F1A7EAD5C4CE1D38B0.roa (raw, json)
Hash identifier: aQRm/X6+b6Bp1kRcM8okVSr+rnk46Uc4n87nmD97ilQ=
Subject key identifier: 8D:8D:D4:B7:35:B0:13:41:A2:25:77:02:AD:C7:41:EA:86:85:D8:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/674A5B0C4D0611F1A7EAD5C4CE1D38B0.roa
Signing time: Mon 11 May 2026 06:55:33 +0000
ROA not before: Mon 11 May 2026 06:55:27 +0000
ROA not after: Mon 18 May 2026 06:55:27 +0000
asID: 140227
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117488 (0x1caf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 06:55:27 2026 GMT
Not After : May 18 06:55:27 2026 GMT
Subject: CN=6a017d64-5a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:27:0f:83:0f:f5:28:41:6d:0b:84:67:26:
bc:55:24:cc:7b:d3:a2:12:e1:ca:f3:c9:a0:7c:18:
ac:44:4d:35:69:20:c2:36:cd:2b:f9:bf:8c:46:11:
56:ae:5b:90:93:1b:e3:eb:bc:44:9f:7b:35:56:23:
96:2f:4d:5d:26:16:5b:44:cc:bf:4f:85:0a:97:70:
9d:3c:78:a0:7b:81:32:6f:87:61:25:b5:cc:2f:2f:
22:74:be:63:21:ad:54:8c:86:19:cc:b4:c1:7b:e5:
11:3b:01:48:ec:69:08:de:9e:01:bf:c0:e9:53:2d:
48:19:c0:01:67:3a:4b:8e:28:1c:2a:71:98:c2:fa:
a6:74:c5:f9:b5:2b:98:15:a6:be:54:2b:b2:01:27:
de:0e:82:85:0f:d2:a2:63:71:0f:c7:ca:3e:1c:c6:
26:42:56:23:91:6c:1f:22:b3:14:6d:34:d3:2b:9e:
90:10:de:17:20:a8:7e:7f:56:81:2a:57:dd:b7:a0:
07:df:e3:a8:32:4e:06:be:f7:f6:c3:44:d3:92:d4:
6c:b7:7f:52:27:7c:af:3f:93:9e:44:23:01:78:a7:
98:ea:ca:12:7a:b5:2f:a5:c4:90:65:df:d8:e2:7f:
73:b0:b6:24:54:f7:33:a3:84:4c:66:cb:34:b9:a5:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8D:D4:B7:35:B0:13:41:A2:25:77:02:AD:C7:41:EA:86:85:D8:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/674A5B0C4D0611F1A7EAD5C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:a6:e5:0f:5a:45:96:07:04:3c:a8:c5:33:2c:21:66:4a:fa:
d4:c7:83:f4:5d:26:76:a4:cd:09:f0:ec:2f:41:09:66:94:2a:
ea:25:57:5d:79:c0:fa:1b:11:96:56:2a:13:93:70:c9:94:25:
5d:b2:cf:f0:da:29:3b:24:d7:87:91:4a:e7:3a:35:9d:73:75:
14:20:9d:57:b2:0c:54:eb:1f:08:be:25:85:be:5e:46:b2:ad:
be:b3:6e:a9:4c:5b:df:fb:2e:27:c2:c6:a6:86:79:16:42:0f:
89:63:7e:d0:07:07:70:2e:6c:38:f5:a9:72:1c:69:e7:ed:c9:
33:d2:da:47:14:bd:25:0d:1f:4e:a7:79:20:98:ee:a0:e0:42:
97:73:76:8b:01:d0:6f:43:2f:99:53:9a:aa:b0:5e:5c:dd:7b:
c1:a3:7e:84:81:45:09:09:46:69:61:ee:b5:2c:66:62:cd:79:
a1:60:fd:e0:3a:9e:76:8a:c9:d7:91:65:6f:c3:b4:82:f7:2a:
60:4c:8b:73:cd:d5:c3:73:3a:36:dc:72:86:68:b7:be:c2:79:
c6:73:5d:d5:79:37:29:a8:ff:51:1d:a8:22:99:9f:1c:92:e9:
02:2a:47:00:8d:c7:9f:09:23:f2:93:08:06:5d:4b:60:03:e9:
bf:4f:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:32 2026 by rpki-client