Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86C666B84C7211F18C95B3B9CE1D38B0.roa
File: 86C666B84C7211F18C95B3B9CE1D38B0.roa (raw, json)
Hash identifier: Y6opUZMXmgqETTI8eJ8UJTqQOmSRRIBMCDkNkRZZ9OI=
Subject key identifier: 86:3B:02:E8:57:52:F0:1D:D4:83:9A:5E:95:3E:34:3F:66:7F:AE:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86C666B84C7211F18C95B3B9CE1D38B0.roa
Signing time: Sun 10 May 2026 13:17:00 +0000
ROA not before: Sun 10 May 2026 13:16:55 +0000
ROA not after: Tue 23 Jun 2026 13:16:55 +0000
asID: 215224
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117449 (0x1cac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 13:16:55 2026 GMT
Not After : Jun 23 13:16:55 2026 GMT
Subject: CN=6a00854c-9ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:38:ae:09:eb:51:75:c3:75:ad:ac:4f:5a:
ba:20:c1:0f:25:70:0a:fb:5f:31:63:64:87:40:88:
52:47:92:01:b5:01:d9:ab:8d:b8:0d:96:08:85:ef:
45:48:28:f6:c0:13:ff:77:a6:1e:eb:e6:5a:d1:e8:
d1:cf:10:e1:d8:de:d2:4a:86:38:65:6d:8b:8e:b3:
b2:0a:5f:9b:c0:9f:c5:d2:bf:38:46:5c:97:cd:38:
d4:1d:e4:af:fc:11:fa:5e:d6:6c:40:61:0c:c3:ac:
04:d2:ea:cd:a4:cf:9f:3c:ce:d8:00:1f:ed:a2:f4:
c9:99:ef:76:24:c9:8b:32:f4:16:9a:32:24:eb:e0:
b9:70:37:1c:1c:0c:78:58:22:ba:3f:be:36:38:6e:
f7:ab:bb:3a:46:cb:76:ad:9f:14:c5:80:4e:7a:d1:
c6:1f:18:3d:cb:dc:36:ff:91:dd:b4:1a:ee:86:9b:
eb:b9:b5:12:87:a9:99:ae:3f:06:0a:69:f9:bd:86:
71:8a:34:34:64:2c:d6:7f:6e:a0:42:39:3f:9e:f9:
19:f8:04:c2:46:26:0e:ae:c5:84:01:16:10:0c:82:
3e:20:84:4f:b7:49:4f:e7:08:c9:24:61:85:f1:23:
d4:be:39:34:62:d9:9a:ba:99:be:4c:f0:86:24:99:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:02:E8:57:52:F0:1D:D4:83:9A:5E:95:3E:34:3F:66:7F:AE:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86C666B84C7211F18C95B3B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ff:f9:7f:55:ed:27:64:59:67:7b:2c:ab:9f:5b:4f:47:23:
01:12:7a:2b:fc:6b:b6:c4:27:7e:89:bf:3a:2e:f5:92:d2:41:
55:23:f6:66:31:0a:12:ea:b3:e8:8e:cd:f5:80:b8:37:11:d1:
fd:35:5f:3a:62:ca:9d:ea:4e:97:eb:23:0f:92:70:2f:f8:4b:
56:7c:03:90:6e:ff:43:10:b5:36:7e:f6:4d:26:3a:0d:b1:e3:
d1:99:03:ff:ce:00:37:25:47:da:c8:97:a4:0e:0c:b7:ef:fa:
bc:fc:3d:8e:59:93:1f:fc:cd:b9:ce:0c:d7:c6:e2:af:25:a8:
8f:75:58:20:e3:fe:e7:94:92:59:58:fe:3d:04:f8:f1:aa:e4:
8b:75:e7:97:d8:c6:9d:c0:b1:8d:bd:0c:b5:35:9c:01:8b:67:
69:56:4d:d9:09:5b:a3:83:22:46:2c:11:93:3f:d7:a8:85:a9:
48:c0:5e:59:db:ac:0e:62:f4:76:9a:04:93:aa:6b:fe:31:1c:
72:62:55:a0:d2:69:83:56:ad:51:4a:5b:6e:df:b4:3e:9c:4f:
c3:b6:2b:00:6b:5e:00:54:27:27:88:22:56:ba:31:87:6d:0a:
5c:22:3f:96:23:e6:38:9d:55:5a:2c:6d:bc:b7:c8:47:dd:18:
92:25:d9:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcrJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTEwMTMxNjU1WhcNMjYwNjIzMTMxNjU1WjAYMRYw
FAYDVQQDEw02YTAwODU0Yy05Y2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApmY4rgnrUXXDda2sT1q6IMEPJXAK+18xY2SHQIhSR5IBtQHZq424DZYI
he9FSCj2wBP/d6Ye6+Za0ejRzxDh2N7SSoY4ZW2LjrOyCl+bwJ/F0r84RlyXzTjU
HeSv/BH6XtZsQGEMw6wE0urNpM+fPM7YAB/tovTJme92JMmLMvQWmjIk6+C5cDcc
HAx4WCK6P742OG73q7s6Rst2rZ8UxYBOetHGHxg9y9w2/5HdtBruhpvrubUSh6mZ
rj8GCmn5vYZxijQ0ZCzWf26gQjk/nvkZ+ATCRiYOrsWEARYQDII+IIRPt0lP5wjJ
JGGF8SPUvjk0Ytmaupm+TPCGJJkbqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIY7
AuhXUvAd1IOaXpU+ND9mf65jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NkM2NjZCODRDNzIxMUYxOEM5NUIzQjlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOGMA0GCSqGSIb3DQEB
CwUAA4IBAQC0//l/Ve0nZFlneyyrn1tPRyMBEnor/Gu2xCd+ib86LvWS0kFVI/Zm
MQoS6rPojs31gLg3EdH9NV86Ysqd6k6X6yMPknAv+EtWfAOQbv9DELU2fvZNJjoN
sePRmQP/zgA3JUfayJekDgy37/q8/D2OWZMf/M25zgzXxuKvJaiPdVgg4/7nlJJZ
WP49BPjxquSLdeeX2MadwLGNvQy1NZwBi2dpVk3ZCVujgyJGLBGTP9eohalIwF5Z
26wOYvR2mgSTqmv+MRxyYlWg0mmDVq1RSltu37Q+nE/DtisAa14AVCcniCJWujGH
bQpcIj+WI+Y4nVVaLG28t8hH3RiSJdm/
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:25 2026 by rpki-client