Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3C46324D0711F196680ACDCE1D38B0.roa
File: DB3C46324D0711F196680ACDCE1D38B0.roa (raw, json)
Hash identifier: XWzQnet5JzuzRWPQGcU0rVaHxp4ZxaJ7wO+ApIe+K24=
Subject key identifier: 24:BC:43:CB:3F:D9:0B:27:30:AF:5D:09:45:83:04:2D:10:A4:DD:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3C46324D0711F196680ACDCE1D38B0.roa
Signing time: Mon 11 May 2026 07:05:57 +0000
ROA not before: Mon 11 May 2026 07:05:52 +0000
ROA not after: Mon 18 May 2026 07:05:52 +0000
asID: 137535
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117496 (0x1caf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:05:52 2026 GMT
Not After : May 18 07:05:52 2026 GMT
Subject: CN=6a017fd5-66d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:be:fb:71:38:07:c4:96:c9:d8:02:2a:00:
19:0f:49:5d:d2:0e:c9:ed:88:6f:7e:a8:f3:ab:93:
7e:f6:0c:2f:08:bd:87:bc:0e:46:58:87:a7:31:26:
ed:e2:c4:36:c6:96:92:9f:1e:b7:a2:aa:80:45:6a:
aa:8c:8d:08:10:63:fb:51:17:9c:a5:47:8d:1b:23:
10:7f:ca:f6:c8:3f:9a:c0:50:d1:6a:1e:10:6e:42:
5d:d4:d5:25:ea:6f:1a:bd:b4:70:c4:e5:f7:60:3a:
b5:3c:45:40:60:d9:d4:cd:54:02:1f:58:48:79:d0:
a5:07:37:51:74:56:50:de:a8:50:9e:f7:9e:6a:5a:
c3:8f:2b:44:86:3a:a5:6f:30:f6:fe:58:3b:06:a6:
6c:6d:92:09:da:20:ab:96:e2:88:8e:37:71:92:e6:
06:2b:04:b5:b8:ec:16:cd:76:2b:39:fc:af:be:e8:
33:da:a8:ff:fc:ee:f9:bf:16:5e:8f:c4:43:3d:25:
8e:4f:dd:f9:1b:24:03:7f:9d:d6:cf:e2:a5:40:c1:
2e:d2:8d:8f:2e:dd:83:56:ac:33:b3:c7:94:ac:6b:
3e:60:34:55:b0:d6:66:d3:47:b5:c4:e3:d5:a8:10:
65:9f:ee:27:ba:cd:9a:62:96:62:f2:75:48:ed:ac:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:43:CB:3F:D9:0B:27:30:AF:5D:09:45:83:04:2D:10:A4:DD:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3C46324D0711F196680ACDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/23
Signature Algorithm: sha256WithRSAEncryption
65:30:02:01:9f:38:bb:59:7b:f0:7d:a3:b2:cd:fd:58:c9:79:
28:83:41:8a:53:a3:b7:ec:9c:ad:78:67:1a:12:ec:04:06:f9:
b2:93:13:c9:e8:d8:0e:0c:aa:ee:f5:79:49:6a:1f:46:60:74:
40:b8:b1:fc:3b:69:00:5e:8f:66:68:7c:a9:f3:0b:61:46:0d:
aa:01:0f:59:a3:23:75:a7:d7:a6:e8:fa:c3:b0:03:bf:a9:0c:
03:db:55:c3:2c:fb:c4:fd:a6:0a:81:9e:72:e5:60:88:db:51:
13:7f:ad:a7:b3:fd:e1:ad:60:d0:a0:8c:f1:84:a2:46:9c:4d:
96:bb:e4:37:37:00:96:b2:c3:2e:45:34:dd:fe:e4:cc:5b:34:
1c:10:58:a6:93:fa:93:d8:da:26:6d:ee:49:85:0c:9d:d8:2f:
1c:3f:4e:8e:ff:9d:06:f5:67:f2:b7:91:e9:4f:9a:7f:85:65:
97:4d:77:dd:31:ee:94:82:9a:07:23:dd:2c:61:c5:e5:c4:d7:
2c:60:25:96:ff:0f:ee:ac:7a:ee:14:cb:7a:18:71:31:b8:97:
1a:69:f8:34:9b:d5:4c:0c:2e:21:cd:3a:a7:fb:c0:bb:c7:da:
54:49:6e:7f:5a:40:93:c1:70:b6:6c:36:72:de:82:73:cc:c4:
13:d6:ca:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcr4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTExMDcwNTUyWhcNMjYwNTE4MDcwNTUyWjAYMRYw
FAYDVQQDEw02YTAxN2ZkNS02NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvxG++3E4B8SWydgCKgAZD0ld0g7J7Yhvfqjzq5N+9gwvCL2HvA5GWIen
MSbt4sQ2xpaSnx63oqqARWqqjI0IEGP7URecpUeNGyMQf8r2yD+awFDRah4QbkJd
1NUl6m8avbRwxOX3YDq1PEVAYNnUzVQCH1hIedClBzdRdFZQ3qhQnveealrDjytE
hjqlbzD2/lg7BqZsbZIJ2iCrluKIjjdxkuYGKwS1uOwWzXYrOfyvvugz2qj//O75
vxZej8RDPSWOT935GyQDf53Wz+KlQMEu0o2PLt2DVqwzs8eUrGs+YDRVsNZm00e1
xOPVqBBln+4nus2aYpZi8nVI7azUNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCS8
Q8s/2QsnMK9dCUWDBC0QpN3UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjNDNDYzMjREMDcxMUYxOTY2ODBBQ0RDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQBlMAIBnzi7WXvwfaOyzf1YyXkog0GKU6O37JyteGcaEuwEBvmykxPJ
6NgODKru9XlJah9GYHRAuLH8O2kAXo9maHyp8wthRg2qAQ9ZoyN1p9em6PrDsAO/
qQwD21XDLPvE/aYKgZ5y5WCI21ETf62ns/3hrWDQoIzxhKJGnE2Wu+Q3NwCWssMu
RTTd/uTMWzQcEFimk/qT2Nombe5JhQyd2C8cP06O/50G9Wfyt5HpT5p/hWWXTXfd
Me6UgpoHI90sYcXlxNcsYCWW/w/urHruFMt6GHExuJcaafg0m9VMDC4hzTqn+8C7
x9pUSW5/WkCTwXC2bDZy3oJzzMQT1sp9
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:47 2026 by rpki-client