Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2447C0B6617811F19AF13DA4CE1D38B0.roa
File: 2447C0B6617811F19AF13DA4CE1D38B0.roa (raw, json)
Hash identifier: pbdq/y2pkuQgmHRtWldDRGE3L7VwGYRgKl1hwyHJorI=
Subject key identifier: B6:81:BC:00:F1:09:8C:54:5C:B7:47:A2:A3:9D:92:E3:0C:70:54:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2447C0B6617811F19AF13DA4CE1D38B0.roa
Signing time: Sat 06 Jun 2026 07:20:06 +0000
ROA not before: Sat 06 Jun 2026 07:20:01 +0000
ROA not after: Tue 07 Jul 2026 07:20:01 +0000
asID: 153517
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/21 maxlen: 24
154.86.16.0/22 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/22 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.24.0/21 maxlen: 24
154.86.24.0/22 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.28.0/22 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119255 (0x1d1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 07:20:01 2026 GMT
Not After : Jul 7 07:20:01 2026 GMT
Subject: CN=6a23ca26-e10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:bc:ad:4a:40:5b:f4:b4:98:d1:86:2c:65:
1b:65:c9:41:7d:d7:f4:22:f8:f6:71:e6:ff:06:a4:
a9:c0:d2:00:ce:cc:1d:7e:1c:f4:91:78:0b:c5:cc:
11:04:5b:df:dc:4c:f7:86:07:c1:8d:bc:17:ff:3d:
75:e0:b2:94:cf:27:ea:b8:0e:ca:62:43:c4:29:b6:
c7:a4:6a:cb:8b:67:43:43:cc:8a:99:19:fd:3e:9e:
ba:03:51:38:77:de:46:28:98:b0:89:1a:19:ab:a0:
03:18:81:2f:de:15:ce:03:d5:29:a2:80:d6:ba:97:
7a:62:28:3d:b1:e8:cf:9f:da:38:88:8b:89:76:de:
f7:04:2a:da:79:9e:ff:b0:82:bf:d0:c7:2d:9f:25:
46:8b:fd:23:4f:2d:9e:05:4e:0c:a5:b3:de:c9:21:
3b:1b:6c:94:44:d5:3a:b9:9d:5d:7c:0d:14:ba:88:
03:a1:c7:91:09:3e:b8:1a:f1:f8:95:4e:04:b6:14:
e4:86:62:95:3e:f3:49:00:44:1a:98:da:07:59:15:
55:7e:b9:6d:2a:da:65:56:6a:fd:49:59:84:2e:90:
bb:95:43:67:74:e7:28:e3:fa:18:5d:91:e4:4b:16:
c3:01:32:cd:4a:9a:9f:87:65:67:44:6d:87:d1:d3:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:BC:00:F1:09:8C:54:5C:B7:47:A2:A3:9D:92:E3:0C:70:54:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2447C0B6617811F19AF13DA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
59:fb:26:1e:a3:84:62:8d:f2:c1:92:6f:0e:66:52:a0:4a:bf:
ae:ee:04:7a:61:c7:00:9f:21:f9:b7:f2:d7:24:9b:b1:08:14:
14:e3:af:5d:94:3f:25:57:45:18:0a:2b:04:39:cd:9c:85:10:
c4:4d:22:7d:4a:71:86:81:ec:cd:50:66:a6:b6:b3:5c:cb:7c:
aa:78:e9:8b:82:82:76:9c:7b:a8:bd:49:fb:25:ee:6b:fa:3b:
c9:47:5e:6b:c4:3e:d9:d0:b9:21:30:58:8f:93:9c:a2:0c:5c:
ed:64:23:cd:dc:e7:2c:95:48:12:81:60:43:78:84:b8:26:fb:
8a:bf:1c:af:fe:0b:a8:22:3b:47:78:4b:b6:ca:02:41:f1:2c:
2a:a0:79:d6:df:d9:94:53:44:f4:bb:97:26:2f:be:07:ba:44:
0f:55:11:64:8d:74:d6:c4:2c:34:d8:e4:d0:4b:69:b5:aa:82:
16:53:40:8a:7e:c9:fd:01:48:32:01:b7:a3:15:61:98:21:51:
c5:e9:0f:a2:8b:34:8e:d0:36:94:6a:6d:83:ff:4d:b4:e2:72:
f0:ea:5c:ef:2e:3c:76:38:f1:08:9a:73:e2:5f:bc:d7:c5:62:
43:f8:1d:9e:c2:14:81:44:11:1a:1f:5e:d0:b9:63:5d:4b:85:
38:d2:03:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdHXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDcyMDAxWhcNMjYwNzA3MDcyMDAxWjAYMRYw
FAYDVQQDEw02YTIzY2EyNi1lMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx368rUpAW/S0mNGGLGUbZclBfdf0Ivj2ceb/BqSpwNIAzswdfhz0kXgL
xcwRBFvf3Ez3hgfBjbwX/z114LKUzyfquA7KYkPEKbbHpGrLi2dDQ8yKmRn9Pp66
A1E4d95GKJiwiRoZq6ADGIEv3hXOA9UpooDWupd6Yig9sejPn9o4iIuJdt73BCra
eZ7/sIK/0MctnyVGi/0jTy2eBU4MpbPeySE7G2yURNU6uZ1dfA0UuogDoceRCT64
GvH4lU4EthTkhmKVPvNJAEQamNoHWRVVfrltKtplVmr9SVmELpC7lUNndOco4/oY
XZHkSxbDATLNSpqfh2VnRG2H0dNaUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLaB
vADxCYxUXLdHoqOdkuMMcFSXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNDQ3QzBCNjYxNzgxMUYxOUFGMTNEQTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ+yYeo4RijfLBkm8OZlKgSr+u7gR6YccAnyH5t/LXJJuxCBQU469d
lD8lV0UYCisEOc2chRDETSJ9SnGGgezNUGamtrNcy3yqeOmLgoJ2nHuovUn7Je5r
+jvJR15rxD7Z0LkhMFiPk5yiDFztZCPN3OcslUgSgWBDeIS4JvuKvxyv/guoIjtH
eEu2ygJB8SwqoHnW39mUU0T0u5cmL74HukQPVRFkjXTWxCw02OTQS2m1qoIWU0CK
fsn9AUgyAbejFWGYIVHF6Q+iizSO0DaUam2D/0204nLw6lzvLjx2OPEImnPiX7zX
xWJD+B2ewhSBRBEaH17QuWNdS4U40gNk
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:19 2026 by rpki-client