Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86932F0C54E011F18895CE05CF1D38B0.roa
File: 86932F0C54E011F18895CE05CF1D38B0.roa (raw, json)
Hash identifier: qkIAbCSLO6Dy11v8BpNXDUEoLQfhXW76seGgF7nFiPw=
Subject key identifier: 68:CA:F0:8B:3D:8F:35:8F:43:B8:38:1E:CB:FA:AE:F0:A9:D7:F7:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86932F0C54E011F18895CE05CF1D38B0.roa
Signing time: Thu 21 May 2026 06:44:34 +0000
ROA not before: Thu 21 May 2026 06:44:29 +0000
ROA not after: Wed 19 May 2027 06:44:29 +0000
asID: 328608
IP address blocks: 154.200.217.0/24 maxlen: 24
154.200.218.0/24 maxlen: 24
154.200.219.0/24 maxlen: 24
154.200.220.0/24 maxlen: 24
154.200.221.0/24 maxlen: 24
154.200.222.0/24 maxlen: 24
154.200.223.0/24 maxlen: 24
154.200.224.0/24 maxlen: 24
154.200.225.0/24 maxlen: 24
154.200.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118072 (0x1cd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 06:44:29 2026 GMT
Not After : May 19 06:44:29 2027 GMT
Subject: CN=6a0ea9d1-cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:ab:c8:49:f5:37:64:2a:6a:78:28:41:7a:
11:0e:6a:c6:0b:3a:11:05:f9:2c:e5:f6:09:94:df:
30:f5:38:0f:7a:8f:e0:1b:d6:0a:10:2f:30:b7:df:
af:92:81:a5:90:8d:b2:af:45:81:17:49:d9:b9:aa:
8f:71:2f:9a:4f:39:1f:bc:d9:75:64:01:f8:e9:09:
fc:98:83:4c:cf:2a:13:59:9a:51:5b:cc:b5:ab:8b:
41:8c:23:42:96:d1:42:c8:8c:0c:a5:97:02:b9:e4:
e0:3f:89:66:a2:4e:58:9e:d5:6d:e7:53:70:96:94:
53:63:3c:56:3c:30:6a:9f:f1:2b:92:5b:6a:ba:3b:
65:27:66:00:f6:ec:fd:c9:31:3d:00:47:52:aa:0a:
78:48:ca:7c:e0:bd:40:af:b6:53:33:68:76:4c:a5:
8a:ab:e0:bd:83:4f:6c:41:c1:ac:e2:dc:cb:91:b1:
81:9c:84:c3:82:ce:23:52:0f:37:20:3f:62:73:c4:
5b:6d:e1:e7:ae:4a:12:dc:23:56:67:ec:8c:38:ab:
ac:53:1e:ab:79:aa:48:46:04:e7:47:79:5b:1f:88:
4e:0b:5f:51:78:30:f8:42:38:06:ee:d1:60:9a:20:
16:c9:5a:6f:40:74:b6:f7:ef:cb:ac:e9:68:fe:81:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:F0:8B:3D:8F:35:8F:43:B8:38:1E:CB:FA:AE:F0:A9:D7:F7:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86932F0C54E011F18895CE05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.217.0-154.200.226.255
Signature Algorithm: sha256WithRSAEncryption
02:ec:99:9f:27:48:a6:31:e3:cb:48:62:89:0c:38:b9:25:44:
de:92:5e:59:7d:e6:20:36:5b:df:cd:90:4c:b0:55:09:16:40:
52:11:6a:a0:56:e0:b1:f3:0b:51:87:e3:90:3a:5d:65:37:92:
9d:20:eb:b5:c1:96:1e:9f:cb:6d:02:5f:13:47:20:bf:04:36:
08:32:5b:2e:28:57:d6:81:c7:41:be:9f:c7:78:51:02:33:1c:
46:2e:4f:e0:e2:ab:5c:a0:3c:23:e8:e7:db:0f:f4:36:ae:20:
13:03:ad:e4:9d:90:66:e9:02:23:5d:c6:c5:46:e9:02:8c:d3:
b7:22:44:4e:12:64:10:c2:28:cf:a8:b4:b3:c1:2b:dd:34:30:
5b:6d:62:0d:57:6f:ac:f4:e6:8e:bd:9c:59:02:fd:0c:8c:95:
c8:99:fe:5d:34:99:4b:15:4e:5c:2e:c7:5a:92:7d:08:50:d6:
03:89:ec:a5:2f:b2:60:1b:3c:e9:77:5d:d3:7f:2a:c0:7f:44:
e8:2b:b5:de:84:f8:94:7e:11:e8:4b:27:b8:d4:ff:d2:97:f2:
63:31:e2:2a:3d:78:83:38:10:b5:97:b1:8f:51:a7:5c:33:04:
5f:e4:29:e8:c8:9f:1e:41:fa:65:78:d3:37:8f:20:b1:0d:ec:
2d:38:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:59 2026 by rpki-client