Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D00B7A12E611F1BD308CBBDAE4EC9C.roa
File: 86D00B7A12E611F1BD308CBBDAE4EC9C.roa (raw, json)
Hash identifier: L93rtsRJwh06udN3tMWJ9AtaNKy/Bx6LrHWX9B/QfVY=
Subject key identifier: 39:DF:CB:35:6E:B4:9D:18:90:66:03:3F:E4:E9:C2:7D:16:6B:D6:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D00B7A12E611F1BD308CBBDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 07:41:14 +0000
ROA not before: Thu 26 Feb 2026 07:41:10 +0000
ROA not after: Thu 26 Mar 2026 07:41:10 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113643 (0x1bbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 07:41:10 2026 GMT
Not After : Mar 26 07:41:10 2026 GMT
Subject: CN=699ff91a-51c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:26:4c:c4:64:ad:c1:16:a1:fc:8c:38:9c:
6a:77:fc:be:b8:63:9b:15:6f:60:49:f8:3d:74:64:
24:b5:29:4c:a8:28:01:9b:e6:59:91:56:57:7d:ed:
8e:02:c7:31:85:4d:cb:06:16:83:3b:8e:1c:fc:3e:
11:83:73:7a:9e:30:3f:11:86:45:c6:a0:27:4f:90:
c6:96:0d:66:a3:45:ed:6b:b2:02:c8:3a:bd:89:ff:
39:6e:27:21:36:6e:be:e7:87:e6:7c:64:fa:cb:1e:
02:e8:f5:28:11:e5:40:bf:30:73:b2:1c:cb:97:b3:
05:d0:e8:7e:ce:db:82:3a:3a:43:49:d7:d3:d8:ab:
4d:22:93:68:44:23:5e:d5:c4:7e:3e:ad:58:3b:28:
ae:7d:18:b1:eb:56:22:2c:be:4c:a1:8f:a2:96:c8:
a6:de:1e:66:4e:48:5d:dc:3e:18:2f:3b:41:06:08:
e8:b8:c6:07:61:9c:5d:09:e3:2e:c5:05:a1:4e:62:
49:8a:20:fb:fa:5c:35:e9:b8:fd:67:43:bf:0d:2e:
8e:01:a1:44:58:f1:25:dd:4d:40:77:db:8c:0c:9f:
74:dc:2f:3c:a1:bb:97:87:4b:6b:b9:3f:83:16:30:
91:17:ec:97:63:e6:ba:ee:68:bc:b2:3e:d8:09:d5:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:CB:35:6E:B4:9D:18:90:66:03:3F:E4:E9:C2:7D:16:6B:D6:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D00B7A12E611F1BD308CBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
Signature Algorithm: sha256WithRSAEncryption
49:bb:17:e8:a1:97:52:c8:0e:98:59:61:31:6d:f1:cd:1f:d2:
13:a2:02:a8:c3:11:cf:08:e7:7a:dc:b5:83:5f:88:43:c4:7c:
7b:41:8c:52:dd:e6:46:05:01:09:e6:60:c4:4c:ab:91:bb:20:
9e:92:48:dd:99:9f:fa:8b:78:65:37:08:7a:8d:04:65:7b:1d:
5f:08:37:4c:37:97:e8:c9:65:6e:15:ad:50:93:d6:45:a2:cc:
7f:1e:e4:a3:89:b3:f2:cd:8c:0c:d1:e4:35:3b:8c:ce:e8:8b:
46:42:89:d7:4b:71:04:76:6f:bd:90:a1:af:1d:89:f2:e0:65:
18:a4:66:21:2f:62:f4:92:9f:bd:fe:f4:75:c0:71:9b:6c:43:
97:b4:a0:48:4f:3e:e0:d6:30:04:81:c6:eb:7e:3e:88:05:d4:
7e:45:98:50:1e:db:99:77:8f:a6:f7:56:fd:1f:f9:44:ea:fa:
eb:e7:31:29:75:b0:4b:63:a1:8e:90:d7:8f:2d:97:33:76:ea:
a3:7a:ac:cb:c8:61:93:93:82:c5:5d:90:8a:ed:f4:04:02:75:
c6:aa:43:f0:65:7b:e1:cd:1c:29:7c:2e:91:67:b3:0f:47:83:
5f:ac:d3:e4:2f:63:2e:07:d5:14:07:c9:f2:82:44:1c:f4:62:
cb:fc:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:52:17 2026 by rpki-client