Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8827FB70617B11F191F775B8CE1D38B0.roa
File: 8827FB70617B11F191F775B8CE1D38B0.roa (raw, json)
Hash identifier: Rz7UPJAiC51A7v5peTinRkOuMZRmp03TLSMlm45U6yM=
Subject key identifier: 0A:08:B6:51:4F:43:3C:B8:C0:42:D6:AC:C5:97:58:22:93:82:A6:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8827FB70617B11F191F775B8CE1D38B0.roa
Signing time: Sat 06 Jun 2026 07:44:22 +0000
ROA not before: Sat 06 Jun 2026 07:44:17 +0000
ROA not after: Tue 07 Jul 2026 07:44:17 +0000
asID: 140227
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119263 (0x1d1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 07:44:17 2026 GMT
Not After : Jul 7 07:44:17 2026 GMT
Subject: CN=6a23cfd6-f655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bc:6b:81:9e:28:42:d0:a9:fa:88:d1:e7:43:
53:43:e4:62:a4:14:eb:69:89:10:6a:d5:48:34:52:
ac:63:29:ca:46:a2:ac:7d:79:74:ce:bd:f9:46:d1:
91:52:ca:84:72:ea:7d:b3:8c:b7:ab:dd:ff:2b:ff:
41:64:97:ca:29:18:d5:61:40:e6:9c:08:a6:66:a0:
38:aa:b3:ef:a4:1e:f7:b8:7b:c3:ee:d7:7d:f3:bd:
06:d9:b6:2f:64:3d:56:ea:d1:36:9f:3d:07:78:69:
a0:71:24:03:49:7a:91:c5:aa:08:13:42:8d:1d:90:
3d:35:4a:36:f7:1b:a9:8c:b7:cd:86:ba:92:8f:74:
10:b0:1a:b2:c5:d9:bf:08:3a:c2:d5:81:11:a1:77:
04:fb:a5:64:5b:fe:62:82:26:34:74:5b:bf:44:05:
3e:c4:93:ac:ba:3c:c3:85:4b:36:c2:f2:ad:01:75:
39:86:38:5e:ef:c4:65:4a:eb:d2:63:16:ca:46:c9:
66:fa:61:36:e4:e6:69:ab:fc:00:d7:b4:3e:f4:b0:
46:da:55:28:90:38:66:41:86:ea:81:0b:6e:ef:7a:
bb:6c:84:4c:5e:a9:4c:0b:94:ff:34:e8:32:0c:ac:
9b:45:1e:73:72:14:41:c8:61:b3:ed:38:82:18:1d:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:B6:51:4F:43:3C:B8:C0:42:D6:AC:C5:97:58:22:93:82:A6:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8827FB70617B11F191F775B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.20.255
Signature Algorithm: sha256WithRSAEncryption
5a:13:7e:a9:77:3c:0c:5e:1b:ef:25:30:75:af:10:b1:94:15:
2f:c1:f8:8a:7e:24:cc:ad:a2:5d:97:40:36:1b:f6:c3:45:ae:
ce:45:ed:4b:f5:db:e7:76:5b:8d:a8:af:27:e6:69:0b:34:f5:
3f:2d:8b:5b:a1:91:46:c5:bf:42:4d:27:0f:0f:d1:39:ce:2e:
90:df:15:4a:bb:fc:7b:bf:06:6c:60:4a:48:ca:7c:39:7f:0c:
d8:c6:3e:ab:a7:a6:25:6a:28:63:6d:18:af:83:e4:33:9d:2e:
d9:02:2c:b5:de:8b:d2:a2:9d:e7:e8:88:ea:39:b3:0e:a9:55:
3b:96:1a:34:9b:61:33:61:ed:94:4a:7e:8b:13:43:ea:1c:3b:
56:82:bb:f7:79:f2:45:59:fd:43:b7:69:bb:e3:fa:e4:90:24:
1e:8d:4e:16:b2:80:ee:1b:a7:9c:18:74:4a:7d:c0:a0:f6:c7:
72:c5:14:b5:4d:02:a9:5d:93:52:f4:55:d1:d9:03:27:37:c1:
3c:5d:d4:88:4c:f3:a2:f9:73:62:cb:4d:ca:b2:6b:78:9f:3a:
1f:98:ae:bc:26:4d:de:aa:a8:8b:6f:ea:5d:08:d6:a8:02:4d:
2b:c4:43:fe:b0:c2:2e:ef:87:cd:70:a9:6b:d7:45:b2:e9:32:
07:07:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:02:18 2026 by rpki-client