Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F036486617E11F1A4E508C9CE1D38B0.roa
File: 8F036486617E11F1A4E508C9CE1D38B0.roa (raw, json)
Hash identifier: pB/bmDo7riAZhZt34nrhoRaEYK0EFNO9OpiPjQlbtaY=
Subject key identifier: 79:2A:02:F2:5D:9D:74:89:34:BD:60:6F:82:F2:19:36:7C:45:24:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F036486617E11F1A4E508C9CE1D38B0.roa
Signing time: Sat 06 Jun 2026 08:06:02 +0000
ROA not before: Sat 06 Jun 2026 08:05:57 +0000
ROA not after: Tue 07 Jul 2026 08:05:57 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119271 (0x1d1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 08:05:57 2026 GMT
Not After : Jul 7 08:05:57 2026 GMT
Subject: CN=6a23d4ea-ac2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:85:ba:42:5d:e8:c9:c8:28:44:56:9b:8f:
08:ed:fb:1f:91:06:fd:14:2e:74:7a:c7:36:66:8d:
53:d3:ef:79:b6:32:18:08:31:04:25:5b:24:55:c6:
fe:6f:1c:ab:ad:31:e2:28:65:d4:b6:f7:9b:2f:22:
c8:8c:e7:87:82:8b:ef:fd:31:7f:13:69:11:32:ba:
d9:ed:5e:02:e6:eb:71:65:cd:44:09:78:b3:8e:fd:
df:29:53:b0:01:37:f5:fb:de:73:6f:3c:2f:cc:1e:
34:6e:d1:5e:ef:c9:1a:e3:35:25:42:c1:f8:8f:ec:
d4:4c:73:cc:61:29:bb:fa:40:55:3b:23:b1:e1:31:
be:b4:4c:7f:1f:39:96:09:e5:fb:89:80:52:e9:24:
4d:f4:48:55:2f:d2:50:fe:c2:3d:ca:c2:16:1c:82:
56:52:4b:e6:28:b2:71:50:90:37:be:be:92:e3:dc:
50:ab:9e:9b:61:37:a3:ef:15:71:ec:cb:0e:a7:7b:
c3:de:6e:fb:51:49:00:d2:a9:c8:00:89:d7:3f:94:
fc:38:3a:38:9b:de:27:40:60:43:7c:a0:54:f4:61:
50:b7:86:27:fe:12:a0:a6:a1:9c:68:c3:bc:76:e3:
c8:b1:cf:48:22:2d:6c:33:ed:13:6a:81:27:dd:cd:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:02:F2:5D:9D:74:89:34:BD:60:6F:82:F2:19:36:7C:45:24:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F036486617E11F1A4E508C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
25:64:7c:05:61:f5:18:1d:10:21:22:6e:3a:4c:db:42:11:79:
e5:90:3b:c0:44:74:cc:be:06:50:73:b7:ee:3f:a0:c0:24:a4:
4b:7a:c5:ce:bc:38:2c:0c:f9:9b:9d:43:c8:4e:5e:0c:e0:4b:
c0:6c:6f:af:8a:03:8e:fb:25:b0:70:2a:2c:d7:3c:ee:24:1d:
35:fa:34:e4:72:1e:96:6d:6b:a7:89:91:66:84:25:ad:99:da:
23:22:d8:6b:51:ff:01:46:06:09:1c:c7:8a:c0:82:93:63:5c:
e1:25:7e:d3:69:a7:76:01:e0:69:21:ba:ff:ce:a1:7f:c7:60:
ba:22:53:c7:11:d5:75:47:ed:85:04:4a:f9:16:cc:59:e0:3a:
97:52:a3:06:ce:23:61:83:7c:75:f6:b8:59:2a:f5:08:b6:7f:
da:61:69:80:a5:a1:aa:c6:4f:42:27:10:8e:6c:62:8b:02:ff:
c0:24:19:cb:1c:4a:82:40:4b:86:d3:02:28:e9:1d:ca:13:56:
b7:1a:70:c7:48:8b:1e:0d:e2:54:6c:b8:e9:9c:2f:7c:e4:26:
b8:07:7d:be:6e:39:ef:11:48:e0:3c:38:bb:4a:65:ad:f9:08:
62:3e:d7:c5:04:6e:20:59:8f:ef:fb:87:31:7c:d0:46:7e:e8:
ca:8f:23:bc
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdHnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDgwNTU3WhcNMjYwNzA3MDgwNTU3WjAYMRYw
FAYDVQQDEw02YTIzZDRlYS1hYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4BKFukJd6MnIKERWm48I7fsfkQb9FC50esc2Zo1T0+95tjIYCDEEJVsk
Vcb+bxyrrTHiKGXUtvebLyLIjOeHgovv/TF/E2kRMrrZ7V4C5utxZc1ECXizjv3f
KVOwATf1+95zbzwvzB40btFe78ka4zUlQsH4j+zUTHPMYSm7+kBVOyOx4TG+tEx/
HzmWCeX7iYBS6SRN9EhVL9JQ/sI9ysIWHIJWUkvmKLJxUJA3vr6S49xQq56bYTej
7xVx7MsOp3vD3m77UUkA0qnIAInXP5T8ODo4m94nQGBDfKBU9GFQt4Yn/hKgpqGc
aMO8duPIsc9IIi1sM+0TaoEn3c2TwQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHkq
AvJdnXSJNL1gb4LyGTZ8RSTyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RjAzNjQ4NjYxN0UxMUYxQTRFNTA4QzlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaVhADBAGaVhwwDQYJ
KoZIhvcNAQELBQADggEBACVkfAVh9RgdECEibjpM20IReeWQO8BEdMy+BlBzt+4/
oMAkpEt6xc68OCwM+ZudQ8hOXgzgS8Bsb6+KA477JbBwKizXPO4kHTX6NORyHpZt
a6eJkWaEJa2Z2iMi2GtR/wFGBgkcx4rAgpNjXOElftNpp3YB4Gkhuv/OoX/HYLoi
U8cR1XVH7YUESvkWzFngOpdSowbOI2GDfHX2uFkq9Qi2f9phaYCloarGT0InEI5s
YosC/8AkGcscSoJAS4bTAijpHcoTVrcacMdIix4N4lRsuOmcL3zkJrgHfb5uOe8R
SOA8OLtKZa35CGI+18UEbiBZj+/7hzF80EZ+6MqPI7w=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:39 2026 by rpki-client