Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96D7333C617D11F1B77A84C4CE1D38B0.roa
File: 96D7333C617D11F1B77A84C4CE1D38B0.roa (raw, json)
Hash identifier: P9w2UlgDjA18UGYdLr4npG3y0yQEdSglrugx6Z4c3vc=
Subject key identifier: B0:3C:92:49:0D:30:08:EB:E1:C0:50:93:23:F4:E0:BB:1F:9C:72:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96D7333C617D11F1B77A84C4CE1D38B0.roa
Signing time: Sat 06 Jun 2026 07:59:06 +0000
ROA not before: Sat 06 Jun 2026 07:59:01 +0000
ROA not after: Tue 07 Jul 2026 07:59:01 +0000
asID: 137535
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119269 (0x1d1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 07:59:01 2026 GMT
Not After : Jul 7 07:59:01 2026 GMT
Subject: CN=6a23d34a-1e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:3f:56:3b:5f:e0:9e:e2:a1:01:d8:1c:5f:
ba:6f:67:58:46:43:45:1e:0b:46:9c:00:4a:82:1d:
43:c0:fa:67:15:91:92:aa:02:f2:92:e8:1f:cc:66:
de:0a:71:c8:6b:02:d9:9c:98:fa:5c:4b:30:ec:c6:
3a:2e:76:8a:6f:a7:d4:b2:fd:e6:98:2f:63:64:f1:
e4:b7:b1:3b:53:87:46:af:be:81:43:c2:e5:a6:0e:
49:bc:c4:06:96:9a:12:7a:a7:80:04:4f:6a:f9:0e:
df:d3:2a:a5:df:a8:27:05:1e:76:c2:bf:b0:4f:ff:
bb:36:01:0f:23:33:80:3b:9d:f2:9b:7d:85:24:b2:
a1:c3:72:a0:99:36:20:11:dc:13:72:46:ad:92:e6:
11:c1:e3:18:b6:ea:92:4a:5f:2b:ad:29:9d:d6:50:
99:08:fd:0b:8a:c5:2c:47:70:fc:df:c5:91:d3:a1:
f2:f7:6f:f2:09:75:74:ad:84:82:17:2e:d9:08:cf:
6a:67:1c:7b:51:47:d8:82:82:9b:e2:c9:59:3a:37:
ea:28:21:bd:fd:bd:c6:66:81:7a:22:e2:fa:af:64:
25:78:23:db:ac:43:73:de:b4:10:68:64:83:be:6d:
3a:a7:e0:63:d9:6e:97:16:ca:94:3c:1e:64:bf:d5:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:92:49:0D:30:08:EB:E1:C0:50:93:23:F4:E0:BB:1F:9C:72:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96D7333C617D11F1B77A84C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:dd:64:6b:aa:44:4f:e2:a2:81:53:4f:81:46:c2:0b:f8:78:
70:1c:89:e9:ff:59:ba:ac:2d:7d:7e:ce:7b:5b:87:33:a0:e3:
9e:fa:1a:7a:32:be:57:c4:ed:4c:07:79:67:e9:60:6b:5a:d7:
40:6d:2d:c0:f1:b2:de:c4:e9:30:9f:5b:3e:cb:cb:6d:44:1f:
3b:58:09:ad:1f:1a:29:79:1f:70:e3:34:2d:e3:29:a8:72:0b:
2a:3b:50:1a:fa:39:f3:19:ee:42:2d:92:08:b8:f8:c9:df:a1:
00:1c:04:4d:39:4f:6e:1e:6a:0f:8f:16:c2:3f:8d:b3:9f:f0:
2f:9f:10:3d:8e:08:cb:6c:41:66:00:dc:4e:9d:44:67:bd:35:
0e:ff:bc:71:45:2e:ad:d9:84:91:5b:66:b7:27:c4:17:4d:50:
69:80:9d:c6:ac:2c:fd:0f:32:10:10:ea:07:1e:96:0c:e5:8f:
5a:ee:2e:9f:ea:a2:fd:c6:06:1b:d9:eb:6f:9b:23:3c:53:89:
90:73:94:4f:6f:d0:1e:e1:12:5f:2f:14:03:27:90:3b:8c:4a:
02:72:40:56:b0:71:50:1d:dd:6b:b7:f9:6a:24:9b:e2:20:23:
f2:2b:ba:99:56:74:83:f1:5e:4b:69:21:f4:86:8c:62:1a:d1:
85:40:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:01:57 2026 by rpki-client