Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BDE9F6617A11F183014BB4CE1D38B0.roa
File: C4BDE9F6617A11F183014BB4CE1D38B0.roa (raw, json)
Hash identifier: DK1elAvDdZlrASVvPyt2pLi0eJVG+7EVkoDFIEsuvog=
Subject key identifier: E5:C6:E1:D3:62:D4:67:C3:A4:49:BF:20:92:27:0B:C5:02:DB:D2:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BDE9F6617A11F183014BB4CE1D38B0.roa
Signing time: Sat 06 Jun 2026 07:38:54 +0000
ROA not before: Sat 06 Jun 2026 07:38:49 +0000
ROA not after: Tue 07 Jul 2026 07:38:49 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119261 (0x1d1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 07:38:49 2026 GMT
Not After : Jul 7 07:38:49 2026 GMT
Subject: CN=6a23ce8e-9e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:d8:73:b1:e3:cc:6c:b2:15:53:ee:dc:a8:
35:bb:8a:9e:e8:82:16:92:97:1b:e4:36:99:7f:33:
4a:32:fe:99:1d:d1:f1:15:7d:84:cc:1d:ae:0a:09:
d2:e3:9e:5b:00:56:d5:34:e4:c6:30:54:0c:52:7b:
61:3b:d8:cf:b6:cc:73:58:7e:51:93:16:96:72:9b:
0d:c2:12:6c:b5:57:78:fb:81:7b:40:b2:cb:c5:e3:
b0:69:75:5c:06:41:90:f9:01:db:2f:a4:5d:1e:61:
f3:1e:c4:bf:42:05:34:cd:3c:27:1f:d4:45:24:24:
60:7f:df:b5:c6:0a:7b:82:5c:1a:23:cb:23:66:94:
cb:32:8f:c0:44:4b:a9:53:39:4a:6c:dc:72:7a:65:
76:00:ad:e5:60:62:f5:ec:ae:ff:8f:1b:95:8c:fb:
f8:cc:8d:c8:61:19:3e:64:40:07:80:0b:d8:9c:53:
06:23:61:d7:0c:b4:60:40:c3:41:db:aa:f8:55:61:
82:24:4a:6f:3c:f4:15:aa:88:26:0b:05:1b:de:7d:
27:0b:94:8a:5b:67:b3:73:89:aa:b5:70:f3:e7:78:
48:88:f5:69:f2:fb:cf:52:be:fd:06:d2:a7:d9:77:
53:a5:4d:85:f3:24:c0:37:36:bd:59:4f:c2:ee:0e:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:E1:D3:62:D4:67:C3:A4:49:BF:20:92:27:0B:C5:02:DB:D2:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BDE9F6617A11F183014BB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
51:ab:8d:bf:99:c6:a4:4b:f5:57:47:f4:c7:98:af:a7:30:1b:
0c:b0:7b:5c:ce:f0:6d:23:1a:38:81:5d:91:f1:d9:a7:fb:34:
fe:04:8b:26:8f:93:bd:86:30:2b:6c:87:12:37:94:8c:e7:c7:
ba:c6:22:87:bb:16:ab:a7:5e:37:82:8b:65:1d:06:3a:13:ea:
1e:b2:00:e5:84:07:b4:fc:04:a9:b2:f9:c7:41:12:d8:7a:94:
db:c2:0b:b6:2a:fe:67:29:76:b2:49:e9:54:82:d5:fc:8a:73:
45:3f:15:ac:6c:ca:ef:f5:e5:14:01:cf:ee:56:8e:66:51:9c:
cb:ea:eb:9f:6a:bb:e5:9c:6c:93:e4:62:41:fc:25:32:61:fa:
b3:26:fe:24:47:5d:0f:b5:00:9b:eb:f3:9b:00:ba:c1:e2:8e:
ba:0c:68:f2:01:6d:3d:1f:1f:e0:fb:bc:0f:63:e4:88:46:bd:
13:10:c4:e2:72:5a:56:f3:36:56:15:d1:a7:08:4a:26:9e:79:
ca:c9:d8:c9:84:45:1e:22:e5:66:29:72:ed:16:9c:be:8f:1f:
69:7d:a7:46:fb:65:64:a2:7b:23:0a:4c:b7:79:68:df:77:a0:
37:5d:97:b3:cf:c7:ad:c8:24:a9:f1:29:04:da:c3:41:61:c7:
07:c0:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:20 2026 by rpki-client