Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4167A4C276FE11F183CCE8B1CE1D38B0.roa
File: 4167A4C276FE11F183CCE8B1CE1D38B0.roa (raw, json)
Hash identifier: jMUh8vp5gW+/cyIfwZbcKfmOKrhDBKS14z44DHiQG1M=
Subject key identifier: 74:D2:19:DC:5F:29:E6:09:47:02:7E:0C:7C:B8:0F:D1:25:54:C3:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4167A4C276FE11F183CCE8B1CE1D38B0.roa
Signing time: Fri 03 Jul 2026 16:43:02 +0000
ROA not before: Fri 03 Jul 2026 16:42:57 +0000
ROA not after: Mon 10 Aug 2026 16:42:57 +0000
asID: 138915
IP address blocks: 154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120538 (0x1d6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 16:42:57 2026 GMT
Not After : Aug 10 16:42:57 2026 GMT
Subject: CN=6a47e696-ca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:1f:84:65:34:e8:a2:0c:e0:65:18:9f:e2:
5c:6f:7b:0c:5c:80:e9:3e:49:fc:64:32:c2:5a:d3:
fe:01:c0:23:64:3d:38:03:57:f0:28:b5:29:d7:63:
16:9a:ff:5b:4f:f6:79:c5:eb:81:fb:d6:8d:01:af:
9c:0c:ff:55:24:88:c7:2f:0e:24:b4:eb:65:6a:4c:
3e:14:b1:13:cf:2a:f4:70:60:96:6d:ae:f7:53:dd:
26:e4:ba:a4:5b:c2:77:56:63:e8:43:59:2a:d0:50:
17:e0:e0:b8:3a:ab:e5:e9:73:25:67:e4:d8:8f:70:
97:6d:67:e4:57:a3:91:98:f8:4d:f1:e9:e0:c7:32:
ff:ba:5f:59:09:99:c4:da:04:f3:0a:f8:b7:05:c2:
df:dc:5f:ec:21:ea:a4:da:c4:77:0c:f9:3a:c3:82:
9f:aa:f3:52:ac:d0:b8:b6:6d:13:f1:01:c0:6d:6a:
30:4b:3d:9e:cd:bd:8a:eb:c0:29:c6:12:c4:16:24:
2e:9e:90:cf:c9:90:7b:34:0d:f1:34:f9:fa:1e:6b:
6e:84:d7:24:a3:35:da:da:df:50:f5:8a:7b:f7:80:
e4:63:ba:a1:51:cc:f0:ab:db:a5:c2:c3:67:19:89:
3e:35:b9:b7:47:43:5b:24:2f:1e:8d:d8:1b:c2:f8:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:19:DC:5F:29:E6:09:47:02:7E:0C:7C:B8:0F:D1:25:54:C3:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4167A4C276FE11F183CCE8B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.83.0-154.95.88.255
Signature Algorithm: sha256WithRSAEncryption
a2:e0:7f:6d:80:da:65:71:34:79:c2:a1:9e:8e:13:80:f3:70:
e4:9c:dd:87:5b:8e:5b:17:22:6c:50:b4:2f:ea:ad:af:d9:71:
72:9c:53:aa:d0:bb:fd:05:d0:ff:aa:56:5d:03:35:96:e3:73:
6b:7b:23:5c:96:4a:f5:5b:79:0e:6c:68:85:98:7e:ee:e9:95:
35:bb:4f:0a:ad:a3:99:79:eb:59:2f:37:61:fd:75:5a:4d:71:
8b:d2:9f:80:60:3e:c5:68:22:05:28:3b:c7:00:be:a0:8e:30:
63:5d:6c:48:1f:0b:1d:cb:4e:84:8a:fb:6c:a5:f5:3e:ee:95:
6a:ed:55:fc:64:02:0a:d6:45:db:5e:4b:bf:db:dc:cb:69:ff:
95:77:46:a4:9f:24:2e:dd:11:2c:f3:49:92:63:07:4f:1c:fe:
44:2d:21:fc:55:6a:5c:10:4b:2b:87:8e:3b:4f:ea:5a:44:57:
50:19:27:65:f1:41:9c:66:f4:3f:0d:b4:1e:63:7a:83:ea:08:
70:10:70:a1:89:78:4e:4c:f2:ab:c1:8a:45:ca:93:89:40:11:
2c:49:a9:cd:11:6a:5a:2a:6a:04:e7:3f:57:90:6a:20:18:ed:
06:d4:99:4e:20:80:70:b5:61:ac:37:cf:ca:c0:a3:dc:5e:c9:
a3:d4:5c:29
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdbaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMTY0MjU3WhcNMjYwODEwMTY0MjU3WjAYMRYw
FAYDVQQDEw02YTQ3ZTY5Ni1jYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3HgfhGU06KIM4GUYn+Jcb3sMXIDpPkn8ZDLCWtP+AcAjZD04A1fwKLUp
12MWmv9bT/Z5xeuB+9aNAa+cDP9VJIjHLw4ktOtlakw+FLETzyr0cGCWba73U90m
5LqkW8J3VmPoQ1kq0FAX4OC4Oqvl6XMlZ+TYj3CXbWfkV6ORmPhN8engxzL/ul9Z
CZnE2gTzCvi3BcLf3F/sIeqk2sR3DPk6w4KfqvNSrNC4tm0T8QHAbWowSz2ezb2K
68ApxhLEFiQunpDPyZB7NA3xNPn6HmtuhNckozXa2t9Q9Yp794DkY7qhUczwq9ul
wsNnGYk+Nbm3R0NbJC8ejdgbwvgimwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHTS
GdxfKeYJRwJ+DHy4D9ElVMPyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MTY3QTRDMjc2RkUxMUYxODNDQ0U4QjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaX1MDBACaX1gwDQYJ
KoZIhvcNAQELBQADggEBAKLgf22A2mVxNHnCoZ6OE4DzcOSc3YdbjlsXImxQtC/q
ra/ZcXKcU6rQu/0F0P+qVl0DNZbjc2t7I1yWSvVbeQ5saIWYfu7plTW7Twqto5l5
61kvN2H9dVpNcYvSn4BgPsVoIgUoO8cAvqCOMGNdbEgfCx3LToSK+2yl9T7ulWrt
VfxkAgrWRdteS7/b3Mtp/5V3RqSfJC7dESzzSZJjB08c/kQtIfxValwQSyuHjjtP
6lpEV1AZJ2XxQZxm9D8NtB5jeoPqCHAQcKGJeE5M8qvBikXKk4lAESxJqc0Raloq
agTnP1eQaiAY7QbUmU4ggHC1Yaw3z8rAo9xeyaPUXCk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:04 2026 by rpki-client