Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/516A3B6A76F811F1877E9D0DCF1D38B0.roa
File: 516A3B6A76F811F1877E9D0DCF1D38B0.roa (raw, json)
Hash identifier: 01vWKJa0GrpvPBYk7Oh8ded5DByPrpEbNe/6NBRcln0=
Subject key identifier: 3A:B8:C6:F5:F8:64:33:80:A9:BE:4F:F8:7C:8D:55:95:4F:E8:7A:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/516A3B6A76F811F1877E9D0DCF1D38B0.roa
Signing time: Fri 03 Jul 2026 16:00:32 +0000
ROA not before: Fri 03 Jul 2026 16:00:27 +0000
ROA not after: Mon 10 Aug 2026 16:00:27 +0000
asID: 138915
IP address blocks: 154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120524 (0x1d6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 16:00:27 2026 GMT
Not After : Aug 10 16:00:27 2026 GMT
Subject: CN=6a47dca0-1fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:91:87:37:2f:c6:53:66:9e:5f:62:88:2d:25:
6b:56:8f:83:a3:d0:7c:c8:85:62:f6:19:ab:90:84:
d1:de:7b:6b:d4:b5:2b:17:17:67:07:fa:8d:3c:7f:
16:dc:b9:7e:f7:ff:89:f0:98:01:84:87:d0:95:ca:
2f:30:0d:6e:ac:66:2c:4e:45:c9:2a:4a:28:85:6a:
6a:f2:54:1e:f6:fd:17:31:80:cd:38:37:9d:c1:80:
2c:41:30:3c:c5:f0:9f:69:34:6c:59:61:d5:7c:80:
52:f5:a9:a4:da:fe:62:1e:e7:42:b8:a3:82:7e:5c:
66:8b:d8:f1:94:40:df:2f:cf:21:4f:7f:5d:8a:db:
d9:98:69:a7:b7:28:d5:7d:3b:86:b6:01:bb:d2:1b:
e1:70:57:d7:57:5b:53:6b:89:e8:16:84:55:5a:45:
9f:67:1c:03:f8:80:f6:c3:62:b1:0e:b3:94:f5:1e:
c3:d9:15:6d:17:e2:fa:a2:ca:dd:6f:5b:25:ec:63:
a4:d4:99:81:e0:9f:81:6e:81:16:9e:55:74:50:81:
90:91:a2:83:76:3c:65:9a:5b:44:e5:3b:0c:58:fe:
5f:47:8c:fd:a7:29:ec:ed:bf:e5:45:9a:e4:ca:a1:
b3:53:75:83:57:1e:d3:eb:30:5d:26:17:a7:85:17:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:C6:F5:F8:64:33:80:A9:BE:4F:F8:7C:8D:55:95:4F:E8:7A:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/516A3B6A76F811F1877E9D0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.89.0-154.95.94.255
154.95.96.0/22
154.95.108.0/22
154.95.116.0/22
154.95.122.0/23
Signature Algorithm: sha256WithRSAEncryption
62:19:09:ed:98:26:b5:1b:28:86:44:dc:cc:3f:11:ea:ae:dd:
10:52:5e:cc:d8:5b:2f:59:36:48:60:1d:18:30:6b:83:05:b8:
ce:f2:5e:a1:c3:61:ff:c3:2b:9c:b3:84:26:e5:5c:bb:c8:20:
07:ce:5e:38:05:dc:f1:56:42:ca:e1:cd:c3:c7:f3:14:33:92:
80:b2:b6:7f:fb:e0:b0:f0:19:63:f0:8f:26:49:ff:c1:cc:c2:
2a:54:cf:22:72:24:fb:b3:a5:e8:81:b9:4d:ba:76:f1:dc:16:
20:5d:b3:90:34:7b:d4:1c:35:52:78:fc:a1:df:e0:57:00:3f:
56:f0:de:fd:0b:d0:ef:76:46:00:4f:6b:e0:bc:df:a0:17:a6:
ac:38:fc:cd:fa:41:fe:65:15:f7:63:8c:fa:84:a3:4c:c1:9e:
9f:7d:00:ba:1a:86:91:35:72:d4:b0:0b:fb:97:e9:21:c2:cf:
57:16:89:98:1a:7c:ea:f4:c8:b7:42:d3:26:01:79:a0:4b:c7:
89:34:aa:81:2c:a7:b5:95:47:3d:b0:2d:e3:bc:56:a6:e0:37:
a5:1c:7a:56:5c:cb:45:85:24:05:f9:5e:cf:ed:2a:79:45:15:
26:0d:87:99:22:a5:f0:44:87:d8:2a:96:03:7d:b3:1d:91:bc:
a7:82:33:eb
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAdbMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMTYwMDI3WhcNMjYwODEwMTYwMDI3WjAYMRYw
FAYDVQQDEw02YTQ3ZGNhMC0xZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7ZGHNy/GU2aeX2KILSVrVo+Do9B8yIVi9hmrkITR3ntr1LUrFxdnB/qN
PH8W3Ll+9/+J8JgBhIfQlcovMA1urGYsTkXJKkoohWpq8lQe9v0XMYDNODedwYAs
QTA8xfCfaTRsWWHVfIBS9amk2v5iHudCuKOCflxmi9jxlEDfL88hT39ditvZmGmn
tyjVfTuGtgG70hvhcFfXV1tTa4noFoRVWkWfZxwD+ID2w2KxDrOU9R7D2RVtF+L6
osrdb1sl7GOk1JmB4J+BboEWnlV0UIGQkaKDdjxlmltE5TsMWP5fR4z9pyns7b/l
RZrkyqGzU3WDVx7T6zBdJhenhRd+CQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFDq4
xvX4ZDOAqb5P+HyNVZVP6HpfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTZBM0I2QTc2RjgxMUYxODc3RTlEMERDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBACaX1kDBACaX14DBAKa
X2ADBAKaX2wDBAKaX3QDBAGaX3owDQYJKoZIhvcNAQELBQADggEBAGIZCe2YJrUb
KIZE3Mw/Eequ3RBSXszYWy9ZNkhgHRgwa4MFuM7yXqHDYf/DK5yzhCblXLvIIAfO
XjgF3PFWQsrhzcPH8xQzkoCytn/74LDwGWPwjyZJ/8HMwipUzyJyJPuzpeiBuU26
dvHcFiBds5A0e9QcNVJ4/KHf4FcAP1bw3v0L0O92RgBPa+C836AXpqw4/M36Qf5l
FfdjjPqEo0zBnp99ALoahpE1ctSwC/uX6SHCz1cWiZgafOr0yLdC0yYBeaBLx4k0
qoEsp7WVRz2wLeO8VqbgN6UcelZcy0WFJAX5Xs/tKnlFFSYNh5kipfBEh9gqlgN9
sx2RvKeCM+s=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:51 2026 by rpki-client