Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0FB05922ED211F1B0C24883DAE4EC9C.roa
File: A0FB05922ED211F1B0C24883DAE4EC9C.roa (raw, json)
Hash identifier: ruWFrYP7bDjqbGFrIbgO8lGUPH3jObRk2NygiQUTGcc=
Subject key identifier: 13:32:0C:12:67:D5:24:BB:BD:29:9D:F4:A0:10:F6:4E:FB:F0:49:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C285
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0FB05922ED211F1B0C24883DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 20:29:21 +0000
ROA not before: Thu 02 Apr 2026 20:29:16 +0000
ROA not after: Sun 10 May 2026 20:29:16 +0000
asID: 63139
IP address blocks: 154.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115333 (0x1c285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 20:29:16 2026 GMT
Not After : May 10 20:29:16 2026 GMT
Subject: CN=69ced1a1-beaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:06:cf:3e:93:77:3c:a1:87:63:fd:c7:68:
0d:b4:46:1c:b9:91:00:5d:c1:ad:98:3d:4b:8c:e7:
63:2f:62:fd:5d:06:35:33:2b:bb:d4:a4:62:99:d1:
64:ff:8a:80:81:a4:c7:0f:33:22:47:28:e7:cb:4b:
bb:e3:9a:ef:61:55:02:7a:77:54:85:fd:5a:ea:f9:
2a:20:89:cc:10:65:9d:e9:d6:43:01:66:e2:72:3f:
b2:72:0c:a5:6e:d2:2e:73:c9:5b:7d:4f:99:a3:21:
09:73:45:cc:f7:1e:85:c8:be:3c:0e:50:8a:b5:26:
4b:79:75:b0:4e:e6:43:6e:67:4e:03:83:40:7c:e4:
d0:22:c1:4d:6c:9a:8f:f4:b0:05:ed:78:7a:cc:c4:
3a:a5:a2:31:d8:4d:66:da:78:00:32:1a:e7:d4:f6:
51:5c:4a:3f:fe:9a:de:73:ea:0a:c3:ba:86:03:b4:
73:28:55:31:7e:a6:1c:6f:0d:35:3c:e9:c9:c3:e9:
2b:b5:23:ad:0a:1c:18:ae:73:6f:88:77:fa:3c:d4:
88:1e:ec:8f:4a:a7:d7:34:90:f3:6a:94:18:80:cb:
c5:f5:80:53:10:01:c6:76:07:67:40:28:59:96:1b:
10:89:9f:fc:5a:a2:d7:51:d0:05:4b:80:ab:0e:ee:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:0C:12:67:D5:24:BB:BD:29:9D:F4:A0:10:F6:4E:FB:F0:49:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0FB05922ED211F1B0C24883DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8c:a2:91:c4:d7:8b:db:2e:cd:22:e9:ec:2b:d0:bd:e4:dd:
ea:db:aa:88:a7:c1:03:9c:d3:b5:ec:25:2d:6f:0d:83:a9:ae:
e0:53:8c:01:c3:7d:e9:0d:46:eb:95:66:44:b8:65:e6:57:d5:
53:51:88:ed:6d:22:c6:d9:88:a4:f6:2b:50:ce:89:d6:af:77:
98:a0:b6:09:85:55:4d:eb:c9:f7:fc:e5:7a:f3:dc:a7:17:b7:
bd:fa:47:2c:cd:23:e9:c0:37:0f:8d:ef:74:67:0c:bd:01:3f:
4e:ff:3d:72:7a:ad:7d:69:30:76:8c:18:d5:69:4f:87:40:6d:
4e:57:d0:d9:f8:ba:bb:13:51:39:b9:f8:d2:6d:7e:91:89:1b:
a1:58:16:19:45:77:af:c8:4e:bf:e8:99:25:a9:25:04:e2:47:
aa:70:5e:64:f3:97:f6:56:41:b6:56:8a:cc:0c:5a:e1:42:1e:
11:e4:e6:fe:48:c8:21:58:8f:23:f7:ce:db:84:2c:3e:b1:c7:
8d:a2:e2:d0:eb:e0:ad:66:61:ba:7f:70:a5:d3:b6:dc:7e:d4:
3a:01:6b:e8:12:d0:ce:87:9b:78:da:71:04:15:99:c4:8a:8f:
cc:46:dc:56:d3:4c:4e:86:b5:b6:7a:ae:e4:8f:e0:26:00:10:
ce:8c:e7:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcKFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDAyMjAyOTE2WhcNMjYwNTEwMjAyOTE2WjAYMRYw
FAYDVQQDEw02OWNlZDFhMS1iZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqaYGzz6Tdzyhh2P9x2gNtEYcuZEAXcGtmD1LjOdjL2L9XQY1Myu71KRi
mdFk/4qAgaTHDzMiRyjny0u745rvYVUCendUhf1a6vkqIInMEGWd6dZDAWbicj+y
cgylbtIuc8lbfU+ZoyEJc0XM9x6FyL48DlCKtSZLeXWwTuZDbmdOA4NAfOTQIsFN
bJqP9LAF7Xh6zMQ6paIx2E1m2ngAMhrn1PZRXEo//prec+oKw7qGA7RzKFUxfqYc
bw01POnJw+krtSOtChwYrnNviHf6PNSIHuyPSqfXNJDzapQYgMvF9YBTEAHGdgdn
QChZlhsQiZ/8WqLXUdAFS4CrDu6ejQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBMy
DBJn1SS7vSmd9KAQ9k778Ek/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMEZCMDU5MjJFRDIxMUYxQjBDMjQ4ODNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml9fMA0GCSqGSIb3DQEB
CwUAA4IBAQBsjKKRxNeL2y7NIunsK9C95N3q26qIp8EDnNO17CUtbw2Dqa7gU4wB
w33pDUbrlWZEuGXmV9VTUYjtbSLG2Yik9itQzonWr3eYoLYJhVVN68n3/OV689yn
F7e9+kcszSPpwDcPje90Zwy9AT9O/z1yeq19aTB2jBjVaU+HQG1OV9DZ+Lq7E1E5
ufjSbX6RiRuhWBYZRXevyE6/6JklqSUE4keqcF5k85f2VkG2VorMDFrhQh4R5Ob+
SMghWI8j987bhCw+sceNouLQ6+CtZmG6f3Cl07bcftQ6AWvoEtDOh5t42nEEFZnE
io/MRtxW00xOhrW2eq7kj+AmABDOjOev
-----END CERTIFICATE-----
Generated at Mon Apr 6 02:18:45 2026 by rpki-client