Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E3658A2EAE11F1A52200B7DAE4EC9C.roa
File: F7E3658A2EAE11F1A52200B7DAE4EC9C.roa (raw, json)
Hash identifier: /zsK+oKIV2dJIDsyv56dL1emeXvZF3gf+1jH2HdGAuA=
Subject key identifier: 72:EC:09:24:41:65:01:8F:A8:82:E6:C6:8B:9B:76:92:46:FF:EA:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C26D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E3658A2EAE11F1A52200B7DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 16:14:05 +0000
ROA not before: Thu 02 Apr 2026 16:13:58 +0000
ROA not after: Sun 10 May 2026 16:13:58 +0000
asID: 140666
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
154.95.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115309 (0x1c26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 16:13:58 2026 GMT
Not After : May 10 16:13:58 2026 GMT
Subject: CN=69ce95cd-6d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:25:40:2c:ad:74:64:c7:da:6c:8d:70:0e:
d1:4b:29:24:0f:74:c5:3b:d2:8a:f1:a4:0d:90:27:
e6:8b:89:c2:6a:f6:c0:ff:38:bd:7d:e9:05:0b:31:
ac:27:a9:2f:b8:1a:39:64:d9:eb:58:88:76:62:a9:
05:6b:1a:f1:ec:ee:50:af:7b:e6:d3:83:34:61:81:
c2:0b:15:14:b7:40:19:71:62:15:60:90:89:cd:c9:
58:12:3e:fb:9b:1b:43:a3:35:b2:d9:d3:e7:dc:20:
43:70:69:ed:85:8e:ba:80:e4:9e:a4:3d:41:0c:8e:
d6:87:e8:ad:bc:06:3e:a9:3b:22:f5:69:22:f2:f1:
a5:2c:0d:40:bc:e5:68:33:cf:50:c1:a1:e7:14:f1:
4e:d2:44:01:8a:11:c8:b6:1b:b2:ab:2b:1e:b6:51:
4a:64:cd:29:e2:3d:4a:94:f9:1f:a4:1f:bb:2a:5f:
64:01:1a:0b:01:0b:8c:c0:53:34:c6:f9:10:8e:48:
a0:ab:77:a1:8f:8f:ab:9d:52:22:4f:73:65:2f:e5:
38:7e:08:bd:5b:f1:64:4c:47:1d:e1:58:6f:97:01:
ed:2f:4f:af:f3:b8:e3:20:a0:58:41:d1:15:fe:e6:
cd:96:8d:96:b2:57:b6:1e:d1:32:ed:a4:26:94:82:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:09:24:41:65:01:8F:A8:82:E6:C6:8B:9B:76:92:46:FF:EA:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E3658A2EAE11F1A52200B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
154.95.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ab:b7:cc:2d:d2:9f:5b:e4:c8:2a:41:93:8d:72:ce:ac:13:
16:c9:8a:6b:be:e0:86:79:5a:34:72:99:76:a2:61:e5:70:ed:
c5:24:06:d4:3f:f6:8d:9d:da:85:73:72:c9:b3:9e:ab:ba:8e:
92:9c:98:12:26:c3:39:95:f4:68:4a:dc:e2:98:f4:72:9f:c3:
a9:49:3a:b1:1d:45:94:d2:e9:14:ae:39:ee:90:ce:fb:54:a4:
b9:25:8a:27:4a:ba:2a:2b:d5:a2:b5:04:e4:af:bc:f2:3f:27:
e6:7c:11:f1:2b:6a:10:fb:7f:04:80:cf:91:b8:2f:b9:2f:6f:
8f:1e:1b:16:59:40:eb:dc:e1:f5:0f:eb:58:62:12:fd:09:76:
3f:64:36:fe:cd:66:6a:c8:88:d5:19:c2:89:c5:5e:d3:9d:74:
ad:65:b6:4e:35:81:82:60:60:ad:d8:5c:54:f4:0f:44:c8:1b:
c1:e9:86:10:5f:41:2a:74:c1:2b:2f:0a:7c:72:38:76:96:9a:
ba:ba:f9:41:be:cc:43:3b:0b:07:7f:fe:b9:c4:22:dd:48:f4:
96:b9:64:c4:f9:f2:f2:24:40:be:21:16:4c:bf:6b:c7:4e:3d:
c1:06:71:07:d7:27:37:1d:ae:64:d3:5f:de:fc:ed:26:e3:3f:
c0:fc:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:18:44 2026 by rpki-client