Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A40CD5E4A6F11F1AB8506EDCE1D38B0.roa
File: 0A40CD5E4A6F11F1AB8506EDCE1D38B0.roa (raw, json)
Hash identifier: Qyy2mg6nLQ6peAFE0fGJCmA/R05BnLGlbhsEg8PWlvk=
Subject key identifier: BC:FF:9E:03:9D:76:2E:F8:76:1C:01:BB:FC:50:00:71:11:91:73:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A40CD5E4A6F11F1AB8506EDCE1D38B0.roa
Signing time: Thu 07 May 2026 23:47:00 +0000
ROA not before: Thu 07 May 2026 23:46:55 +0000
ROA not after: Mon 07 May 2029 23:46:55 +0000
asID: 17561
IP address blocks: 154.95.211.0/24 maxlen: 24
154.95.212.0/24 maxlen: 24
154.95.213.0/24 maxlen: 24
154.95.214.0/24 maxlen: 24
154.95.215.0/24 maxlen: 24
154.95.216.0/24 maxlen: 24
154.95.217.0/24 maxlen: 24
154.95.218.0/24 maxlen: 24
154.95.219.0/24 maxlen: 24
154.95.220.0/24 maxlen: 24
154.95.221.0/24 maxlen: 24
154.95.222.0/24 maxlen: 24
154.95.223.0/24 maxlen: 24
154.95.224.0/24 maxlen: 24
154.95.225.0/24 maxlen: 24
154.95.226.0/24 maxlen: 24
154.95.227.0/24 maxlen: 24
154.95.228.0/24 maxlen: 24
154.95.229.0/24 maxlen: 24
154.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117246 (0x1c9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 23:46:55 2026 GMT
Not After : May 7 23:46:55 2029 GMT
Subject: CN=69fd2474-ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:a3:47:8c:cb:c9:23:4c:2b:a2:66:37:49:
f8:5a:1f:ac:ba:45:6f:5b:d4:e5:28:5a:76:ec:89:
c2:16:36:08:b5:03:7d:36:5c:88:fe:df:91:f4:7f:
b6:e5:76:55:d3:78:2d:7a:6d:84:1f:d8:de:c6:ab:
24:aa:96:be:6b:03:66:09:de:7d:f5:cd:90:c2:d5:
fc:41:92:04:b9:90:82:58:1e:8b:b8:9b:d6:66:02:
22:65:50:c2:04:6e:02:49:d1:88:b4:1d:dd:b4:f8:
4e:dd:3d:c7:6c:f1:86:5b:a8:00:a1:33:47:2f:c6:
75:45:03:95:62:08:05:b9:99:ba:20:c3:0e:14:05:
8b:3a:dd:de:eb:12:d8:35:72:36:85:18:a7:c7:ec:
5b:3e:0e:95:b0:5a:8a:27:4e:88:5d:4e:38:88:fb:
80:ea:77:ae:4b:6d:78:61:b2:3a:43:09:26:83:7b:
2c:9d:90:a8:0b:1d:30:cc:37:0e:b0:06:05:4f:6a:
51:81:17:c1:44:2c:33:31:a6:45:31:85:7f:36:57:
7c:11:e2:50:cd:6f:95:5c:e2:3b:6b:95:01:1d:86:
f8:89:1d:da:37:78:9c:0a:ab:2a:e4:b0:bc:de:01:
f5:83:9d:55:20:cc:80:70:a7:70:2b:5a:a0:dc:88:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:9E:03:9D:76:2E:F8:76:1C:01:BB:FC:50:00:71:11:91:73:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A40CD5E4A6F11F1AB8506EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.211.0-154.95.230.255
Signature Algorithm: sha256WithRSAEncryption
07:10:f2:28:b0:81:cd:b2:1a:66:20:f7:46:fa:3f:6e:34:37:
58:48:08:91:b0:0b:2f:68:b9:9b:bd:8b:7c:3d:bf:8c:78:61:
91:13:4c:97:80:6c:44:1e:4e:67:18:a4:95:aa:ea:6e:23:6b:
b5:1d:99:e6:5b:5d:93:25:9c:62:da:22:2c:a5:68:39:10:97:
15:b8:f2:7f:7b:53:8d:51:76:38:ee:ce:80:40:15:9d:76:f5:
c1:e1:e2:68:a7:5d:6a:08:1f:aa:41:9b:dc:dd:91:ad:f0:30:
75:e0:d8:42:53:a6:c3:9c:8b:5e:3c:8f:2f:3f:94:09:f3:86:
47:cb:48:62:8b:eb:fa:82:ed:00:8f:c1:99:70:63:34:ba:a6:
24:6b:78:ef:34:bb:3f:d8:8b:25:50:1e:b9:0e:86:eb:51:75:
35:71:f3:29:5c:2a:3d:bb:38:f0:f5:a0:93:35:f0:a9:79:6d:
84:bc:99:a2:85:76:50:c9:e7:87:31:0c:12:57:09:29:86:77:
2f:2b:83:8d:8c:28:c8:40:a2:00:7c:1b:de:86:00:53:0d:d8:
dd:4f:d1:e5:5a:1c:5b:14:c6:df:dc:ba:3f:64:c2:f3:b6:9b:
37:4a:fe:a9:e9:da:98:7d:10:11:d8:7f:a6:80:05:5d:2d:5a:
05:43:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:44 2026 by rpki-client