Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B39F1D049E411F1B40E6EB3CE1D38B0.roa
File: 0B39F1D049E411F1B40E6EB3CE1D38B0.roa (raw, json)
Hash identifier: 90qNsJ1GBK+9pXV4ulbfkc+vJapFuS9egMwRPIHBbGU=
Subject key identifier: D4:25:F0:42:94:FD:56:E7:24:80:10:9C:93:90:00:B4:42:D4:1B:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B39F1D049E411F1B40E6EB3CE1D38B0.roa
Signing time: Thu 07 May 2026 07:12:02 +0000
ROA not before: Thu 07 May 2026 07:11:57 +0000
ROA not after: Mon 07 May 2029 07:11:57 +0000
asID: 17561
IP address blocks: 154.95.0.0/24 maxlen: 24
154.95.1.0/24 maxlen: 24
154.95.4.0/24 maxlen: 24
154.95.5.0/24 maxlen: 24
154.95.10.0/24 maxlen: 24
154.95.11.0/24 maxlen: 24
154.95.12.0/24 maxlen: 24
154.95.13.0/24 maxlen: 24
154.95.14.0/24 maxlen: 24
154.95.15.0/24 maxlen: 24
154.95.16.0/24 maxlen: 24
154.95.17.0/24 maxlen: 24
154.95.18.0/24 maxlen: 24
154.95.19.0/24 maxlen: 24
154.95.20.0/24 maxlen: 24
154.95.21.0/24 maxlen: 24
154.95.22.0/24 maxlen: 24
154.95.23.0/24 maxlen: 24
154.95.25.0/24 maxlen: 24
154.95.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117182 (0x1c9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 07:11:57 2026 GMT
Not After : May 7 07:11:57 2029 GMT
Subject: CN=69fc3b42-baf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:d1:bd:7a:f2:30:e5:9a:97:a2:40:57:aa:
5b:25:a9:3d:5a:86:b9:a6:60:8d:b1:49:33:cd:12:
fd:88:62:77:dd:11:53:46:a9:15:78:83:84:9e:c9:
bf:34:12:5d:18:8a:82:53:d6:33:ef:2a:e3:79:14:
71:49:cc:bc:f1:b2:e5:ac:38:08:df:27:59:dc:70:
cc:28:37:b2:26:8d:7e:75:8a:5b:37:d7:e6:15:d5:
3e:79:96:7f:fe:7b:e8:51:e1:ed:bb:dc:28:66:e9:
da:eb:b7:f5:2c:b3:70:80:41:a0:f8:7f:68:56:50:
7e:c8:f3:34:ca:e8:96:0b:7c:57:8a:58:d7:78:62:
2a:35:6d:7f:4b:f2:44:c0:d8:95:9e:b2:99:aa:0d:
b7:66:a7:31:13:94:a9:ee:6b:00:32:fb:b4:50:d4:
ff:3d:cb:84:67:c3:cb:45:b8:99:25:6f:ef:cb:01:
b4:62:0b:12:72:63:1f:42:dc:44:f5:46:60:fc:4d:
8a:51:1c:1d:51:7f:c3:b5:94:f6:0a:7f:da:0c:9f:
18:bf:a5:d5:98:47:ae:86:65:30:c0:e3:a4:68:87:
54:61:0a:79:18:9d:80:a0:4e:1f:46:b2:2a:a3:00:
ae:89:b9:d3:42:2c:85:c0:b5:b3:71:ef:7f:da:cf:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:F0:42:94:FD:56:E7:24:80:10:9C:93:90:00:B4:42:D4:1B:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B39F1D049E411F1B40E6EB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.0.0/23
154.95.4.0/23
154.95.10.0-154.95.23.255
154.95.25.0-154.95.26.255
Signature Algorithm: sha256WithRSAEncryption
b0:d8:55:89:8d:a1:a9:8e:5f:23:bd:ce:16:bc:fc:ad:68:8c:
91:64:dd:14:93:44:4b:58:d9:40:e0:9c:91:4a:39:20:4a:e7:
f1:ba:80:35:f8:ad:b1:ea:b7:d8:0a:ca:80:d9:88:94:09:de:
83:11:d5:58:43:7e:15:78:5c:b2:82:1f:00:ba:49:90:77:0d:
bd:2a:f7:92:e4:3f:f9:02:d4:95:ec:aa:83:cf:2a:19:14:8e:
ef:e0:66:08:ec:75:4d:3c:c8:a7:0f:f0:04:90:cd:a1:aa:2a:
ff:0e:51:53:83:b0:4e:b1:8e:df:ce:c9:49:ad:bf:45:6d:04:
5a:eb:2f:be:8c:3f:76:7c:ce:d7:67:ce:e6:34:bb:81:91:3a:
84:fb:c4:7a:e0:f6:84:fb:26:58:74:2d:57:87:68:84:f2:a3:
d2:a5:35:b3:c8:76:52:dc:4e:d9:39:24:5c:52:2c:69:26:0b:
7d:3f:c4:51:f3:db:d0:2a:11:25:25:a1:77:6d:4e:0c:b8:89:
27:01:a9:ba:2b:f0:91:7c:0f:38:56:94:c9:73:10:ab:92:22:
43:57:56:59:8c:c6:a3:e5:a9:c6:8c:d7:5b:58:8b:f0:0c:34:
7b:46:06:69:77:24:10:38:7e:e9:93:d7:c7:3b:38:14:03:76:
db:c5:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:17 2026 by rpki-client