Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18FF82D449E511F1BD9835BBCE1D38B0.roa
File: 18FF82D449E511F1BD9835BBCE1D38B0.roa (raw, json)
Hash identifier: CiQnQHI105lqM1H6+O8ed/WkVh0JWzhYJjF+k2ptEwk=
Subject key identifier: 0F:2B:13:AD:26:4A:0F:8D:F1:5A:A9:43:07:6A:D2:9B:7D:1B:47:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18FF82D449E511F1BD9835BBCE1D38B0.roa
Signing time: Thu 07 May 2026 07:19:34 +0000
ROA not before: Thu 07 May 2026 07:19:30 +0000
ROA not after: Mon 07 May 2029 07:19:30 +0000
asID: 17561
IP address blocks: 154.95.27.0/24 maxlen: 24
154.95.28.0/24 maxlen: 24
154.95.29.0/24 maxlen: 24
154.95.30.0/24 maxlen: 24
154.95.31.0/24 maxlen: 24
154.95.32.0/24 maxlen: 24
154.95.33.0/24 maxlen: 24
154.95.34.0/24 maxlen: 24
154.95.35.0/24 maxlen: 24
154.95.36.0/24 maxlen: 24
154.95.37.0/24 maxlen: 24
154.95.38.0/24 maxlen: 24
154.95.39.0/24 maxlen: 24
154.95.40.0/24 maxlen: 24
154.95.41.0/24 maxlen: 24
154.95.42.0/24 maxlen: 24
154.95.43.0/24 maxlen: 24
154.95.44.0/24 maxlen: 24
154.95.45.0/24 maxlen: 24
154.95.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117186 (0x1c9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 07:19:30 2026 GMT
Not After : May 7 07:19:30 2029 GMT
Subject: CN=69fc3d06-6b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:93:f8:22:cc:29:ca:1b:9c:79:6e:79:cf:
af:fe:ac:b5:8c:be:0f:35:31:3b:89:f0:57:0c:b2:
ee:e2:75:97:61:16:84:fc:22:f3:01:98:de:30:cf:
41:72:cc:23:5d:fe:d8:13:dc:cb:42:53:37:a5:23:
30:24:66:59:ea:0e:dd:15:4b:52:ae:8d:d7:77:a8:
8c:fc:6a:5e:54:8d:9a:5e:35:7f:74:af:8f:73:84:
16:e5:fe:b1:78:df:4d:d6:79:5d:7c:d1:01:dd:2a:
d4:54:fd:f4:9a:19:c4:1f:81:98:5d:d6:b6:0f:bd:
7e:36:25:72:b9:79:9b:56:78:da:b8:11:96:a6:1d:
88:87:26:6c:31:c6:4f:0b:42:be:58:a5:ed:74:ba:
b9:18:d8:b7:25:e7:e2:8f:8e:42:bd:4c:4d:74:87:
3d:7d:b8:4b:b2:9e:8c:8f:8d:b7:b5:ba:70:c3:e3:
ac:2c:39:5b:2d:e2:ab:0b:8c:27:5a:ec:ef:53:3d:
d3:11:81:1e:af:ca:d5:96:87:28:36:24:e4:af:3b:
28:30:14:e9:27:68:a3:ce:62:0d:60:12:a7:cb:aa:
08:2e:11:30:b9:03:4b:21:eb:0b:c2:71:61:6c:5a:
bb:70:de:7d:50:35:90:12:0a:1a:f4:60:1b:c9:e2:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:13:AD:26:4A:0F:8D:F1:5A:A9:43:07:6A:D2:9B:7D:1B:47:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18FF82D449E511F1BD9835BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.27.0-154.95.46.255
Signature Algorithm: sha256WithRSAEncryption
bd:bf:60:64:b6:a2:d9:1a:d5:b8:53:c7:3e:64:d8:ac:cc:1c:
97:f8:36:76:90:07:ed:7b:ba:b0:73:3f:66:41:d1:3e:34:a3:
d1:e5:d1:62:b4:50:67:43:71:fc:65:73:0f:7e:45:86:d5:5a:
22:ee:25:04:6a:ae:0f:a0:44:05:1d:ba:14:7b:14:06:d3:56:
45:77:9a:6e:78:fd:c4:3f:c1:62:cc:b2:10:8f:0f:60:66:7f:
1c:43:87:7e:25:e0:77:be:e5:00:09:4f:e0:65:0c:73:c6:72:
48:6c:9c:30:a8:0c:24:62:7e:70:74:eb:9e:b7:3c:6f:ad:e3:
5c:9a:62:15:51:49:eb:91:99:42:35:36:86:9c:50:a7:dc:60:
39:f8:7d:42:e8:f6:4e:c6:4a:6f:80:94:e7:5b:d9:cd:f8:79:
94:87:92:a2:c5:0f:a3:8a:2e:5e:8a:13:0e:02:a1:fd:83:09:
91:f5:5d:10:df:cd:f9:d2:de:87:e2:a5:68:16:33:a6:cc:af:
46:2d:52:0e:d3:11:38:45:82:14:41:1a:a2:30:f8:6c:98:cf:
e9:f7:56:ed:40:99:32:6b:60:5e:4b:65:0a:2a:67:ae:ab:f1:
f8:80:9e:c7:96:ef:2f:cd:cd:58:30:be:72:65:b6:2c:14:a7:
42:53:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:02 2026 by rpki-client