Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2822292E8F1811F1BDACF909CF1D38B0.roa
File: 2822292E8F1811F1BDACF909CF1D38B0.roa (raw, json)
Hash identifier: ZVmk0rraqOX/FAa5kkiztoFCWe2RX0yaO4qVfvVNpSE=
Subject key identifier: 59:61:2D:87:92:4A:51:2B:4E:0B:B9:BD:A4:21:7C:EA:B4:8B:96:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2822292E8F1811F1BDACF909CF1D38B0.roa
Signing time: Mon 03 Aug 2026 08:48:54 +0000
ROA not before: Mon 03 Aug 2026 08:48:50 +0000
ROA not after: Thu 10 Sep 2026 08:48:50 +0000
asID: 63139
IP address blocks: 154.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121980 (0x1dc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 08:48:50 2026 GMT
Not After : Sep 10 08:48:50 2026 GMT
Subject: CN=6a7055f6-c592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:ad:b7:e6:b8:45:37:da:23:cb:82:d4:ba:
a1:94:d5:0b:08:66:84:5a:38:72:d1:4b:9d:67:e0:
92:ed:fa:81:b3:de:42:a0:59:3c:b9:c4:6e:12:1f:
ff:9d:35:da:f9:66:69:43:26:e8:a4:87:63:d7:eb:
04:cd:30:70:45:d2:9b:62:76:cf:f5:cf:12:74:b5:
71:77:4b:05:f8:9b:d3:84:9c:a8:97:b3:b9:51:f6:
50:29:f5:81:00:82:da:22:54:8a:89:d2:6b:cf:c4:
ef:50:b7:d7:54:f5:66:cb:1b:30:0c:84:ff:87:5f:
00:c4:d8:e3:f4:ec:4b:15:b4:14:0f:57:c1:4d:c0:
fe:ed:53:8b:fd:5c:86:13:86:eb:cf:79:6b:55:39:
57:90:fd:65:cb:60:ab:04:cf:c2:cd:ab:44:3a:dd:
62:e7:23:d5:76:56:05:02:14:e8:af:97:4c:86:5e:
d2:69:24:40:bf:3c:0c:9e:cb:9d:4a:50:8f:5a:38:
76:fe:8e:41:58:7a:af:3e:32:d7:ee:9c:96:60:14:
aa:23:63:92:3c:c6:ac:82:b7:6e:49:88:fd:91:16:
3e:fe:81:d4:3f:93:a1:09:77:92:ff:08:25:c0:73:
89:ab:2e:01:c9:c9:fd:9f:b0:9b:9b:17:5b:5b:6f:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:2D:87:92:4A:51:2B:4E:0B:B9:BD:A4:21:7C:EA:B4:8B:96:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2822292E8F1811F1BDACF909CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:67:da:4a:d9:dd:38:df:06:8e:0b:39:3b:e0:08:47:76:f0:
55:a9:72:79:c3:58:f1:0b:21:e4:05:ba:7d:9b:a8:c4:12:de:
cc:1c:2e:18:fc:e3:20:2a:b9:ee:19:a3:56:d3:51:30:ef:8d:
59:bf:81:ab:df:5f:86:6e:62:31:a0:71:0c:2a:a7:1d:67:bd:
26:ae:4a:af:9f:84:d5:86:95:4e:fe:49:75:2c:e0:ce:e4:b0:
f3:97:33:63:75:fb:76:7c:eb:aa:92:b0:87:3f:bb:0e:a7:19:
d2:16:49:8c:ec:0c:57:b9:84:0a:0a:c5:2d:b3:8f:67:a6:43:
a7:87:89:16:c7:25:d2:b0:12:03:6c:ea:4e:b5:79:df:ab:30:
ea:7e:64:6a:07:dd:9f:8b:62:84:c1:b3:90:6f:b7:c9:1f:ff:
31:a4:cb:d5:43:d4:17:ef:51:12:db:e1:24:2c:f7:fc:fb:66:
ad:c3:1a:29:0f:7b:6b:6c:fc:e1:7b:31:ee:cb:ae:e3:14:0c:
0d:02:fc:80:f9:5a:79:ae:38:8e:30:18:81:0f:ec:b6:93:8e:
0c:de:6b:1e:f3:62:fd:02:05:04:69:d2:86:8e:9c:e2:f8:28:
dc:c2:e1:44:f5:ec:9a:92:ba:a2:ae:22:6e:8d:82:d0:ea:a5:
0d:e7:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:15 2026 by rpki-client