Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B253AC5D8A11F19166A6C0CE1D38B0.roa
File: 45B253AC5D8A11F19166A6C0CE1D38B0.roa (raw, json)
Hash identifier: 4AGHFiVdGoXoiCYSneAjR2rYhCAqXL2nA0mSmgTjFiI=
Subject key identifier: 1E:A0:65:AE:22:B3:BD:46:77:1D:CA:C8:FE:72:A9:9A:28:35:D0:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D120
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B253AC5D8A11F19166A6C0CE1D38B0.roa
Signing time: Mon 01 Jun 2026 07:19:48 +0000
ROA not before: Mon 01 Jun 2026 07:19:44 +0000
ROA not after: Tue 07 Jul 2026 07:19:44 +0000
asID: 271875
IP address blocks: 154.95.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119072 (0x1d120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 07:19:44 2026 GMT
Not After : Jul 7 07:19:44 2026 GMT
Subject: CN=6a1d3294-ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:fe:18:21:df:fe:6b:0d:06:31:85:8d:40:
7e:8a:2d:b7:4c:b8:46:e7:22:61:27:ac:ab:9d:79:
fa:d0:58:c9:ae:31:3d:21:d2:4b:ac:d0:e3:2e:f8:
43:b0:9b:7f:79:72:2c:6d:06:19:1b:54:c9:96:5e:
b7:44:21:08:e3:de:8e:a3:df:17:7a:73:f6:62:29:
15:f3:8e:8a:40:56:63:e3:d5:0e:d1:dd:fa:1d:f6:
b3:cc:f8:5d:00:bc:80:1e:27:f8:fb:7e:07:05:17:
51:77:6b:28:77:24:51:ef:dd:df:f6:89:5d:9b:4b:
6a:e2:54:79:5f:b5:ce:9a:18:24:81:04:a8:dd:70:
11:cd:e6:0c:46:bf:11:40:78:e0:6b:24:4d:dc:0e:
ef:df:98:9d:89:36:62:a0:e4:ce:ff:34:88:64:e2:
31:8f:66:70:33:f9:db:fa:fc:83:f3:0b:88:6f:fe:
90:b9:73:51:3f:64:27:91:3f:55:4a:bf:11:0c:fa:
ae:57:3e:d8:bb:56:87:84:25:a2:73:31:4c:50:1f:
0c:6f:81:60:61:26:ba:3f:8f:bc:61:f7:79:5b:ee:
25:52:a5:e1:af:d5:f9:1b:e1:a7:28:f7:18:53:ea:
e5:73:30:30:8f:b5:14:65:4d:c2:00:1a:f6:aa:b0:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:65:AE:22:B3:BD:46:77:1D:CA:C8:FE:72:A9:9A:28:35:D0:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B253AC5D8A11F19166A6C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.53.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b7:86:a8:e2:0d:9f:52:a5:2b:d6:74:2f:6e:2c:9c:7b:c9:
a4:7f:18:46:f8:fb:2a:db:ab:c8:91:a9:1c:9c:c2:d9:bb:db:
21:a1:12:07:c6:73:b9:fe:45:4a:b1:4f:91:64:d0:c6:97:61:
d2:37:27:8f:8d:19:3a:1d:99:1c:be:ee:76:22:25:e3:96:fa:
8b:97:3d:68:3f:7e:de:b4:7f:84:66:ce:9b:0d:88:ea:1e:a5:
28:8d:78:24:25:87:49:31:01:ab:8c:3f:ac:0f:e5:b6:d1:36:
71:13:a3:81:0e:a8:41:4c:c5:a1:94:68:03:08:4c:48:d0:ec:
35:d1:68:d7:13:9d:fe:91:ad:1e:47:50:8a:e1:d1:9c:53:e6:
89:ec:d2:02:75:a2:51:29:86:37:e4:b8:c6:77:45:ab:72:47:
50:9c:d2:2c:7a:f4:b4:ed:a6:b9:b3:10:2d:a8:f9:f1:5a:fd:
42:80:ba:1d:f2:cd:d8:46:a8:fb:58:e7:ee:15:f2:9f:d0:8e:
96:75:b3:5e:67:1e:d2:7f:20:14:45:9c:0d:1f:1d:5f:b2:4a:
f7:11:54:de:46:96:6c:7d:07:94:85:96:9e:51:79:95:e6:53:
c0:a8:01:1e:fe:28:75:44:8f:01:d5:6d:9d:f6:19:cc:5b:e9:
b4:11:1a:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdEgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjAxMDcxOTQ0WhcNMjYwNzA3MDcxOTQ0WjAYMRYw
FAYDVQQDEw02YTFkMzI5NC1hZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu/n+GCHf/msNBjGFjUB+ii23TLhG5yJhJ6yrnXn60FjJrjE9IdJLrNDj
LvhDsJt/eXIsbQYZG1TJll63RCEI496Oo98XenP2YikV846KQFZj49UO0d36Hfaz
zPhdALyAHif4+34HBRdRd2sodyRR793f9oldm0tq4lR5X7XOmhgkgQSo3XARzeYM
Rr8RQHjgayRN3A7v35idiTZioOTO/zSIZOIxj2ZwM/nb+vyD8wuIb/6QuXNRP2Qn
kT9VSr8RDPquVz7Yu1aHhCWiczFMUB8Mb4FgYSa6P4+8Yfd5W+4lUqXhr9X5G+Gn
KPcYU+rlczAwj7UUZU3CABr2qrAvmwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB6g
Za4is71Gdx3KyP5yqZooNdA1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NUIyNTNBQzVEOEExMUYxOTE2NkE2QzBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml81MA0GCSqGSIb3DQEB
CwUAA4IBAQATt4ao4g2fUqUr1nQvbiyce8mkfxhG+Psq26vIkakcnMLZu9shoRIH
xnO5/kVKsU+RZNDGl2HSNyePjRk6HZkcvu52IiXjlvqLlz1oP37etH+EZs6bDYjq
HqUojXgkJYdJMQGrjD+sD+W20TZxE6OBDqhBTMWhlGgDCExI0Ow10WjXE53+ka0e
R1CK4dGcU+aJ7NICdaJRKYY35LjGd0WrckdQnNIsevS07aa5sxAtqPnxWv1CgLod
8s3YRqj7WOfuFfKf0I6WdbNeZx7SfyAURZwNHx1fskr3EVTeRpZsfQeUhZaeUXmV
5lPAqAEe/ih1RI8B1W2d9hnMW+m0ERpC
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:44 2026 by rpki-client