Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D5216AC8F1B11F1B972701CCF1D38B0.roa
File: 4D5216AC8F1B11F1B972701CCF1D38B0.roa (raw, json)
Hash identifier: mC+8xSTXr1TIaVQm3yQ6+4k0K6O4OF5scvwyh5PHiKU=
Subject key identifier: 51:0E:DD:61:DA:2E:26:00:BE:2E:B9:9F:A4:A9:6E:A2:A2:9C:A2:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D5216AC8F1B11F1B972701CCF1D38B0.roa
Signing time: Mon 03 Aug 2026 09:11:25 +0000
ROA not before: Mon 03 Aug 2026 09:11:21 +0000
ROA not after: Thu 10 Sep 2026 09:11:21 +0000
asID: 136907
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121988 (0x1dc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 09:11:21 2026 GMT
Not After : Sep 10 09:11:21 2026 GMT
Subject: CN=6a705b3d-5bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:2b:91:83:2d:b4:2c:67:b5:29:c0:08:ec:
47:0e:20:df:bc:ba:9e:4f:42:a7:ec:99:25:18:a1:
40:aa:5e:f4:8c:f6:ad:73:66:e7:cc:af:db:7e:ca:
f8:ca:0f:48:f0:c5:ef:0a:0e:dd:df:7c:46:5b:c0:
b1:a5:94:24:97:08:82:bc:51:e7:4f:e7:e5:62:7d:
78:5e:6a:2a:e9:c8:d5:78:6e:52:58:9f:3e:5d:66:
fb:94:97:5a:82:4a:54:f6:c3:9a:83:31:ad:4d:ac:
be:a7:7d:81:7a:ab:41:12:77:24:7a:0b:13:9b:42:
d5:08:44:b3:9d:ad:0d:a3:f1:81:20:0f:6d:2b:ee:
f1:47:1f:da:bb:e5:4d:ce:47:ad:61:a5:67:08:66:
5e:fe:fb:d8:90:36:4b:61:7b:9d:e9:59:66:71:da:
ac:41:8a:1f:01:a7:60:82:7d:e9:9a:64:d0:39:bf:
e7:dc:c8:3f:6e:17:5b:1c:57:4d:1b:69:7a:a1:54:
73:9d:16:78:cc:28:11:9e:cb:1f:e7:cf:04:16:b1:
f2:0a:26:20:d4:67:c9:ca:15:f3:47:e5:fd:30:6f:
64:2d:be:e6:de:91:38:84:95:ae:5b:c6:47:4a:af:
74:58:20:a9:35:84:1f:74:6e:0b:59:a2:97:98:e4:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0E:DD:61:DA:2E:26:00:BE:2E:B9:9F:A4:A9:6E:A2:A2:9C:A2:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D5216AC8F1B11F1B972701CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
7f:33:73:1c:ff:7f:b7:51:9e:94:eb:ec:4e:d4:8a:66:0c:cf:
81:b2:56:a9:f3:d6:6a:fe:e1:df:dd:75:8e:de:36:18:f1:0c:
cc:f7:7f:3b:d5:c7:6c:ee:f9:21:9e:91:2e:65:28:76:fe:bb:
ae:52:c8:38:ae:b9:30:92:58:6e:30:3c:b8:75:23:65:a0:3a:
e2:6f:d4:3b:ed:14:85:73:48:ed:32:b5:f2:2c:c0:00:19:87:
85:6b:8c:56:d7:51:7a:c5:c6:b8:60:59:0b:5e:b9:ea:c7:63:
31:d9:15:54:a6:5b:e4:5e:3f:48:6b:cd:33:78:7c:5e:27:3e:
1e:f4:07:71:65:51:00:22:48:4b:3b:ee:d7:de:34:f8:07:bb:
30:0d:24:36:60:1b:66:98:04:40:20:bf:88:06:b2:97:96:30:
10:b3:71:3f:cc:9f:a2:74:7e:0d:e6:c9:91:c3:d6:75:a7:b6:
8b:ae:60:65:e7:0d:38:14:3e:dc:79:05:9e:84:9e:49:8a:a5:
d8:15:68:00:fd:47:5c:6b:4f:c8:fb:ea:0e:81:b3:13:e9:81:
5f:c4:e4:1a:35:64:80:1d:fe:f7:28:32:ab:4a:ef:5f:04:86:
90:23:12:d3:03:5d:a7:8d:39:50:e2:e7:b8:d8:c5:f5:9f:9f:
26:bd:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:47 2026 by rpki-client