Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E70AF20161711F1A522EFCDDAE4EC9C.roa
File: 5E70AF20161711F1A522EFCDDAE4EC9C.roa (raw, json)
Hash identifier: 9r1TdjDVDUrLEtTeTxNRbRhAiCeaNPtD1/5ZgU5j0fw=
Subject key identifier: 7E:EB:D5:66:ED:12:B4:E5:D8:3F:A9:FF:8E:E0:4F:92:90:C4:C0:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E70AF20161711F1A522EFCDDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:08:25 +0000
ROA not before: Mon 02 Mar 2026 09:08:20 +0000
ROA not after: Thu 09 Apr 2026 09:08:20 +0000
asID: 136907
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113887 (0x1bcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:08:20 2026 GMT
Not After : Apr 9 09:08:20 2026 GMT
Subject: CN=69a55389-347a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:a6:d0:07:3e:98:c6:ef:ec:70:49:5d:cd:
18:76:be:c1:13:23:95:40:8a:0b:4b:19:c4:c4:60:
97:ac:96:3b:1d:bd:ab:37:60:1b:c2:49:29:97:28:
fd:a3:fc:27:50:df:4a:a6:bd:aa:97:2a:fd:0b:96:
13:e7:2f:fe:6d:4d:ab:28:f6:e1:a5:92:8b:1c:92:
b1:42:17:07:01:ae:22:08:73:f5:9b:54:94:e0:58:
52:fb:79:93:42:e5:0b:6e:a9:8b:14:06:5d:53:10:
93:43:c8:41:64:af:ab:82:39:57:d5:ca:03:88:64:
af:b9:67:8d:49:97:c5:67:f8:e1:a0:35:73:40:b0:
90:31:7f:0a:4d:89:86:d4:82:cd:eb:19:fb:04:56:
41:7c:0c:57:83:84:9d:a3:bf:04:83:89:69:51:6e:
01:5b:1e:8b:9a:5b:97:9b:26:18:9e:08:ba:84:52:
63:51:cd:f3:9e:17:7f:d5:f3:77:50:e9:4b:ea:cb:
3d:f2:89:2c:b0:60:94:ac:e1:df:f3:b6:95:85:5f:
f4:49:a4:cd:78:31:7c:41:8e:c9:52:6f:a2:51:d4:
ac:c2:c7:a6:e3:a8:81:0d:8a:56:5c:09:39:64:57:
b0:d6:9f:47:50:05:98:fe:5f:b0:78:fd:d9:65:4d:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EB:D5:66:ED:12:B4:E5:D8:3F:A9:FF:8E:E0:4F:92:90:C4:C0:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E70AF20161711F1A522EFCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
39:ff:c9:5e:9b:59:7a:69:3a:6d:5a:97:39:61:4e:bf:bd:2a:
45:c2:d4:a5:07:79:95:e7:cd:62:12:e2:89:cf:c8:75:37:93:
8a:10:d2:fd:8b:3b:65:9d:e5:1b:44:40:50:73:23:99:f5:a2:
f0:d2:09:9e:ca:02:63:b5:c6:6a:af:eb:af:55:5a:1b:7f:5e:
03:4b:6c:7d:29:86:48:8b:07:32:3c:48:f8:96:5c:90:01:bd:
43:2e:8e:34:c0:f4:55:89:20:6d:58:97:1a:fd:1e:ae:dc:51:
41:d1:05:28:1e:b8:de:d7:13:c4:e2:c0:cd:24:b1:62:03:27:
d2:4f:ca:fd:79:5f:71:a6:ee:40:5a:11:a2:dc:6d:c9:29:02:
9b:4e:eb:de:25:2b:c2:bb:31:92:1e:6b:02:59:df:f9:29:e8:
ce:09:51:77:47:4f:fa:a1:4d:77:71:b3:a9:73:25:c5:e0:4c:
33:11:3d:68:e0:ba:98:49:f8:e3:8c:4f:e7:17:c7:61:17:1b:
d4:09:4d:30:38:18:fd:f2:08:49:9f:9c:fe:57:1c:a3:82:97:
fc:4d:9c:dd:40:40:f8:02:de:af:1b:1c:25:75:0c:04:72:12:
63:a6:68:f9:a9:ec:22:c3:47:aa:b7:02:74:4e:4d:c8:69:e7:
6b:84:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:25 2026 by rpki-client