Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D93D6448F1A11F186FA5518CF1D38B0.roa
File: 7D93D6448F1A11F186FA5518CF1D38B0.roa (raw, json)
Hash identifier: J32EzjRRPPL8M38ExR+Q8YVS9v80e4FgTXzcZIR3Ctg=
Subject key identifier: 70:6B:FA:DC:57:30:64:BF:3F:F7:3A:22:CE:68:6C:12:D7:23:87:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D93D6448F1A11F186FA5518CF1D38B0.roa
Signing time: Mon 03 Aug 2026 09:05:37 +0000
ROA not before: Mon 03 Aug 2026 09:05:33 +0000
ROA not after: Thu 10 Sep 2026 09:05:33 +0000
asID: 140666
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
154.95.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121986 (0x1dc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 09:05:33 2026 GMT
Not After : Sep 10 09:05:33 2026 GMT
Subject: CN=6a7059e1-69c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:93:88:ce:4e:85:d4:79:0f:f3:1d:d9:07:
9a:51:a5:5d:c4:c3:d3:54:62:32:17:c7:48:83:ed:
66:56:38:a7:8e:e3:d5:68:1b:f4:d4:ed:2f:62:b1:
3c:2f:41:23:d4:16:65:e3:48:66:24:5a:84:c8:6f:
81:d5:5a:0f:53:e6:d7:35:ed:3d:a3:80:74:1e:71:
64:1d:c8:54:14:75:8c:1d:6c:53:e8:60:e0:99:d9:
7a:bb:de:67:e0:68:8f:0a:03:bd:d9:d4:7b:2e:f1:
05:a8:32:59:5e:ed:9c:55:21:00:1b:d8:fb:da:0d:
97:34:77:d2:98:51:2a:86:f0:49:ed:7d:fc:6a:1e:
87:12:0c:dd:b1:f4:5f:ed:0b:22:ba:7b:b7:ba:ab:
44:e0:6d:c3:7f:cf:9f:b1:cc:82:27:12:6c:75:65:
8a:48:ce:f8:c3:b6:4b:b2:1b:6c:32:3c:91:fc:f4:
41:3b:84:c7:c3:3c:12:30:84:70:53:54:d0:2f:30:
9f:35:89:c4:94:80:b1:e5:8b:59:cc:ec:f2:e3:76:
42:18:7d:9b:81:e4:cb:6b:25:dc:4a:c8:8f:8a:c8:
68:df:4f:7a:a8:05:ca:d8:89:ae:19:95:bf:c5:89:
12:84:e4:0e:dd:d8:9b:2d:bc:12:66:99:81:62:50:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:FA:DC:57:30:64:BF:3F:F7:3A:22:CE:68:6C:12:D7:23:87:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D93D6448F1A11F186FA5518CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
154.95.124.0/24
Signature Algorithm: sha256WithRSAEncryption
68:75:58:a3:c6:04:4d:43:35:19:ee:00:f4:8e:a9:28:22:0c:
94:c5:0a:19:67:f4:14:af:cd:a7:62:ee:f9:52:25:42:7b:ba:
52:8f:7e:2c:9f:2c:ef:dc:72:c5:23:90:e8:32:6c:be:7e:6a:
99:ba:ec:cf:fc:e1:24:cc:b6:e9:d8:75:9d:63:bd:06:12:95:
c8:81:85:3d:0a:ff:07:97:f8:5a:2d:d6:67:44:8b:2f:c0:55:
88:37:f3:ea:fa:31:73:48:f4:65:15:17:c1:95:98:64:5e:85:
e9:e5:20:8c:89:e3:38:5d:81:30:a2:c6:01:bf:e2:80:a4:ec:
e0:e8:21:9d:7c:f8:13:b6:68:3f:43:62:9d:62:cf:5a:ef:31:
37:af:b7:bf:b9:17:a0:ae:8e:9f:44:1a:01:45:ab:e4:32:87:
e7:31:79:f6:2f:f5:3b:96:ef:15:8e:c9:6c:28:0a:3c:ea:26:
a8:1b:9e:11:d5:94:a4:19:5a:0b:f9:c4:0a:60:1d:f7:f8:7a:
ad:e6:ed:27:87:10:d3:2c:3c:f4:fc:83:ba:9e:82:60:c2:2f:
03:6b:0f:b5:ea:da:36:a5:39:f4:70:d2:9b:b0:dc:b8:56:32:
15:0c:82:dd:e2:5b:b9:b6:33:0b:d6:a3:81:1f:76:32:f8:de:
09:a8:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:59 2026 by rpki-client