Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5621B2161611F1A2D7B3C9DAE4EC9C.roa
File: 8E5621B2161611F1A2D7B3C9DAE4EC9C.roa (raw, json)
Hash identifier: llqlycX3NMN5khBm3P/HAIOWMS/WD/GUuoEq68PuDoY=
Subject key identifier: A8:35:7D:16:99:84:3F:6C:45:A5:BF:61:59:47:5D:1A:89:BE:6B:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5621B2161611F1A2D7B3C9DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:02:36 +0000
ROA not before: Mon 02 Mar 2026 09:02:32 +0000
ROA not after: Thu 09 Apr 2026 09:02:32 +0000
asID: 140666
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
154.95.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113883 (0x1bcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:02:32 2026 GMT
Not After : Apr 9 09:02:32 2026 GMT
Subject: CN=69a5522c-a59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:f2:c3:76:da:fa:fc:b2:44:fb:15:f1:0a:
76:66:d2:b5:0a:d6:2b:d0:5b:c4:57:d1:65:d0:8a:
29:71:3d:ad:db:4f:dc:aa:a6:6b:cb:42:2f:aa:ba:
4a:1c:60:6a:79:b9:fa:f1:88:f9:61:79:12:55:89:
8b:c1:ba:d2:00:c2:00:04:07:c1:97:e5:c1:83:2d:
83:89:5d:61:08:5f:bd:03:fd:f9:38:85:cd:27:fc:
ac:f0:58:95:dd:41:9c:d1:79:17:20:15:a0:d0:cb:
63:95:a8:cf:d7:fa:20:7b:9f:40:b1:7b:1a:a7:30:
e7:85:c5:a7:95:ef:b7:9e:dc:7d:7c:f4:bb:1a:cb:
06:fa:18:51:93:e1:9d:3f:da:a0:26:3d:30:f7:b6:
60:5b:c4:70:b8:f9:34:27:ac:8e:c3:97:25:f3:62:
11:e4:df:7b:1f:ed:82:ea:2d:6a:f2:40:d9:15:cf:
a9:91:70:ad:4c:91:20:db:de:66:09:3e:30:97:84:
36:08:42:cf:bf:b8:35:a3:df:33:9e:a6:ec:d1:45:
92:aa:ac:cd:43:f9:93:29:1b:10:cc:5c:1c:02:de:
4e:d7:ec:7d:8d:f0:15:3c:bc:72:62:67:cf:a3:48:
fc:73:16:a2:53:c3:d4:65:41:bf:ee:7d:24:29:ea:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:35:7D:16:99:84:3F:6C:45:A5:BF:61:59:47:5D:1A:89:BE:6B:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5621B2161611F1A2D7B3C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
154.95.124.0/24
Signature Algorithm: sha256WithRSAEncryption
77:54:ca:25:54:b9:d4:da:f9:54:f4:89:5b:ae:2e:b1:9c:c4:
e3:31:fe:95:e4:41:eb:7a:b1:1e:8f:eb:ed:fd:26:3a:f5:1d:
d8:f7:0a:a7:b0:44:d3:32:35:b5:12:62:06:70:bc:fb:9d:65:
c3:0f:d4:c6:33:4c:2a:37:97:07:b5:40:8d:00:3a:39:27:f3:
73:50:0e:36:78:1e:ec:c2:8f:d9:dc:82:b3:fa:21:53:97:b9:
5d:e6:38:03:f9:79:c0:41:db:18:f8:b0:f7:26:45:d6:0a:c2:
cd:22:37:dc:02:3e:b4:27:f3:36:48:6b:02:71:aa:16:6c:7f:
4b:cc:3c:11:5d:8d:49:4a:23:9f:45:53:8e:6b:3e:d4:d6:40:
22:fe:28:13:36:2f:5a:16:01:d4:9e:d0:d4:20:4d:6b:3e:3a:
c1:f7:d0:22:62:2f:c3:f0:ad:25:c4:c3:0a:b0:f3:4b:8b:ef:
9b:79:bb:5c:84:f6:b8:f2:53:b4:fe:a8:e2:12:9d:a8:47:29:
86:29:85:91:36:72:68:54:23:6c:6f:1d:52:58:fc:8e:51:28:
4f:6a:2a:83:a0:4e:94:31:75:55:3c:38:25:46:1f:03:57:81:
f8:f9:1b:47:f5:66:1e:68:f1:0d:fb:fc:e8:0e:18:29:57:dc:
b7:9c:5f:db
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAbzbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzAyMDkwMjMyWhcNMjYwNDA5MDkwMjMyWjAYMRYw
FAYDVQQDEw02OWE1NTIyYy1hNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuODyw3ba+vyyRPsV8Qp2ZtK1CtYr0FvEV9Fl0IopcT2t20/cqqZry0Iv
qrpKHGBqebn68Yj5YXkSVYmLwbrSAMIABAfBl+XBgy2DiV1hCF+9A/35OIXNJ/ys
8FiV3UGc0XkXIBWg0MtjlajP1/oge59AsXsapzDnhcWnle+3ntx9fPS7GssG+hhR
k+GdP9qgJj0w97ZgW8RwuPk0J6yOw5cl82IR5N97H+2C6i1q8kDZFc+pkXCtTJEg
295mCT4wl4Q2CELPv7g1o98znqbs0UWSqqzNQ/mTKRsQzFwcAt5O1+x9jfAVPLxy
YmfPo0j8cxaiU8PUZUG/7n0kKep0OwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFKg1
fRaZhD9sRaW/YVlHXRqJvmsdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RTU2MjFCMjE2MTYxMUYxQTJEN0IzQzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCml9IMAwDBAWaX2ADBAGa
X3gDBACaX3wwDQYJKoZIhvcNAQELBQADggEBAHdUyiVUudTa+VT0iVuuLrGcxOMx
/pXkQet6sR6P6+39Jjr1Hdj3CqewRNMyNbUSYgZwvPudZcMP1MYzTCo3lwe1QI0A
Ojkn83NQDjZ4HuzCj9ncgrP6IVOXuV3mOAP5ecBB2xj4sPcmRdYKws0iN9wCPrQn
8zZIawJxqhZsf0vMPBFdjUlKI59FU45rPtTWQCL+KBM2L1oWAdSe0NQgTWs+OsH3
0CJiL8PwrSXEwwqw80uL75t5u1yE9rjyU7T+qOISnahHKYYphZE2cmhUI2xvHVJY
/I5RKE9qKoOgTpQxdVU8OCVGHwNXgfj5G0f1Zh5o8Q37/OgOGClX3LecX9s=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:33 2026 by rpki-client