Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B166D0553911F180B86A1BCF1D38B0.roa
File: 95B166D0553911F180B86A1BCF1D38B0.roa (raw, json)
Hash identifier: GRlGt3YzydsX3AaEk7iIkHMcD9aOZraG+bocaq5n3XI=
Subject key identifier: 1D:27:E7:F4:EC:E3:FF:06:E0:AE:9B:E4:13:1E:68:DF:B4:DB:AB:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B166D0553911F180B86A1BCF1D38B0.roa
Signing time: Thu 21 May 2026 17:22:04 +0000
ROA not before: Thu 21 May 2026 17:21:59 +0000
ROA not after: Fri 14 May 2027 17:21:59 +0000
asID: 153656
IP address blocks: 154.197.141.0/24 maxlen: 24
154.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118169 (0x1cd99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 17:21:59 2026 GMT
Not After : May 14 17:21:59 2027 GMT
Subject: CN=6a0f3f3c-5958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:3c:2e:db:ce:85:69:96:00:6a:b8:d2:d3:
5d:39:fe:72:d9:ef:d2:3f:34:b6:19:e2:31:14:76:
4e:76:c2:8c:b0:51:54:f6:fc:e0:ce:d2:eb:05:a0:
0f:09:de:59:3a:eb:87:aa:75:d3:dd:3e:ee:13:b9:
25:c9:0f:fa:4e:c8:f1:77:32:cb:83:f0:48:9d:be:
d5:7c:f1:96:0a:99:a3:6a:a7:15:31:c6:7d:a3:6d:
5b:1d:10:fa:41:13:9b:f6:1d:45:e1:3e:42:56:65:
c5:49:3b:fc:03:27:4a:aa:c0:e6:42:23:1f:9c:ee:
51:33:25:d5:f1:09:73:03:5f:d9:84:dd:19:26:cb:
d4:c3:89:0c:c9:c9:46:c9:4e:be:e9:5c:62:6f:e9:
34:ab:06:f5:c6:2b:da:9b:bb:46:ee:c5:b0:8b:21:
9f:dc:14:d1:76:d2:a1:45:81:eb:c9:d4:b7:47:43:
51:ff:05:25:33:c5:a1:16:a0:b9:5d:81:f0:8b:cc:
48:f1:fa:4d:58:9b:fa:4c:c7:54:35:e1:8d:a8:fc:
1f:41:eb:63:49:4e:49:d0:f0:c8:a5:97:bd:2b:e4:
fc:70:f5:b5:ba:dc:24:b9:ad:63:a2:72:3a:68:de:
ac:e1:17:34:72:df:f4:57:45:c8:55:97:bc:4d:93:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:E7:F4:EC:E3:FF:06:E0:AE:9B:E4:13:1E:68:DF:B4:DB:AB:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B166D0553911F180B86A1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.141.0/24
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
25:98:cb:fc:5a:84:44:7d:9b:49:4e:a8:34:6d:db:5f:cb:71:
f1:9c:cc:3f:31:5e:f3:e7:00:6c:12:63:e7:93:97:70:54:27:
47:c6:43:4b:e6:2d:00:e9:06:28:74:78:cb:93:4d:b7:d2:ce:
e1:86:01:2e:ee:b3:36:ae:d2:64:0c:4a:4f:19:70:92:a2:5a:
57:61:1f:0f:07:9f:b7:c3:77:fb:ea:5d:1d:27:fc:a0:66:5d:
25:77:4d:99:a3:9e:f8:5e:c7:b5:38:7b:95:07:e4:08:2a:16:
b1:56:0d:60:76:f5:89:23:cb:7b:fa:20:61:bb:dd:3a:b6:26:
ac:03:58:eb:45:0f:7b:c4:55:c4:40:89:e9:36:01:a7:7f:20:
c6:9e:d3:e6:0f:95:3b:d7:8e:5c:fe:a0:e5:5f:42:f6:5c:0e:
2b:56:03:21:eb:7c:06:8f:93:54:7a:eb:f0:c0:c0:5f:50:c2:
ed:86:6c:8b:03:86:05:61:91:9f:9d:4d:b6:49:77:ce:23:e5:
6e:bf:29:d0:e1:80:8d:0c:66:06:44:24:52:e7:bb:8e:82:8a:
48:9f:87:08:81:83:25:cf:90:e0:c5:6b:a3:45:eb:0d:07:52:
08:ed:5e:8a:b6:2c:63:7b:1c:f6:6d:ba:84:39:10:f1:16:b3:
11:ed:01:e3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAc2ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIxMTcyMTU5WhcNMjcwNTE0MTcyMTU5WjAYMRYw
FAYDVQQDEw02YTBmM2YzYy01OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy1M8LtvOhWmWAGq40tNdOf5y2e/SPzS2GeIxFHZOdsKMsFFU9vzgztLr
BaAPCd5ZOuuHqnXT3T7uE7klyQ/6TsjxdzLLg/BInb7VfPGWCpmjaqcVMcZ9o21b
HRD6QROb9h1F4T5CVmXFSTv8AydKqsDmQiMfnO5RMyXV8QlzA1/ZhN0ZJsvUw4kM
yclGyU6+6Vxib+k0qwb1xivam7tG7sWwiyGf3BTRdtKhRYHrydS3R0NR/wUlM8Wh
FqC5XYHwi8xI8fpNWJv6TMdUNeGNqPwfQetjSU5J0PDIpZe9K+T8cPW1utwkua1j
onI6aN6s4Rc0ct/0V0XIVZe8TZMLYwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFB0n
5/Ts4/8G4K6b5BMeaN+026vqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NUIxNjZEMDU1MzkxMUYxODBCODZBMUJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsWNAwQAmsWaMA0GCSqG
SIb3DQEBCwUAA4IBAQAlmMv8WoREfZtJTqg0bdtfy3HxnMw/MV7z5wBsEmPnk5dw
VCdHxkNL5i0A6QYodHjLk0230s7hhgEu7rM2rtJkDEpPGXCSolpXYR8PB5+3w3f7
6l0dJ/ygZl0ld02Zo574Xse1OHuVB+QIKhaxVg1gdvWJI8t7+iBhu906tiasA1jr
RQ97xFXEQInpNgGnfyDGntPmD5U7145c/qDlX0L2XA4rVgMh63wGj5NUeuvwwMBf
UMLthmyLA4YFYZGfnU22SXfOI+VuvynQ4YCNDGYGRCRS57uOgopIn4cIgYMlz5Dg
xWujResNB1II7V6Ktixjexz2bbqEORDxFrMR7QHj
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:26 2026 by rpki-client