Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EB0F307B7611F1B2E9411ACF1D38B0.roa
File: 95EB0F307B7611F1B2E9411ACF1D38B0.roa (raw, json)
Hash identifier: lDTx5pgNXLKIqBZxh5fs8jv5z+hOKnDrkdp/j8+m/Ro=
Subject key identifier: 33:F9:E6:01:8F:E5:E1:AB:CC:11:DB:BD:C0:1D:3E:F7:56:3D:1E:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EB0F307B7611F1B2E9411ACF1D38B0.roa
Signing time: Thu 09 Jul 2026 09:14:28 +0000
ROA not before: Thu 09 Jul 2026 09:14:23 +0000
ROA not after: Mon 09 Jul 2029 09:14:23 +0000
asID: 17561
IP address blocks: 154.80.238.0/24 maxlen: 24
154.80.239.0/24 maxlen: 24
154.80.240.0/24 maxlen: 24
154.80.241.0/24 maxlen: 24
154.80.242.0/24 maxlen: 24
154.80.243.0/24 maxlen: 24
154.80.244.0/24 maxlen: 24
154.80.245.0/24 maxlen: 24
154.80.246.0/24 maxlen: 24
154.80.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120772 (0x1d7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 09:14:23 2026 GMT
Not After : Jul 9 09:14:23 2029 GMT
Subject: CN=6a4f6674-c5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:58:08:5e:8d:94:b1:99:1d:41:1e:8b:19:
a4:9d:0a:5f:69:02:a4:2a:9a:5e:94:7d:ca:68:0d:
fc:74:77:76:97:99:69:d2:b0:f4:09:53:14:4f:68:
f3:24:b9:d1:d8:29:20:fe:df:ee:8e:9c:9b:b7:5b:
b6:ea:02:7c:1e:2a:ef:f0:07:8e:d8:f3:67:27:27:
58:e4:52:35:dc:7f:4e:2a:9f:57:3b:9d:78:5d:02:
19:e2:b6:dc:95:4c:72:ef:85:fc:7b:ef:36:c9:53:
d1:5f:4d:09:d5:5c:8e:fc:36:7f:2a:8e:09:35:81:
54:e9:74:fa:cd:4e:9e:2a:54:03:6a:f0:70:ae:40:
05:86:7f:ff:8e:34:58:ce:41:9a:df:81:bb:15:4d:
fc:6b:66:a4:ce:ee:28:97:65:f0:1c:d7:bc:63:73:
ab:85:fe:68:db:0e:75:2d:c3:3b:ef:07:0e:c1:4e:
36:5c:5a:ba:55:90:c0:33:9d:c1:70:0c:7f:0a:35:
55:c8:a4:5d:c2:db:c7:8e:6d:2c:08:d4:39:03:2f:
9c:b6:53:ec:2a:4d:2a:6a:c5:b3:01:d7:47:18:b6:
b7:04:59:65:29:41:d6:26:83:81:a5:b1:a1:70:1b:
02:74:0c:9a:2c:98:5b:83:1d:4e:b3:d6:b4:ae:8e:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:E6:01:8F:E5:E1:AB:CC:11:DB:BD:C0:1D:3E:F7:56:3D:1E:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EB0F307B7611F1B2E9411ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.238.0-154.80.247.255
Signature Algorithm: sha256WithRSAEncryption
0c:de:c7:4d:34:d1:26:8f:a8:d5:29:2a:7e:02:ef:7d:68:56:
2b:24:f4:5d:b2:e9:fb:d3:0a:29:b4:55:03:b5:bb:49:49:9b:
48:10:8a:03:08:02:74:cd:06:2f:bd:c2:fa:b1:1c:53:86:01:
ea:92:cd:77:78:ef:1d:95:10:63:15:ad:df:2e:3f:63:46:07:
0e:de:2b:ba:4a:6d:be:e7:22:5c:d8:42:42:fd:db:5a:47:8e:
5c:e3:68:5b:24:64:ac:00:2c:d7:ad:10:8b:27:4c:9f:b3:8d:
f8:49:6b:e9:46:73:67:f9:b2:4d:bf:08:25:f3:4a:6f:5a:41:
fc:50:db:6e:31:af:7d:dd:65:d3:ef:98:b6:e6:7f:de:78:2c:
39:ae:fe:4c:69:e5:64:16:ac:ae:5c:65:f8:76:72:f3:e0:33:
04:51:c8:85:b6:c3:a7:c8:c7:90:94:9b:cf:92:04:9b:f5:8c:
9b:b1:52:25:37:b5:e8:97:f7:0e:40:47:3b:2b:8a:91:60:4c:
ec:4e:cf:84:af:16:ca:e7:40:f6:32:77:94:24:78:55:c9:9a:
9f:c6:7a:01:ee:c8:d5:76:50:34:7c:7b:5f:4d:92:34:69:29:
5c:6b:72:2d:75:20:53:df:9d:eb:03:e9:51:fc:ba:d4:fe:27:
da:67:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:29 2026 by rpki-client