Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D24B1C460911F1A16ADFC4CE1D38B0.roa
File: A1D24B1C460911F1A16ADFC4CE1D38B0.roa (raw, json)
Hash identifier: jFsbVeGYqnycpY3NY9cKZ4pNgkmZ7+3pbHMrvpcUHMQ=
Subject key identifier: A0:57:E5:38:93:12:B7:10:1C:4C:10:87:84:7C:37:87:00:D3:7A:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C923
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D24B1C460911F1A16ADFC4CE1D38B0.roa
Signing time: Sat 02 May 2026 09:31:01 +0000
ROA not before: Sat 02 May 2026 09:30:57 +0000
ROA not after: Tue 09 Jun 2026 09:30:57 +0000
asID: 136907
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117027 (0x1c923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:30:57 2026 GMT
Not After : Jun 9 09:30:57 2026 GMT
Subject: CN=69f5c455-c637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:66:ce:98:fc:fd:e1:72:51:23:52:b7:eb:
32:fe:fc:b1:cb:63:57:82:1b:ea:c8:9e:bc:81:30:
8d:d0:72:8c:70:4e:3f:78:40:8d:9b:8c:09:31:6f:
e5:5d:55:11:77:2a:24:da:d4:44:3b:64:86:b5:4c:
a8:b3:c2:ad:aa:57:ba:17:95:36:0d:47:f7:ec:ad:
9c:58:38:cd:ba:00:44:24:b4:9e:bf:de:59:df:1c:
0d:0f:53:23:bf:82:95:3f:8f:67:fc:f7:51:67:d8:
f0:d2:12:42:21:22:4b:b7:81:b8:21:bd:14:65:41:
31:52:d6:a3:37:c2:b0:fd:1b:9f:52:62:30:90:14:
89:10:2e:6c:51:74:e4:34:d2:c0:e9:28:0d:85:17:
65:80:66:70:d3:cf:13:30:47:d2:4a:74:a0:99:99:
5b:50:b0:24:1d:f2:81:8e:22:e3:57:33:fc:62:7d:
d4:64:ac:79:ac:70:ad:36:85:6d:5d:f6:dd:a0:9b:
a6:5b:f8:a8:32:d0:65:16:2c:7e:5d:04:33:34:cc:
eb:55:91:56:cc:8f:4f:57:7b:f6:a1:01:b1:76:c5:
c4:da:98:ea:97:14:c3:80:2e:2d:65:2e:5f:25:4d:
40:d9:80:55:83:7d:c1:c7:d1:3e:d0:e6:f1:f3:f2:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:E5:38:93:12:B7:10:1C:4C:10:87:84:7C:37:87:00:D3:7A:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D24B1C460911F1A16ADFC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
ae:56:fd:a1:1e:d0:5c:14:e5:cc:f6:3b:58:bb:5e:b2:98:b6:
54:28:ff:1c:11:59:8c:59:b0:c4:4d:85:db:47:33:cb:14:a0:
42:40:7d:b2:69:be:5b:1e:cc:b7:42:71:1d:ac:89:98:fc:96:
98:c8:5c:50:a4:e3:4e:0c:9c:ac:9c:31:51:78:b8:e2:2f:0c:
7b:34:56:63:4b:00:0b:27:d4:81:d1:04:91:51:28:db:2a:62:
a0:96:29:0a:77:b8:48:cd:86:ca:5c:6f:03:ba:7c:cc:9e:a9:
9c:97:7e:7e:84:1b:94:07:24:d3:8c:7f:0d:1a:c9:76:45:a1:
eb:1f:62:58:8a:f8:bf:8c:ee:3c:c3:fd:7f:a1:0e:70:4d:15:
db:2f:9d:37:dc:94:2f:ce:0d:ea:0c:0a:e0:c1:04:8b:40:e5:
fa:47:35:24:da:ac:12:b5:3a:d8:33:b3:a6:98:a4:71:d5:24:
3d:ed:ea:56:1c:23:83:7f:3a:f8:24:60:4c:5a:87:85:62:87:
1e:d6:62:8f:f1:10:b5:82:c5:0a:ab:0b:16:57:91:3b:e5:f5:
4b:c5:c9:60:f7:16:de:34:dc:74:25:c1:58:2d:0b:2b:bf:49:
02:a8:c4:d3:ab:cf:85:2a:60:09:a2:51:00:5a:8c:64:63:61:
e8:2a:d8:49
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAckjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAyMDkzMDU3WhcNMjYwNjA5MDkzMDU3WjAYMRYw
FAYDVQQDEw02OWY1YzQ1NS1jNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3LJmzpj8/eFyUSNSt+sy/vyxy2NXghvqyJ68gTCN0HKMcE4/eECNm4wJ
MW/lXVURdyok2tREO2SGtUyos8Ktqle6F5U2DUf37K2cWDjNugBEJLSev95Z3xwN
D1Mjv4KVP49n/PdRZ9jw0hJCISJLt4G4Ib0UZUExUtajN8Kw/RufUmIwkBSJEC5s
UXTkNNLA6SgNhRdlgGZw088TMEfSSnSgmZlbULAkHfKBjiLjVzP8Yn3UZKx5rHCt
NoVtXfbdoJumW/ioMtBlFix+XQQzNMzrVZFWzI9PV3v2oQGxdsXE2pjqlxTDgC4t
ZS5fJU1A2YBVg33Bx9E+0Obx8/LBcwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFKBX
5TiTErcQHEwQh4R8N4cA03q0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMUQyNEIxQzQ2MDkxMUYxQTE2QURGQzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCml9IMAwDBAWaX2ADBAGa
X3gwDQYJKoZIhvcNAQELBQADggEBAK5W/aEe0FwU5cz2O1i7XrKYtlQo/xwRWYxZ
sMRNhdtHM8sUoEJAfbJpvlsezLdCcR2siZj8lpjIXFCk404MnKycMVF4uOIvDHs0
VmNLAAsn1IHRBJFRKNsqYqCWKQp3uEjNhspcbwO6fMyeqZyXfn6EG5QHJNOMfw0a
yXZFoesfYliK+L+M7jzD/X+hDnBNFdsvnTfclC/ODeoMCuDBBItA5fpHNSTarBK1
Otgzs6aYpHHVJD3t6lYcI4N/OvgkYExah4Vihx7WYo/xELWCxQqrCxZXkTvl9UvF
yWD3Ft403HQlwVgtCyu/SQKoxNOrz4UqYAmiUQBajGRjYegq2Ek=
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:41 2026 by rpki-client