Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D6F81251EA11F1A201FAFBCE1D38B0.roa
File: B2D6F81251EA11F1A201FAFBCE1D38B0.roa (raw, json)
Hash identifier: LrgXaa3saVQEdxZlOmWOzU4eKfmWB2QKmYbiwZ8yR/Q=
Subject key identifier: 31:93:2E:FD:AB:FA:3E:1F:3B:2F:A7:E2:60:BF:AC:E1:DB:63:64:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D6F81251EA11F1A201FAFBCE1D38B0.roa
Signing time: Sun 17 May 2026 12:19:49 +0000
ROA not before: Sun 17 May 2026 12:19:45 +0000
ROA not after: Wed 24 Jun 2026 12:19:45 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117812 (0x1cc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 12:19:45 2026 GMT
Not After : Jun 24 12:19:45 2026 GMT
Subject: CN=6a09b265-53c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:43:42:51:52:45:62:0a:c9:c1:e4:83:10:
92:d3:07:a3:26:3a:18:0f:c8:24:96:9e:be:9e:72:
9c:ec:53:49:07:f0:9f:e8:90:97:4e:fc:f9:3c:6f:
ef:b6:b2:e7:75:2b:f6:2c:47:78:9a:c7:dd:cb:e9:
c7:3b:e7:23:ae:ff:dd:c8:f3:aa:be:e9:50:d3:68:
3d:7f:07:c8:e4:a5:18:bd:c5:b8:a2:83:e2:00:33:
1f:b0:84:25:7f:9a:28:2c:88:69:13:90:56:0f:04:
be:fe:39:0c:26:d8:2e:11:88:f7:07:96:5f:25:a4:
29:26:5e:7a:ef:16:f1:ee:05:e4:ef:41:da:7b:54:
e0:fc:19:f8:09:65:6a:cc:52:b5:c9:ff:19:2d:1a:
41:79:88:f3:00:18:75:c6:f5:40:15:a8:0e:8e:10:
6e:47:14:d4:1a:f9:00:1d:5d:1c:f6:01:3c:e1:88:
57:a7:b4:e7:89:28:7d:c5:e7:9e:30:68:2c:e4:ab:
a9:71:9f:f5:00:82:34:3f:38:f0:e2:cf:7b:e7:5d:
c3:22:31:c0:41:cd:04:0b:c4:f2:c9:a7:69:4e:b0:
92:25:69:42:4d:04:73:ea:52:03:68:b1:cc:cb:ee:
4a:cd:d1:08:a9:7c:99:26:e5:01:7a:33:d1:b1:de:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:93:2E:FD:AB:FA:3E:1F:3B:2F:A7:E2:60:BF:AC:E1:DB:63:64:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D6F81251EA11F1A201FAFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1a:22:1c:f2:70:a6:93:2b:58:b6:b1:f5:c0:81:0d:d0:22:
e8:d1:06:38:51:fe:4a:34:a2:95:c7:e8:03:be:08:d9:71:45:
6d:4f:24:c2:63:ca:22:ad:63:dd:8d:ad:3e:9b:d4:50:c0:90:
31:ad:29:a6:fe:b5:fc:17:eb:95:d1:ff:87:6f:ea:e7:5f:60:
d2:03:15:7f:30:4b:4d:cb:a9:90:a3:1d:aa:60:fa:64:06:4f:
0e:70:1f:7e:b6:91:40:84:ba:76:56:38:4b:c7:00:c7:dc:c1:
30:bb:ab:72:9f:91:1d:c0:e5:79:c4:0b:49:ca:66:0a:13:a4:
48:60:56:35:be:0c:a4:4f:cc:05:1a:d7:ee:9d:71:82:84:f9:
f1:c7:ea:f5:38:00:f7:6c:2f:13:36:88:ba:e3:ad:5b:e4:7a:
83:a8:11:dd:91:c4:55:a9:ee:d7:8d:8a:a2:e5:82:a3:3e:f0:
f1:c1:b5:59:ba:78:a4:f0:47:1d:c5:f8:73:04:e6:0d:02:44:
18:c2:6e:25:59:8b:ff:3a:f1:9f:eb:2a:71:db:f5:06:d5:81:
4a:ef:78:96:47:99:a6:cb:0a:14:f1:a0:6a:f6:17:20:a9:ee:
78:09:37:97:a6:14:b8:d0:fa:44:66:12:40:24:be:f8:ba:d6:
69:9b:42:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcw0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE3MTIxOTQ1WhcNMjYwNjI0MTIxOTQ1WjAYMRYw
FAYDVQQDEw02YTA5YjI2NS01M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAseJDQlFSRWIKycHkgxCS0wejJjoYD8gklp6+nnKc7FNJB/Cf6JCXTvz5
PG/vtrLndSv2LEd4msfdy+nHO+cjrv/dyPOqvulQ02g9fwfI5KUYvcW4ooPiADMf
sIQlf5ooLIhpE5BWDwS+/jkMJtguEYj3B5ZfJaQpJl567xbx7gXk70Hae1Tg/Bn4
CWVqzFK1yf8ZLRpBeYjzABh1xvVAFagOjhBuRxTUGvkAHV0c9gE84YhXp7TniSh9
xeeeMGgs5KupcZ/1AII0Pzjw4s97513DIjHAQc0EC8TyyadpTrCSJWlCTQRz6lID
aLHMy+5KzdEIqXyZJuUBejPRsd4avwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDGT
Lv2r+j4fOy+n4mC/rOHbY2SXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMkQ2RjgxMjUxRUExMUYxQTIwMUZBRkJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQAzGiIc8nCmkytYtrH1wIEN0CLo0QY4Uf5KNKKVx+gDvgjZcUVtTyTC
Y8oirWPdja0+m9RQwJAxrSmm/rX8F+uV0f+Hb+rnX2DSAxV/MEtNy6mQox2qYPpk
Bk8OcB9+tpFAhLp2VjhLxwDH3MEwu6tyn5EdwOV5xAtJymYKE6RIYFY1vgykT8wF
GtfunXGChPnxx+r1OAD3bC8TNoi6461b5HqDqBHdkcRVqe7XjYqi5YKjPvDxwbVZ
unik8EcdxfhzBOYNAkQYwm4lWYv/OvGf6ypx2/UG1YFK73iWR5mmywoU8aBq9hcg
qe54CTeXphS40PpEZhJAJL74utZpm0KL
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:23 2026 by rpki-client