Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C67984DC4A7B11F1BE0136BCCE1D38B0.roa
File: C67984DC4A7B11F1BE0136BCCE1D38B0.roa (raw, json)
Hash identifier: 1GzDMXjv0RVXkHQk5mMovpIcpwJwsQarIERMwWCkJEY=
Subject key identifier: 50:59:8F:3C:82:E0:73:9A:77:6D:80:8A:7E:1B:B0:6E:50:67:71:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C67984DC4A7B11F1BE0136BCCE1D38B0.roa
Signing time: Fri 08 May 2026 01:18:10 +0000
ROA not before: Fri 08 May 2026 01:18:05 +0000
ROA not after: Mon 07 May 2029 01:18:05 +0000
asID: 17561
IP address blocks: 154.95.251.0/24 maxlen: 24
154.95.252.0/24 maxlen: 24
154.95.253.0/24 maxlen: 24
154.95.254.0/24 maxlen: 24
154.95.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117273 (0x1ca19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 01:18:05 2026 GMT
Not After : May 7 01:18:05 2029 GMT
Subject: CN=69fd39d2-ce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:8e:4e:26:95:22:46:10:6b:bb:a0:fb:b2:
27:eb:62:0d:68:ab:10:29:c0:49:9e:1d:35:c6:cc:
68:36:1d:be:19:3b:ed:ad:79:38:f4:d3:a8:f3:bb:
ea:96:b5:3e:a4:7c:06:49:d1:4a:7d:1b:3e:56:e6:
e6:75:0a:4e:91:e1:9a:79:28:ae:81:23:6d:d0:65:
94:ad:fb:b7:3c:7f:9e:99:fe:2e:7c:bf:74:9a:ad:
56:51:11:b8:ad:3c:35:2e:46:51:48:f5:ef:ef:f0:
4f:d6:fd:26:49:c8:22:ca:92:8e:cf:eb:82:b4:a3:
6b:ad:83:09:0f:1b:b3:a0:49:1f:21:9b:53:31:5e:
ed:e3:a4:61:49:12:b6:4d:8e:7c:c4:21:61:9e:7b:
24:fa:33:fa:4d:36:96:76:fc:9b:cb:72:d2:47:75:
f6:a3:c2:a2:1e:2c:b2:55:1a:05:6f:f7:15:17:88:
ed:8f:69:76:1f:d7:fa:39:14:c4:96:f8:77:61:bc:
e7:ac:60:73:a4:31:9c:e6:65:a6:7f:32:86:3d:43:
d9:78:ef:3b:5a:44:e8:4b:d4:cf:2d:92:9f:7a:d9:
2a:3b:12:78:2e:32:e2:fb:21:d4:a7:bf:0d:3e:02:
40:40:84:d2:66:24:27:c1:af:ac:51:36:3f:4e:e5:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:59:8F:3C:82:E0:73:9A:77:6D:80:8A:7E:1B:B0:6E:50:67:71:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C67984DC4A7B11F1BE0136BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.251.0-154.95.255.255
Signature Algorithm: sha256WithRSAEncryption
0f:f9:11:ce:ec:32:90:ab:41:7a:fb:8e:45:7a:fc:2f:92:6f:
96:08:eb:d0:50:7b:5b:c3:11:28:50:fc:02:70:45:ac:1d:70:
2a:6d:6e:07:c1:31:2d:6c:26:fd:e7:53:11:91:cf:49:30:3c:
df:6c:a4:a6:c6:fe:04:fa:e1:c9:23:2c:95:e8:fe:23:fe:3a:
22:7e:e4:98:85:cf:87:c0:29:5b:95:e6:59:2c:b7:6f:aa:cc:
9e:70:86:ab:71:4a:2c:07:9b:d5:54:36:ac:09:dd:d1:57:06:
fb:3b:90:08:1c:8c:16:76:cd:5a:ad:80:02:13:f1:7e:f1:42:
25:bd:90:18:c3:c6:e5:5d:c9:f2:5e:28:b3:90:02:a4:54:31:
76:a2:bb:c1:13:6b:90:87:75:d2:f3:ac:9f:df:69:fb:6e:23:
df:bf:79:4c:9c:ca:d4:9a:b6:a7:6d:42:58:f4:0c:28:af:5b:
82:47:0e:fa:66:e9:bf:a5:e5:f7:c4:7f:14:eb:90:74:f3:2a:
0a:2a:f2:95:ba:65:e8:f2:a1:7f:9d:e2:14:29:4e:6f:60:63:
a4:9b:5d:00:bc:3a:3e:1d:fe:90:ea:ca:1f:79:47:7c:8f:cc:
c3:f5:dc:20:f8:c3:3c:62:bb:f1:0b:d6:4d:01:6a:e6:f1:f6:
eb:43:50:6f
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIDAcoZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA4MDExODA1WhcNMjkwNTA3MDExODA1WjAYMRYw
FAYDVQQDEw02OWZkMzlkMi1jZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4eqOTiaVIkYQa7ug+7In62INaKsQKcBJnh01xsxoNh2+GTvtrXk49NOo
87vqlrU+pHwGSdFKfRs+VubmdQpOkeGaeSiugSNt0GWUrfu3PH+emf4ufL90mq1W
URG4rTw1LkZRSPXv7/BP1v0mScgiypKOz+uCtKNrrYMJDxuzoEkfIZtTMV7t46Rh
SRK2TY58xCFhnnsk+jP6TTaWdvyby3LSR3X2o8KiHiyyVRoFb/cVF4jtj2l2H9f6
ORTElvh3YbznrGBzpDGc5mWmfzKGPUPZeO87WkToS9TPLZKfetkqOxJ4LjLi+yHU
p78NPgJAQITSZiQnwa+sUTY/TuVc6QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFBZ
jzyC4HOad22Ain4bsG5QZ3EPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjc5ODREQzRBN0IxMUYxQkUwMTM2QkNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACaX/sDAwWaQDANBgkq
hkiG9w0BAQsFAAOCAQEAD/kRzuwykKtBevuORXr8L5Jvlgjr0FB7W8MRKFD8AnBF
rB1wKm1uB8ExLWwm/edTEZHPSTA832ykpsb+BPrhySMslej+I/46In7kmIXPh8Ap
W5XmWSy3b6rMnnCGq3FKLAeb1VQ2rAnd0VcG+zuQCByMFnbNWq2AAhPxfvFCJb2Q
GMPG5V3J8l4os5ACpFQxdqK7wRNrkId10vOsn99p+24j3795TJzK1Jq2p21CWPQM
KK9bgkcO+mbpv6Xl98R/FOuQdPMqCirylbpl6PKhf53iFClOb2BjpJtdALw6Ph3+
kOrKH3lHfI/Mw/XcIPjDPGK78QvWTQFq5vH260NQbw==
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:00 2026 by rpki-client