Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBF450B64A7711F1BA9858A3CE1D38B0.roa
File: DBF450B64A7711F1BA9858A3CE1D38B0.roa (raw, json)
Hash identifier: ruEBJs9sTe+OMVU1/EUioPj2nBMA4e+5Df6suf0aJrA=
Subject key identifier: 26:2B:CC:6E:3D:18:21:65:06:91:7A:65:6D:BD:8F:92:58:06:71:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBF450B64A7711F1BA9858A3CE1D38B0.roa
Signing time: Fri 08 May 2026 00:50:08 +0000
ROA not before: Fri 08 May 2026 00:00:03 +0000
ROA not after: Mon 07 May 2029 00:00:03 +0000
asID: 17561
IP address blocks: 154.95.151.0/24 maxlen: 24
154.95.152.0/24 maxlen: 24
154.95.153.0/24 maxlen: 24
154.95.154.0/24 maxlen: 24
154.95.155.0/24 maxlen: 24
154.95.156.0/24 maxlen: 24
154.95.157.0/24 maxlen: 24
154.95.158.0/24 maxlen: 24
154.95.159.0/24 maxlen: 24
154.95.160.0/24 maxlen: 24
154.95.161.0/24 maxlen: 24
154.95.162.0/24 maxlen: 24
154.95.163.0/24 maxlen: 24
154.95.164.0/24 maxlen: 24
154.95.165.0/24 maxlen: 24
154.95.166.0/24 maxlen: 24
154.95.167.0/24 maxlen: 24
154.95.168.0/24 maxlen: 24
154.95.169.0/24 maxlen: 24
154.95.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117258 (0x1ca0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 00:00:03 2026 GMT
Not After : May 7 00:00:03 2029 GMT
Subject: CN=69fd3340-46e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:b3:ea:2e:bd:75:7c:6d:b2:b1:18:f2:b9:
5a:42:cd:7f:92:76:60:7f:e9:5a:fe:52:ac:bc:11:
10:fa:e5:4d:2d:c2:0a:1d:e4:9c:49:cf:4d:80:17:
08:b3:34:61:10:08:32:1d:7b:cd:d4:66:dc:57:b6:
53:d8:a0:da:dd:25:ea:16:b4:a3:00:2d:2f:40:97:
36:ff:fe:c6:7e:29:6c:34:4e:5e:55:fa:e3:4e:af:
26:d6:56:b4:3c:af:ae:43:78:4e:7d:6e:7f:c6:bc:
69:29:27:e6:b2:ad:94:40:83:47:2c:a7:06:f5:8d:
1a:2b:9b:b1:f4:94:fc:bf:53:19:41:7a:3f:25:71:
90:94:75:2e:6a:17:81:97:34:bb:76:a3:f6:cd:81:
55:0e:1c:ee:22:6c:d5:aa:f1:5e:50:c8:72:f4:2f:
98:7d:8c:85:51:b4:65:e4:04:fd:d3:2f:4c:09:c4:
cd:b1:f2:51:5d:54:b7:11:49:dc:27:b3:9d:a7:c0:
04:ad:15:85:3d:fb:83:7d:b8:41:66:53:56:cd:f1:
b1:04:4d:23:1b:d0:09:6e:2c:0d:ba:78:b0:28:b3:
68:d2:c1:69:c5:53:98:ba:9a:c7:02:7e:ef:d5:ea:
64:82:4a:ad:3a:59:02:95:ca:f1:37:6d:68:45:96:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:CC:6E:3D:18:21:65:06:91:7A:65:6D:BD:8F:92:58:06:71:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBF450B64A7711F1BA9858A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.151.0-154.95.170.255
Signature Algorithm: sha256WithRSAEncryption
3a:d3:8d:b8:4e:2b:af:ff:61:1d:65:a9:8e:17:90:9d:cf:11:
cb:15:b5:be:79:21:39:73:e5:5d:8f:74:45:59:d2:b1:a1:f2:
36:dd:0a:16:6e:e2:11:14:28:66:a5:a2:47:8e:12:92:68:03:
8b:b8:aa:04:58:ea:d2:db:ba:51:8f:3b:bd:f6:d6:fa:14:eb:
14:de:eb:b5:0a:67:cd:2b:ab:45:a3:b1:3a:4b:82:95:54:d5:
7e:db:5f:af:89:29:67:a5:f8:4d:c3:2f:9f:26:1d:0d:b0:0d:
ad:af:aa:95:6d:03:0a:7c:a8:4f:de:d7:2a:e1:b6:03:3d:df:
01:91:c1:6b:40:d2:8c:14:d2:46:78:e8:47:6d:ec:3f:cc:30:
fe:26:f0:1d:a6:de:03:9f:ed:ad:e3:08:87:14:af:b2:6f:da:
d7:88:76:b0:8b:d2:d8:8a:e6:6d:af:15:47:b5:cd:12:77:77:
53:fb:5f:e7:31:c7:71:1a:1b:ba:7b:0f:95:2a:ca:19:32:75:
2c:c2:a3:ee:1a:19:06:48:14:92:61:12:2e:60:eb:c4:0a:e3:
08:05:81:d4:46:26:4a:c1:a3:63:a0:6c:98:aa:1e:f6:6b:e0:
9a:b2:2f:c2:e9:92:18:2d:b4:82:d7:f8:66:43:d4:cd:33:3d:
4d:4b:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:45 2026 by rpki-client