Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72FA124463A11F1BB3BD8E9CE1D38B0.roa
File: E72FA124463A11F1BB3BD8E9CE1D38B0.roa (raw, json)
Hash identifier: y5yvu/SXvmDvTd36ewkG6E9CpPvq2z0wTlY3/fP1vAI=
Subject key identifier: 8E:1C:29:95:D9:76:60:25:4D:81:C7:A2:54:E4:87:D3:15:EA:1D:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C939
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72FA124463A11F1BB3BD8E9CE1D38B0.roa
Signing time: Sat 02 May 2026 15:23:43 +0000
ROA not before: Sat 02 May 2026 15:23:38 +0000
ROA not after: Tue 09 Jun 2026 15:23:38 +0000
asID: 63139
IP address blocks: 154.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117049 (0x1c939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 15:23:38 2026 GMT
Not After : Jun 9 15:23:38 2026 GMT
Subject: CN=69f616ff-8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:95:3a:a5:d1:7e:45:92:bc:13:2b:96:5a:
cf:2d:50:d0:ed:29:ef:a7:40:db:8a:94:8e:a9:fb:
20:bc:bf:35:a9:dd:d1:c9:4a:f0:57:bd:14:85:90:
f1:50:cc:9f:cf:72:57:d6:8e:e1:e9:dd:c2:26:ec:
aa:fe:fb:ec:69:15:27:e9:27:2e:79:24:23:3c:4c:
9c:03:ad:a8:78:ce:e2:2a:6e:20:19:f8:a9:e5:45:
17:20:db:c9:53:48:0a:65:fb:fa:51:83:f2:5e:73:
a6:27:f6:44:39:ba:11:b0:08:54:14:d6:05:00:6d:
e9:38:3a:43:c3:ad:12:90:cd:68:2a:11:5e:70:ab:
e9:8a:8e:ed:de:9c:82:b1:48:1f:a3:73:fb:d2:72:
c1:40:4a:6a:62:74:71:5c:45:07:96:8c:8b:df:63:
b5:48:60:b0:08:50:b3:4b:06:c4:83:32:e1:ca:aa:
12:4d:17:88:8d:eb:80:35:25:5b:df:dd:19:2e:de:
4c:1e:59:8a:dc:df:79:68:d9:68:40:44:e3:06:d8:
c1:b3:da:14:27:7c:e6:76:82:a3:e7:e8:04:bf:0c:
ec:28:24:f2:50:94:23:56:48:9b:19:9f:17:a6:cf:
79:12:e6:30:48:23:c7:ed:e1:d0:d0:8d:29:2c:71:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:29:95:D9:76:60:25:4D:81:C7:A2:54:E4:87:D3:15:EA:1D:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72FA124463A11F1BB3BD8E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.95.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8d:f6:31:f7:2b:7a:67:cd:30:93:06:35:db:0f:5f:fb:dc:
8c:4a:7c:f7:6e:be:62:23:e9:e4:73:7f:23:2b:bd:33:fd:8c:
22:4c:d1:72:92:92:6b:ba:08:cd:1e:23:08:9c:73:84:ab:84:
da:ba:f5:21:04:22:52:d8:dd:1f:c6:09:6d:fd:98:1f:b2:93:
8a:23:d6:4d:28:1c:53:35:f6:ea:5d:0a:37:a8:cd:80:4f:5a:
55:c8:c4:4d:b0:79:f8:ce:7d:93:8a:7a:60:a7:17:3f:42:78:
2a:99:07:8d:59:6e:32:1a:29:88:2e:31:fb:7c:48:58:26:ee:
fd:b4:7c:63:35:8f:74:61:2e:20:71:12:5c:1a:fe:78:0f:a0:
56:30:7f:2e:dc:f9:d2:c6:de:34:da:4b:89:e8:f2:e1:cf:21:
f7:b5:c3:b8:aa:67:53:9c:9a:42:58:24:c3:81:37:17:2b:d2:
73:73:6e:b2:07:36:53:b8:b8:dc:42:08:d3:42:4c:75:db:af:
d2:3a:69:55:2d:34:32:00:a9:81:c0:c6:2c:14:75:66:77:ff:
ec:9a:06:e4:e4:9f:28:df:0e:6d:a9:aa:c0:98:95:7f:cb:cb:
ce:bf:ca:ce:e1:b1:0c:30:e8:7d:1f:4d:e1:33:93:75:9e:47:
10:e2:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:59 2026 by rpki-client