Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9F765EE8F1511F18561E6FBCE1D38B0.roa
File: E9F765EE8F1511F18561E6FBCE1D38B0.roa (raw, json)
Hash identifier: VIz8ZVnej5WiP6jLoEDVmzij6ybVsKkFvXmpK89WWUQ=
Subject key identifier: CA:67:39:EB:A1:97:A1:BE:0B:B3:9E:6E:52:69:4B:29:8B:5E:B8:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9F765EE8F1511F18561E6FBCE1D38B0.roa
Signing time: Mon 03 Aug 2026 08:32:51 +0000
ROA not before: Mon 03 Aug 2026 08:32:47 +0000
ROA not after: Thu 10 Sep 2026 08:32:47 +0000
asID: 138915
IP address blocks: 154.95.68.0/24 maxlen: 24
154.95.69.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.76.0/24 maxlen: 24
154.95.77.0/24 maxlen: 24
154.95.78.0/24 maxlen: 24
154.95.79.0/24 maxlen: 24
154.95.80.0/24 maxlen: 24
154.95.81.0/24 maxlen: 24
154.95.82.0/24 maxlen: 24
154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121974 (0x1dc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 08:32:47 2026 GMT
Not After : Sep 10 08:32:47 2026 GMT
Subject: CN=6a705233-c9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:45:18:ab:bf:01:b7:b5:65:02:3f:3d:d7:
81:d3:d8:0b:49:d6:87:35:a1:1c:52:02:92:f2:49:
81:2d:56:53:d0:4f:c2:a0:36:a3:e2:75:5e:c8:5a:
fa:e1:ee:6a:af:49:54:78:e1:dd:60:45:8e:a3:70:
2a:89:48:67:2c:0a:a9:4b:c2:18:4f:c9:41:fd:89:
70:e6:44:51:29:55:42:32:4b:6d:01:47:7c:75:8b:
86:69:25:11:5b:6f:2c:3d:9d:56:6a:8a:13:29:5d:
66:ff:1b:c2:87:ca:37:45:fe:5c:3b:07:df:da:bc:
eb:8c:ce:02:bc:6a:5b:cf:c2:68:cd:8f:6b:f9:53:
42:16:81:5b:f1:bb:0f:78:76:76:75:34:8e:5d:77:
9d:96:85:fd:06:91:27:40:f9:f1:ba:4c:25:ec:a9:
24:bc:98:3a:17:2c:f5:99:ae:58:0c:8b:93:22:82:
4c:27:b3:d5:b5:66:e8:91:49:0e:f9:76:d5:4b:8d:
0b:a0:cc:ea:5e:1a:b4:75:8b:32:0c:81:78:df:27:
46:42:c9:bd:09:27:df:97:ef:c6:8b:be:58:83:b5:
a7:b7:cb:2c:e3:02:2d:29:c9:5c:87:fb:cf:b9:0c:
9d:1f:38:d2:ea:38:99:fa:a8:3a:f6:b9:51:88:62:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:39:EB:A1:97:A1:BE:0B:B3:9E:6E:52:69:4B:29:8B:5E:B8:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9F765EE8F1511F18561E6FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.68.0/22
154.95.76.0-154.95.88.255
Signature Algorithm: sha256WithRSAEncryption
26:ad:d6:6f:a4:0b:1f:ba:71:02:65:02:0d:60:da:35:fd:3d:
26:b9:fd:88:25:e0:33:93:fc:3b:fc:4a:4d:1b:d1:4a:c1:c4:
35:fe:b9:72:2c:1e:b3:15:72:9e:1f:51:85:c7:83:5f:bd:1c:
0c:0a:54:ee:e5:97:7b:a0:96:43:26:76:59:77:7b:fa:76:43:
de:73:74:b6:47:48:7e:e4:da:2c:64:53:7b:21:6c:d5:ec:b1:
d4:ae:7f:92:f5:6b:d7:4e:6d:0a:cd:7e:49:f1:58:15:b8:da:
f8:52:e7:2e:62:d7:c0:b0:ff:06:d1:d2:9a:ea:89:a5:a8:d9:
a0:a1:7b:a8:cf:03:e2:98:75:f8:57:3e:5d:10:83:9a:05:35:
38:e8:0c:c0:ba:2a:f0:cd:44:e2:26:84:71:a2:e0:5d:76:c2:
45:34:24:cc:55:37:be:fd:86:63:b6:51:48:71:08:df:dd:a9:
c3:06:87:39:bd:04:2e:ac:fa:ec:f2:65:2b:e3:76:cc:0a:e7:
8a:b2:7a:bc:66:68:74:57:c6:c1:95:96:01:3c:3a:18:c2:e5:
cd:0c:ce:73:ac:b1:db:76:7d:53:35:fb:a8:4d:4a:d0:82:57:
37:0e:7d:05:59:39:8a:97:43:d8:24:dd:b3:43:7c:5d:26:f0:
76:1d:fb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:58 2026 by rpki-client