Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24F615BC0F0711F1BB1DAAF5DAE4EC9C.roa
File: 24F615BC0F0711F1BB1DAAF5DAE4EC9C.roa (raw, json)
Hash identifier: l64KPlW9SxqNHl/ZFNBVn2STNFC/zfFq5zah/njbjs8=
Subject key identifier: 11:92:E0:4D:53:F4:F6:5F:1F:3A:E4:E4:7B:10:F9:0C:5D:44:7B:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24F615BC0F0711F1BB1DAAF5DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:24:38 +0000
ROA not before: Sat 21 Feb 2026 09:24:34 +0000
ROA not after: Tue 24 Mar 2026 09:24:34 +0000
asID: 18013
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113376 (0x1bae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 09:24:34 2026 GMT
Not After : Mar 24 09:24:34 2026 GMT
Subject: CN=699979d6-b1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:cf:59:b5:95:f0:a4:bd:84:cd:2a:f0:fd:
79:70:72:07:26:10:d7:98:d8:df:c2:18:3d:d5:b0:
10:19:c2:71:a8:72:19:0d:3b:8d:7c:b4:ec:04:17:
2f:54:9f:49:73:37:e8:c7:f2:16:ae:50:0d:77:47:
13:7c:bb:98:99:d1:fc:29:7d:b5:e6:12:b9:d1:f7:
cc:8d:89:3e:bb:fe:27:c4:19:e3:fd:f6:bf:a0:28:
98:aa:e9:2c:a3:b2:30:5f:f2:46:d4:90:cb:dd:0b:
89:a0:30:d7:36:5d:b2:9f:3f:3d:f5:c0:20:22:bb:
74:e1:73:43:19:5b:19:c6:2d:d7:b7:eb:68:04:09:
0a:9b:69:37:43:1e:a9:d9:f2:6f:a7:9b:56:07:b9:
64:5c:93:e6:ab:bf:82:55:f5:35:c0:03:d2:86:d6:
f9:d3:38:e9:3c:a4:81:76:bc:74:c5:0e:60:54:b7:
bd:a8:b4:89:92:60:8a:d6:a3:1b:6f:c8:db:95:09:
80:3c:b2:7b:5e:be:ca:bf:7b:90:85:47:4c:9e:d0:
89:fa:26:34:8e:8d:bf:9d:f8:45:c3:6d:ba:06:ad:
1b:50:a3:91:42:f5:22:ee:62:3a:da:d4:0f:52:36:
00:3c:ff:46:93:cc:f9:b7:a1:6a:fa:d3:8d:e0:d5:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:E0:4D:53:F4:F6:5F:1F:3A:E4:E4:7B:10:F9:0C:5D:44:7B:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24F615BC0F0711F1BB1DAAF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
83:10:50:ee:50:18:02:d7:6f:8b:9b:79:15:9a:c2:b8:8c:22:
92:27:8d:26:d7:82:63:12:50:80:18:69:62:7a:41:e5:a1:c3:
65:ba:68:b0:b3:81:cd:56:11:39:cc:06:a1:c2:c8:f6:1d:42:
ea:fc:43:e6:bb:5f:88:da:21:e8:33:f8:5d:85:34:67:80:a5:
d7:fa:3a:a4:1e:14:44:3d:7b:99:ab:c4:3f:43:93:b3:84:54:
a2:77:a8:97:a3:cd:19:01:ff:4e:f6:d7:8d:4f:c1:d7:9a:17:
f8:b8:d2:60:9b:68:1c:bc:d1:5a:36:da:b5:30:bf:9f:e0:79:
74:3a:d4:c4:6f:25:6f:f9:57:1c:ff:10:4d:13:c2:64:7e:71:
fd:2e:01:e1:5b:b0:18:7f:cf:35:09:f8:51:e3:d4:7d:90:0b:
08:d9:cf:c7:eb:5c:1c:c3:6d:21:0a:65:4d:35:bd:6f:f4:e4:
47:30:0a:85:01:5b:59:ec:8f:5a:db:b5:c8:4d:83:cd:f6:d9:
95:99:29:9e:ef:4e:e0:d3:68:6b:22:c4:ca:e3:5a:26:0d:4d:
82:58:fd:86:a9:d7:ab:76:e7:4f:73:c5:26:88:b5:70:d3:ec:
c9:92:ee:b6:c8:68:67:7c:99:fd:4d:5b:4e:80:51:72:12:c8:
f5:fc:91:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbrgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIxMDkyNDM0WhcNMjYwMzI0MDkyNDM0WjAYMRYw
FAYDVQQDEw02OTk5NzlkNi1iMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuoDPWbWV8KS9hM0q8P15cHIHJhDXmNjfwhg91bAQGcJxqHIZDTuNfLTs
BBcvVJ9Jczfox/IWrlANd0cTfLuYmdH8KX215hK50ffMjYk+u/4nxBnj/fa/oCiY
qukso7IwX/JG1JDL3QuJoDDXNl2ynz899cAgIrt04XNDGVsZxi3Xt+toBAkKm2k3
Qx6p2fJvp5tWB7lkXJPmq7+CVfU1wAPShtb50zjpPKSBdrx0xQ5gVLe9qLSJkmCK
1qMbb8jblQmAPLJ7Xr7Kv3uQhUdMntCJ+iY0jo2/nfhFw226Bq0bUKORQvUi7mI6
2tQPUjYAPP9Gk8z5t6Fq+tON4NXGowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBGS
4E1T9PZfHzrk5HsQ+QxdRHvPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNEY2MTVCQzBGMDcxMUYxQkIxREFBRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQCDEFDuUBgC12+Lm3kVmsK4jCKSJ40m14JjElCAGGliekHlocNlumiw
s4HNVhE5zAahwsj2HULq/EPmu1+I2iHoM/hdhTRngKXX+jqkHhREPXuZq8Q/Q5Oz
hFSid6iXo80ZAf9O9teNT8HXmhf4uNJgm2gcvNFaNtq1ML+f4Hl0OtTEbyVv+Vcc
/xBNE8JkfnH9LgHhW7AYf881CfhR49R9kAsI2c/H61wcw20hCmVNNb1v9ORHMAqF
AVtZ7I9a27XITYPN9tmVmSme707g02hrIsTK41omDU2CWP2GqderdudPc8UmiLVw
0+zJku62yGhnfJn9TVtOgFFyEsj1/JEU
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:39 2026 by rpki-client