Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49E4239A2ED411F19FD47A8BDAE4EC9C.roa
File: 49E4239A2ED411F19FD47A8BDAE4EC9C.roa (raw, json)
Hash identifier: HqZ0f2PhaluejZlVqtr+tgMm3tbBGhxOu/8qWfDmYfE=
Subject key identifier: 9E:6C:1E:76:67:DC:9B:AF:DF:BE:4D:C1:13:DD:45:A0:E0:A6:C7:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C289
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49E4239A2ED411F19FD47A8BDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 20:41:14 +0000
ROA not before: Thu 02 Apr 2026 20:41:09 +0000
ROA not after: Sun 10 May 2026 20:41:09 +0000
asID: 136907
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115337 (0x1c289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 20:41:09 2026 GMT
Not After : May 10 20:41:09 2026 GMT
Subject: CN=69ced469-d74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:cb:b0:72:b7:13:ca:31:8b:d9:94:57:73:
43:2a:e4:f8:61:2f:7f:81:41:32:74:24:39:bc:03:
ef:12:1b:a9:df:ea:b1:97:58:97:fa:ab:21:5d:00:
f2:a4:a3:c3:1d:55:61:da:97:ac:e6:e8:88:93:b9:
97:61:77:04:4c:bd:f1:74:76:e0:a5:a9:13:64:08:
c9:89:0f:63:9b:cb:0f:6e:23:4b:83:80:0f:4b:45:
7f:e9:56:0a:b1:3d:a2:2d:73:b2:7c:3c:8b:3d:9d:
94:db:90:59:81:75:4d:e0:31:7c:fb:a7:1b:d7:2b:
48:93:40:ef:75:85:6c:30:dc:49:b0:6e:d0:01:cf:
a5:7c:9a:8a:0b:3d:ea:f5:00:63:14:6f:96:25:fa:
5d:7a:79:a0:f7:d7:a2:e0:e1:f3:6d:f7:bf:26:59:
74:27:45:c1:35:86:d0:eb:d4:16:01:65:5b:27:0c:
13:dd:55:52:25:45:16:cb:9e:85:14:01:e1:65:79:
30:bf:37:1c:bc:91:8e:5f:35:82:04:f8:71:62:8d:
13:6b:53:48:5c:e4:ff:09:ca:88:5e:f2:21:3c:86:
17:25:fa:85:79:cd:a9:44:fc:66:7e:9a:ae:45:30:
38:b9:bc:c1:6b:90:69:5f:38:8f:d4:8d:d9:24:1f:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:1E:76:67:DC:9B:AF:DF:BE:4D:C1:13:DD:45:A0:E0:A6:C7:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49E4239A2ED411F19FD47A8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
4d:73:67:3c:51:dd:c7:82:f4:02:5b:45:d3:5b:fc:e7:a8:6b:
cf:51:27:ac:c6:d4:4b:9d:63:69:ae:de:a4:84:b1:81:21:f9:
dd:fa:bf:5b:01:9a:e6:4d:97:27:4f:f6:ab:ac:5e:1c:a7:a4:
36:1e:4b:b8:c3:05:9e:76:9d:3c:09:91:ce:5a:b9:21:83:dc:
6e:84:7a:30:da:77:2a:76:4f:8d:57:6e:2b:01:95:51:41:4a:
93:92:8b:ee:18:d0:5c:4d:b0:07:29:a5:c5:c8:59:0d:fb:c5:
37:f4:df:aa:77:c4:b7:66:e4:58:fc:1d:1e:15:11:0d:03:51:
7b:8c:77:a5:2d:06:05:82:42:38:bc:7f:a5:b2:1a:fd:e6:d3:
05:56:5d:46:d2:a8:b8:8e:6b:d9:15:24:ff:5b:09:ad:97:da:
ff:b9:8b:28:38:bf:63:a8:c5:a0:11:68:2c:cd:0d:0f:c4:09:
26:fc:dd:37:d8:b8:96:ee:94:5c:1d:f6:a1:0b:67:65:a9:52:
d1:40:fa:99:65:6c:e1:5b:51:54:e6:d9:af:5a:cb:a5:f0:c0:
76:a3:01:c5:39:c1:03:63:3d:3f:46:c3:7c:57:e8:5b:69:e4:
fb:b4:46:18:da:96:99:fd:80:18:fa:39:1e:c4:93:3e:bf:6a:
e9:81:a1:39
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAcKJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDAyMjA0MTA5WhcNMjYwNTEwMjA0MTA5WjAYMRYw
FAYDVQQDEw02OWNlZDQ2OS1kNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1tjLsHK3E8oxi9mUV3NDKuT4YS9/gUEydCQ5vAPvEhup3+qxl1iX+qsh
XQDypKPDHVVh2pes5uiIk7mXYXcETL3xdHbgpakTZAjJiQ9jm8sPbiNLg4APS0V/
6VYKsT2iLXOyfDyLPZ2U25BZgXVN4DF8+6cb1ytIk0DvdYVsMNxJsG7QAc+lfJqK
Cz3q9QBjFG+WJfpdenmg99ei4OHzbfe/Jll0J0XBNYbQ69QWAWVbJwwT3VVSJUUW
y56FFAHhZXkwvzccvJGOXzWCBPhxYo0Ta1NIXOT/CcqIXvIhPIYXJfqFec2pRPxm
fpquRTA4ubzBa5BpXziP1I3ZJB8kAQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFJ5s
HnZn3Juv375NwRPdRaDgpsdHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OUU0MjM5QTJFRDQxMUYxOUZENDdBOEJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCml9IMAwDBAWaX2ADBAGa
X3gwDQYJKoZIhvcNAQELBQADggEBAE1zZzxR3ceC9AJbRdNb/Oeoa89RJ6zG1Eud
Y2mu3qSEsYEh+d36v1sBmuZNlydP9qusXhynpDYeS7jDBZ52nTwJkc5auSGD3G6E
ejDadyp2T41XbisBlVFBSpOSi+4Y0FxNsAcppcXIWQ37xTf036p3xLdm5Fj8HR4V
EQ0DUXuMd6UtBgWCQji8f6WyGv3m0wVWXUbSqLiOa9kVJP9bCa2X2v+5iyg4v2Oo
xaARaCzNDQ/ECSb83TfYuJbulFwd9qELZ2WpUtFA+pllbOFbUVTm2a9ay6XwwHaj
AcU5wQNjPT9Gw3xX6Ftp5Pu0Rhjalpn9gBj6OR7Ekz6/aumBoTk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:24:35 2026 by rpki-client