Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5844A36E5FFE11F1B342B6A4CE1D38B0.roa
File: 5844A36E5FFE11F1B342B6A4CE1D38B0.roa (raw, json)
Hash identifier: LuN7zKSQ/6Bc2/fHMs0xkzQOIUr33w44iou2bZPpNhE=
Subject key identifier: 5B:7F:53:FA:17:73:86:B6:EF:9A:45:BC:34:EF:CC:38:3E:0E:19:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5844A36E5FFE11F1B342B6A4CE1D38B0.roa
Signing time: Thu 04 Jun 2026 10:15:43 +0000
ROA not before: Thu 04 Jun 2026 10:15:39 +0000
ROA not after: Fri 10 Jul 2026 10:15:39 +0000
asID: 138915
IP address blocks: 154.95.68.0/24 maxlen: 24
154.95.69.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.76.0/24 maxlen: 24
154.95.77.0/24 maxlen: 24
154.95.78.0/24 maxlen: 24
154.95.79.0/24 maxlen: 24
154.95.80.0/24 maxlen: 24
154.95.81.0/24 maxlen: 24
154.95.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119200 (0x1d1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 10:15:39 2026 GMT
Not After : Jul 10 10:15:39 2026 GMT
Subject: CN=6a21504f-e61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:d7:86:4e:ef:86:a7:7d:dd:a6:ab:e0:ae:
2e:ea:0e:6c:dc:ad:76:7c:ed:ce:99:88:df:26:da:
60:52:9f:7f:7d:a3:2c:bb:51:7d:2c:d6:3d:96:e8:
b2:db:ec:e7:8e:de:3f:50:03:de:e4:d8:7a:f8:1c:
fa:d4:73:7e:a1:5f:f1:15:ca:07:a9:6b:a7:7c:fb:
08:7e:da:a8:d0:7e:1a:b8:6f:86:c4:16:68:eb:ea:
44:52:b3:fe:f0:68:b8:7c:57:fa:60:3f:56:d1:95:
b9:5b:76:f7:b1:e8:3a:22:73:71:8d:43:be:e2:69:
4c:ac:55:e5:86:ba:1c:34:54:a4:25:5e:42:97:79:
1a:11:a3:9b:a4:29:f5:9f:50:46:d3:43:2d:bc:40:
f0:8e:76:48:aa:cf:10:07:52:5d:3b:c1:cd:c8:de:
b1:1b:7f:f3:1d:18:8f:11:26:6d:52:a6:8a:4e:53:
c8:35:b6:81:68:72:ab:4c:51:fb:b6:7d:df:0f:91:
2d:33:29:39:bb:04:96:f8:78:88:d8:ca:ee:a2:32:
f4:25:8c:aa:49:f8:cb:9d:1a:60:cb:90:b9:13:32:
3a:32:e9:39:ce:26:c6:ee:6a:e3:09:a9:bc:8d:cf:
72:53:fb:ff:f2:06:f0:96:5f:1e:44:1a:f6:ca:10:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:53:FA:17:73:86:B6:EF:9A:45:BC:34:EF:CC:38:3E:0E:19:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5844A36E5FFE11F1B342B6A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.68.0/22
154.95.76.0-154.95.82.255
Signature Algorithm: sha256WithRSAEncryption
bf:cb:5d:e4:5f:cc:cb:15:1d:09:b4:c4:f2:52:cd:cf:cd:3b:
04:0b:1d:00:bf:c8:6f:4e:6a:96:3d:ba:a6:71:39:bd:98:cc:
e7:46:26:45:9f:30:7b:fb:57:50:f8:45:42:d4:a4:5c:74:f6:
97:1c:88:19:09:dc:4b:84:11:3b:86:fb:f7:25:97:d7:91:8a:
71:3c:58:45:78:bb:57:22:7a:fa:56:de:16:b5:8d:9b:9b:64:
31:0b:e0:ec:ee:0b:c2:82:58:58:48:aa:a7:8a:88:1d:f4:b0:
d8:9d:48:47:a3:2f:5a:90:4f:05:c8:85:0d:97:fe:df:72:4d:
af:8d:87:17:d8:a4:1e:96:9b:90:0f:82:eb:b9:7f:f6:d9:7f:
a0:32:e0:81:c7:f1:4b:b3:3d:9e:c5:64:09:03:40:19:78:7f:
5d:8d:d4:e9:99:13:84:3c:4e:75:e5:25:8d:dd:9d:76:68:ab:
84:65:f2:c4:5a:09:4f:0e:eb:df:d4:1e:dc:75:0d:18:7d:aa:
39:d1:c1:71:d0:62:0b:e6:63:6f:b1:ef:e3:77:ca:4d:14:72:
13:6c:49:21:a1:64:84:b9:b2:eb:e4:1a:e1:1e:ed:0f:50:c8:
41:a0:5a:45:01:50:b3:0f:9a:06:6c:5a:d7:be:f5:e9:17:e6:
b8:fb:52:cf
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdGgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA0MTAxNTM5WhcNMjYwNzEwMTAxNTM5WjAYMRYw
FAYDVQQDEw02YTIxNTA0Zi1lNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6GzXhk7vhqd93aar4K4u6g5s3K12fO3OmYjfJtpgUp9/faMsu1F9LNY9
luiy2+znjt4/UAPe5Nh6+Bz61HN+oV/xFcoHqWunfPsIftqo0H4auG+GxBZo6+pE
UrP+8Gi4fFf6YD9W0ZW5W3b3seg6InNxjUO+4mlMrFXlhrocNFSkJV5Cl3kaEaOb
pCn1n1BG00MtvEDwjnZIqs8QB1JdO8HNyN6xG3/zHRiPESZtUqaKTlPINbaBaHKr
TFH7tn3fD5EtMyk5uwSW+HiI2MruojL0JYyqSfjLnRpgy5C5EzI6Muk5zibG7mrj
Cam8jc9yU/v/8gbwll8eRBr2yhC3EwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFFt/
U/oXc4a275pFvDTvzDg+DhkYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODQ0QTM2RTVGRkUxMUYxQjM0MkI2QTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCml9EMAwDBAKaX0wDBACa
X1IwDQYJKoZIhvcNAQELBQADggEBAL/LXeRfzMsVHQm0xPJSzc/NOwQLHQC/yG9O
apY9uqZxOb2YzOdGJkWfMHv7V1D4RULUpFx09pcciBkJ3EuEETuG+/cll9eRinE8
WEV4u1cievpW3ha1jZubZDEL4OzuC8KCWFhIqqeKiB30sNidSEejL1qQTwXIhQ2X
/t9yTa+NhxfYpB6Wm5APguu5f/bZf6Ay4IHH8UuzPZ7FZAkDQBl4f12N1OmZE4Q8
TnXlJY3dnXZoq4Rl8sRaCU8O69/UHtx1DRh9qjnRwXHQYgvmY2+x7+N3yk0UchNs
SSGhZIS5suvkGuEe7Q9QyEGgWkUBULMPmgZsWte+9ekX5rj7Us8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:40 2026 by rpki-client