Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95634C3C07E311F1A2306893DAE4EC9C.roa
File: 95634C3C07E311F1A2306893DAE4EC9C.roa (raw, json)
Hash identifier: gcEfkyXdMPSKVpyI5DY3iHDNMzwzxsTDAHsWweM0zaI=
Subject key identifier: 3E:79:BF:41:B1:91:61:A1:5F:6F:F3:11:BE:20:75:50:21:D3:33:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B931
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95634C3C07E311F1A2306893DAE4EC9C.roa
Signing time: Thu 12 Feb 2026 07:22:27 +0000
ROA not before: Thu 12 Feb 2026 07:22:22 +0000
ROA not after: Mon 25 May 2026 07:22:22 +0000
asID: 13335
IP address blocks: 154.194.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112945 (0x1b931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 12 07:22:22 2026 GMT
Not After : May 25 07:22:22 2026 GMT
Subject: CN=698d7fb3-2198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:43:c2:9a:da:1e:e1:32:84:ae:80:e7:6f:
ef:66:30:39:1d:05:6f:d6:36:69:2d:a2:d6:c3:93:
3d:9a:56:97:10:ac:95:57:90:75:c8:74:1b:cd:5e:
98:a5:d1:f6:7e:83:65:01:2a:18:17:67:b2:7f:58:
ce:34:5b:49:0e:b0:eb:81:ff:c2:90:8d:de:73:97:
5e:e1:eb:20:df:16:e0:05:0a:7d:99:62:7c:e6:60:
be:c9:2e:af:0e:ba:83:ba:95:98:35:97:db:72:cb:
98:8a:da:4f:f6:ac:e7:43:ea:61:53:0b:58:7f:50:
1f:19:7c:a7:a9:28:88:bc:be:f0:5c:41:72:f1:bc:
b3:c6:88:ce:94:73:53:96:85:ac:1e:2f:91:5b:12:
17:64:34:86:15:cc:0d:ef:49:c5:3a:d5:14:8d:11:
b6:5a:2e:f0:9e:ae:7f:11:13:05:70:99:25:1b:42:
ca:e6:1f:47:93:40:09:ed:fc:e2:63:95:67:40:d7:
e8:b6:8c:f9:7b:f9:9f:02:a6:cf:34:fb:a6:ad:24:
8c:d2:61:4a:d7:f3:b0:30:2a:a8:fc:d6:ed:b3:3b:
d7:76:c3:51:d4:e5:99:58:c8:58:4c:0a:b8:f3:34:
aa:37:e8:32:3b:45:1b:9d:8d:e2:89:81:cd:1e:ab:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:BF:41:B1:91:61:A1:5F:6F:F3:11:BE:20:75:50:21:D3:33:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95634C3C07E311F1A2306893DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a2:49:0a:f0:39:af:44:8e:72:da:77:95:eb:9d:8e:94:8c:
2f:6c:6c:63:7a:ad:1c:0b:2d:6c:ec:f2:db:5b:c4:ee:26:f9:
6f:45:e4:a0:92:32:d7:6c:f5:02:f3:8f:db:76:3a:81:3d:4e:
83:4b:53:65:04:f1:53:f5:f3:f8:d7:6d:3f:f1:36:de:10:82:
2c:cd:ae:41:29:11:c5:52:50:d9:35:aa:89:0d:63:58:de:4c:
0a:a4:f2:36:9d:13:91:80:12:a0:c3:8b:cb:7b:2c:92:75:48:
a3:81:98:98:9f:92:28:80:32:08:e0:f8:df:01:65:e2:3c:32:
93:40:51:c7:5e:d0:ef:f4:17:5a:1e:13:96:0c:0d:28:89:69:
19:61:01:6d:49:28:4e:ee:5f:10:05:0b:47:bb:8b:e5:f0:06:
57:02:05:44:d4:97:58:e1:7a:72:7f:71:50:d3:43:6a:46:42:
ff:a9:eb:92:ef:30:07:fc:3a:3d:83:32:b3:e6:64:0e:b6:b5:
50:97:38:1e:8f:0f:db:f5:6e:a6:af:af:56:bc:e2:b3:40:21:
72:58:7a:fe:4f:b7:63:08:a3:02:7f:80:bb:04:33:33:14:59:
4a:49:c2:89:e0:b7:d4:12:74:74:6a:4a:21:cf:15:aa:5f:df:
77:e6:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:40:46 2026 by rpki-client