Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9573E56A0EFF11F1B06551C9DAE4EC9C.roa
File: 9573E56A0EFF11F1B06551C9DAE4EC9C.roa (raw, json)
Hash identifier: mHYTm0etZ4Iw/FZvhr0+sWFXrzabWJ1iYbre4dU3TCo=
Subject key identifier: 96:33:DE:0F:38:BD:A3:2C:82:C5:10:83:55:3D:E3:35:DB:40:73:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9573E56A0EFF11F1B06551C9DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:30:31 +0000
ROA not before: Sat 21 Feb 2026 08:30:27 +0000
ROA not after: Tue 24 Mar 2026 08:30:27 +0000
asID: 139923
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113366 (0x1bad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:30:27 2026 GMT
Not After : Mar 24 08:30:27 2026 GMT
Subject: CN=69996d27-ce98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:3c:c5:35:c6:95:b0:63:c5:61:df:63:5a:
e2:86:59:c7:74:f4:99:66:2d:47:7d:41:c6:45:4a:
e7:1b:f2:b0:e2:a0:35:9a:37:9c:4d:97:0b:ca:9e:
6b:55:04:47:3e:f5:61:52:34:f4:8f:32:95:37:90:
c3:ff:e9:a9:44:15:f6:9e:1f:8f:fe:d9:3f:05:e5:
5a:d0:7c:ac:7b:d0:c6:32:0e:31:80:2b:ca:37:d4:
78:1e:08:82:31:91:5c:d4:39:7d:19:ac:25:de:fc:
b2:46:d1:bb:54:5a:49:84:a6:a0:4e:4f:a5:42:7d:
80:9a:e0:70:93:61:1b:df:f8:c9:98:86:4a:ca:35:
db:54:42:f9:3a:8e:82:bc:62:2d:04:6b:11:6c:3a:
8a:b8:e0:48:1b:96:61:be:bb:b2:1a:64:d1:28:65:
d4:67:69:f5:d3:1f:2f:ba:db:81:ea:c7:0c:99:15:
09:ae:06:3c:75:a4:d0:36:f8:ec:b9:d5:8c:07:f7:
91:04:0b:1c:ef:ab:e3:7d:b0:db:c2:95:f4:06:f2:
12:dd:27:a7:cf:6a:a0:8f:ca:6a:7d:89:19:c5:95:
7c:01:24:dd:62:f4:bf:24:b5:5b:8a:71:d7:fe:2b:
f3:df:4c:bf:83:e2:93:91:b3:85:b6:6d:dd:9a:5f:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:DE:0F:38:BD:A3:2C:82:C5:10:83:55:3D:E3:35:DB:40:73:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9573E56A0EFF11F1B06551C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7c:6e:a1:24:5f:0e:f8:ee:4a:c6:87:89:89:d0:7e:a9:c9:
4a:8c:22:d8:43:88:84:00:56:f4:de:32:89:82:93:f3:df:65:
40:3a:40:cb:7f:57:b5:5b:56:db:c5:75:1e:23:6c:72:c0:92:
92:4f:a8:3a:70:b7:93:37:b1:f9:dc:97:5e:e2:be:57:fe:b1:
f2:b2:0a:26:65:6d:b1:e7:98:eb:ad:dd:f1:85:37:75:d2:42:
f1:81:53:c4:24:ed:de:49:4e:bf:10:c2:52:4f:42:e3:be:cc:
de:79:8e:6d:5a:78:33:15:f6:32:6f:32:36:31:64:92:f3:01:
5b:78:c9:35:09:70:99:5b:11:c9:f1:c2:52:30:23:ea:83:eb:
db:2a:9e:4d:47:54:83:67:37:49:14:7a:60:c7:08:87:1e:87:
4a:57:49:df:d5:95:b7:3e:47:c3:6d:92:1c:93:63:0b:3f:23:
54:60:0a:bb:b2:1a:6a:0d:9f:5f:17:7b:c0:88:c2:5a:49:2d:
cc:78:ba:9a:95:fa:29:a1:7c:1e:55:ca:71:3c:8b:51:14:76:
2b:c1:66:00:32:42:70:ac:f3:f3:36:11:82:e3:fc:35:ea:ec:
35:73:65:83:42:d4:56:dc:a6:e7:42:39:1d:48:41:0d:0d:77:
b2:70:c1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:42 2026 by rpki-client