Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96C9DF083A5D11F1BC50D7E7CE1D38B0.roa
File: 96C9DF083A5D11F1BC50D7E7CE1D38B0.roa (raw, json)
Hash identifier: HQmQ8HcPF6aEh1SFg9E1nSnQ2YV/TZy9xkJOt+0S5Js=
Subject key identifier: 67:58:57:C2:FC:60:F3:CF:47:75:4C:FD:6B:97:1E:73:CA:94:57:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96C9DF083A5D11F1BC50D7E7CE1D38B0.roa
Signing time: Fri 17 Apr 2026 13:01:46 +0000
ROA not before: Fri 17 Apr 2026 13:01:42 +0000
ROA not after: Sun 24 May 2026 13:01:42 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116189 (0x1c5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 13:01:42 2026 GMT
Not After : May 24 13:01:42 2026 GMT
Subject: CN=69e22f3a-51d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:92:86:2c:b1:09:aa:23:84:51:b9:13:3e:
d6:7a:64:02:84:75:44:12:35:b9:9b:62:00:88:fd:
70:68:3c:99:e6:c3:90:52:12:7d:61:ac:41:27:d5:
a8:3f:9d:b5:03:e7:de:81:f9:55:68:64:d2:43:54:
c2:78:00:de:51:4e:43:1b:08:65:1f:15:94:d5:61:
c4:b0:c0:6c:ae:be:e8:ec:7d:25:85:ba:2c:d7:1a:
f2:68:08:48:0a:26:af:29:39:17:8f:ab:69:ee:27:
cb:c7:27:28:0d:fa:a5:ce:78:84:c2:b9:2c:e7:87:
b8:ad:e7:4c:71:12:43:77:cb:3a:5e:74:42:9a:84:
c8:b0:25:7e:2e:2a:f0:e5:69:1b:0f:b9:ab:44:2b:
e6:2f:5d:a8:25:2c:ac:e6:9c:47:21:34:0c:42:4a:
b6:8f:49:e1:32:12:96:34:80:c1:c4:3b:ba:c5:82:
5d:e4:e4:7d:ea:69:f2:ce:dd:20:0a:a6:61:a0:01:
d2:97:a9:11:39:aa:a2:4a:b0:a0:17:0c:e5:4b:0d:
50:07:d5:10:94:9c:0f:01:e4:a8:be:29:68:cb:db:
e4:04:6b:e2:85:db:17:18:bc:ca:5e:35:19:f5:51:
5b:70:1e:50:75:02:f1:44:5e:69:3d:f5:f7:3e:16:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:57:C2:FC:60:F3:CF:47:75:4C:FD:6B:97:1E:73:CA:94:57:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96C9DF083A5D11F1BC50D7E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4a:5a:e8:36:1b:52:d3:1c:72:0a:0e:44:58:72:d3:ed:3b:
ea:75:fa:23:93:6f:74:a9:22:b1:6a:73:26:aa:3c:68:c7:a6:
83:69:a8:b5:a4:3d:dc:d7:43:c3:c0:82:be:6e:96:f3:8c:74:
74:5f:c1:88:94:2a:de:8b:4e:f2:40:3c:74:fe:1c:c3:5f:48:
30:d0:57:83:15:3b:c8:05:6b:35:14:ee:a8:bf:af:44:2f:aa:
52:4f:f1:fb:43:47:3f:95:3c:2b:52:a5:3a:ea:bc:de:a4:6b:
02:b3:28:5f:4a:16:55:23:71:70:c5:28:95:80:ee:d9:66:5c:
ec:92:d8:db:b7:e2:a8:a0:97:70:4c:4a:eb:49:4e:1b:20:c8:
31:27:ce:f1:53:d1:49:d5:fc:9e:d3:b7:ca:fc:56:19:d8:ee:
53:8f:a7:d0:f6:2b:4e:7a:04:b5:cc:45:05:1d:cf:3c:6f:47:
50:45:0c:6f:9f:d1:90:4b:c8:de:e4:30:c0:5e:fb:f7:ce:a7:
fd:5f:55:74:ca:77:ec:9e:93:bd:d5:de:03:bf:d2:c7:1d:a5:
b4:81:e7:f3:2e:fc:7c:e9:ee:fe:85:d6:2f:8d:55:eb:54:5b:
7c:20:fd:85:86:1f:0a:98:dd:29:cd:72:33:4d:3e:63:1b:33:
2d:05:50:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcXdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE3MTMwMTQyWhcNMjYwNTI0MTMwMTQyWjAYMRYw
FAYDVQQDEw02OWUyMmYzYS01MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnmSShiyxCaojhFG5Ez7WemQChHVEEjW5m2IAiP1waDyZ5sOQUhJ9YaxB
J9WoP521A+fegflVaGTSQ1TCeADeUU5DGwhlHxWU1WHEsMBsrr7o7H0lhbos1xry
aAhICiavKTkXj6tp7ifLxycoDfqlzniEwrks54e4redMcRJDd8s6XnRCmoTIsCV+
Lirw5WkbD7mrRCvmL12oJSys5pxHITQMQkq2j0nhMhKWNIDBxDu6xYJd5OR96mny
zt0gCqZhoAHSl6kROaqiSrCgFwzlSw1QB9UQlJwPAeSoviloy9vkBGvihdsXGLzK
XjUZ9VFbcB5QdQLxRF5pPfX3PhZzDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGdY
V8L8YPPPR3VM/WuXHnPKlFeWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NkM5REYwODNBNUQxMUYxQkM1MEQ3RTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQBxSlroNhtS0xxyCg5EWHLT7Tvqdfojk290qSKxanMmqjxox6aDaai1
pD3c10PDwIK+bpbzjHR0X8GIlCrei07yQDx0/hzDX0gw0FeDFTvIBWs1FO6ov69E
L6pST/H7Q0c/lTwrUqU66rzepGsCsyhfShZVI3FwxSiVgO7ZZlzsktjbt+KooJdw
TErrSU4bIMgxJ87xU9FJ1fye07fK/FYZ2O5Tj6fQ9itOegS1zEUFHc88b0dQRQxv
n9GQS8je5DDAXvv3zqf9X1V0ynfsnpO91d4Dv9LHHaW0gefzLvx86e7+hdYvjVXr
VFt8IP2Fhh8KmN0pzXIzTT5jGzMtBVDR
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:20 2026 by rpki-client