Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C4EF9D62E9B11F1B9E0FFC6DAE4EC9C.roa
File: 9C4EF9D62E9B11F1B9E0FFC6DAE4EC9C.roa (raw, json)
Hash identifier: v3vR3frr8uaQmpqVdMMzt1hQa4OOSirVy4XbE4kJZco=
Subject key identifier: A1:A4:B4:25:66:A6:22:AA:0D:35:68:95:C4:55:C5:E6:EA:CB:79:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C251
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C4EF9D62E9B11F1B9E0FFC6DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 13:55:31 +0000
ROA not before: Thu 02 Apr 2026 13:55:26 +0000
ROA not after: Sun 10 May 2026 13:55:26 +0000
asID: 138915
IP address blocks: 154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115281 (0x1c251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 13:55:26 2026 GMT
Not After : May 10 13:55:26 2026 GMT
Subject: CN=69ce7552-2cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:71:b2:fd:05:be:23:c8:ff:4a:77:d1:5f:
5d:d7:be:bd:1b:86:7d:71:8a:24:be:d2:69:6c:6f:
8d:ce:79:07:24:46:1c:26:06:62:61:a7:35:32:0b:
20:1e:37:9f:b6:a0:fe:fe:b3:41:4e:b2:f3:66:63:
11:ac:7e:a1:13:91:2f:2f:b3:33:c2:26:e4:dd:b1:
b4:0c:26:b9:f0:34:90:4e:11:48:ed:5f:49:fb:d5:
b8:67:5b:eb:7d:60:e2:94:15:ee:c5:73:6e:92:ed:
92:d9:0e:60:c7:1e:c4:a1:54:42:8a:f5:cc:04:15:
30:90:f3:31:17:5f:45:7c:48:e9:e1:a9:49:7d:0b:
26:b4:fb:ab:dc:7e:e7:64:2d:cd:46:5e:22:c2:25:
cd:d1:ce:11:70:da:54:93:3b:df:90:ef:5b:ab:ef:
f5:c3:00:b3:93:fe:91:7b:56:0e:50:4a:dc:72:7e:
2f:7c:1b:2c:bf:7a:33:6d:6f:b9:59:6d:27:e5:d1:
c8:5a:3e:17:3f:51:0e:31:69:55:9c:5e:cd:42:0f:
ce:cb:18:6b:09:d3:39:aa:fa:6e:d1:4b:0c:cf:c0:
dd:af:51:64:b9:17:9d:72:cf:d9:17:20:e3:c2:73:
a9:25:23:05:60:b0:ae:f1:ae:87:53:88:5d:24:0a:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:B4:25:66:A6:22:AA:0D:35:68:95:C4:55:C5:E6:EA:CB:79:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C4EF9D62E9B11F1B9E0FFC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.89.0-154.95.94.255
154.95.96.0/22
154.95.108.0/22
154.95.116.0/22
154.95.122.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:10:96:9a:33:24:8e:0a:48:75:38:e1:5e:9d:0a:29:31:f4:
91:3a:0f:8e:eb:a2:85:56:63:b8:85:f2:19:be:55:6b:bc:ba:
84:b9:5e:a9:b7:eb:7f:83:bc:eb:d0:14:2a:d7:30:56:a6:f2:
6f:a5:7f:38:d1:e4:24:4c:28:ab:a4:fc:d9:9e:36:b1:6c:de:
a0:12:90:10:9f:27:59:9b:c8:fe:29:03:f7:0c:af:19:57:7a:
99:64:4e:2e:fb:3f:20:6f:ea:bf:72:56:3c:7f:b5:a9:be:f7:
21:f8:ad:d8:42:11:83:e9:25:39:46:4c:0a:0c:09:63:5f:2d:
fc:bb:e7:10:f9:62:d9:df:0f:2a:0c:8a:91:4e:42:52:1e:ee:
20:20:fa:45:58:4f:05:7d:99:0a:c9:d0:de:e1:78:2f:ec:86:
18:fb:e8:de:af:9d:55:67:e7:79:e8:97:97:11:3d:da:8e:5c:
b7:e7:20:4c:4c:86:57:cf:c7:ba:23:85:18:6b:9d:b0:fa:87:
a2:e3:88:7e:5f:3a:0c:13:96:22:7d:2e:d1:c8:ac:95:70:e7:
a1:d6:d1:a9:d4:f5:71:85:e5:aa:a1:f0:65:62:e7:82:05:76:
06:57:d2:77:c0:36:87:f2:2a:f3:1d:01:7f:5a:ab:74:17:97:
8d:05:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:42 2026 by rpki-client