Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82D230A5FFF11F1954520ADCE1D38B0.roa
File: F82D230A5FFF11F1954520ADCE1D38B0.roa (raw, json)
Hash identifier: NmI0/HPt0pTkM9mHrsWOSI/w5HppasWCHqPCfSAoRn8=
Subject key identifier: E2:F4:87:9A:20:EC:F8:71:27:C4:36:71:D6:EA:FB:13:58:1D:B8:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82D230A5FFF11F1954520ADCE1D38B0.roa
Signing time: Thu 04 Jun 2026 10:27:21 +0000
ROA not before: Thu 04 Jun 2026 10:27:16 +0000
ROA not after: Fri 10 Jul 2026 10:27:16 +0000
asID: 140666
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
154.95.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119204 (0x1d1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 10:27:16 2026 GMT
Not After : Jul 10 10:27:16 2026 GMT
Subject: CN=6a215309-ae78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:92:23:f5:cd:da:ef:78:87:fd:26:63:77:
a8:0b:8a:08:6f:c3:f8:53:e7:f5:cc:89:94:17:71:
6d:79:1a:1d:59:a7:d5:9c:65:b0:ff:17:95:bc:47:
f6:9e:7a:0e:72:94:bd:81:16:25:27:c0:82:f5:fa:
0f:78:0b:75:2e:b7:04:54:a4:f3:91:df:51:81:29:
91:64:06:a7:89:53:72:5a:65:cf:6a:0c:ce:de:8b:
e7:c8:a1:ac:b9:f0:c6:f4:1c:fd:98:29:15:4b:a0:
58:4f:87:65:a7:fa:57:fd:6f:f7:1f:5c:18:ac:5f:
6a:36:de:e9:1f:e6:da:8e:87:c5:3c:ed:25:f6:83:
92:23:2a:1d:05:23:eb:03:83:63:3a:9a:53:5f:52:
0b:83:7d:4e:59:54:1c:50:05:3e:c9:d0:12:dd:98:
97:01:14:62:10:1d:82:b0:05:73:98:36:85:91:87:
dc:d5:ab:62:42:87:b9:d4:7f:5a:52:78:d5:54:83:
83:0b:74:34:d8:44:9e:3e:18:be:cf:91:01:06:ae:
2e:9d:24:51:cd:8c:e4:5c:5f:6f:8e:e5:8d:2a:b0:
1a:e6:77:d0:0e:01:f0:6f:be:5f:e8:3c:c9:59:8d:
a0:57:8f:30:3c:b7:c8:cb:57:f8:71:1b:0f:cd:25:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:87:9A:20:EC:F8:71:27:C4:36:71:D6:EA:FB:13:58:1D:B8:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82D230A5FFF11F1954520ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
154.95.124.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:02:14:ad:a8:b3:af:ef:19:f4:5a:4e:57:54:f3:21:74:fd:
75:3e:12:73:cf:a2:ff:4e:dd:bf:c4:c9:ec:d7:a8:e1:49:be:
6e:79:b7:02:84:7d:f5:8b:11:4a:6b:01:af:7b:b0:f3:40:b4:
e2:0d:9d:d0:46:4b:7e:ce:56:9f:f1:91:8f:bf:27:ab:81:0a:
ef:53:6a:73:f7:63:4e:73:23:4b:cf:9d:3d:72:f3:4c:56:c8:
c9:e9:2d:f7:69:cc:56:39:cd:6a:35:ad:29:e2:8f:b1:5e:34:
db:f6:65:6e:4b:c2:85:ce:e7:dd:4e:6c:d3:f7:dc:a1:b5:40:
7a:2a:e8:6d:18:f8:d1:8c:5d:cb:6d:58:97:59:d4:74:bf:f9:
f0:84:7e:cc:2a:1e:87:cf:ef:2b:89:db:4e:ba:52:4d:a0:51:
d6:e4:80:17:d6:0e:72:5b:c6:7d:fd:7d:5a:7f:23:42:5a:59:
e9:20:f3:3a:2a:ea:52:f4:fa:e4:b6:05:45:52:d0:d2:6d:81:
e5:ec:02:9d:70:7a:00:ef:c1:e5:1b:40:a7:c0:9b:b7:e1:02:
64:7b:65:18:b6:52:c9:3e:62:f6:a4:5c:8b:eb:99:64:31:99:
7c:c7:09:82:e4:a9:10:c0:b9:00:08:4d:19:7a:cb:00:d3:9d:
26:a5:b6:97
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAdGkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA0MTAyNzE2WhcNMjYwNzEwMTAyNzE2WjAYMRYw
FAYDVQQDEw02YTIxNTMwOS1hZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0NSSI/XN2u94h/0mY3eoC4oIb8P4U+f1zImUF3FteRodWafVnGWw/xeV
vEf2nnoOcpS9gRYlJ8CC9foPeAt1LrcEVKTzkd9RgSmRZAaniVNyWmXPagzO3ovn
yKGsufDG9Bz9mCkVS6BYT4dlp/pX/W/3H1wYrF9qNt7pH+bajofFPO0l9oOSIyod
BSPrA4NjOppTX1ILg31OWVQcUAU+ydAS3ZiXARRiEB2CsAVzmDaFkYfc1atiQoe5
1H9aUnjVVIODC3Q02ESePhi+z5EBBq4unSRRzYzkXF9vjuWNKrAa5nfQDgHwb75f
6DzJWY2gV48wPLfIy1f4cRsPzSVXBwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOL0
h5og7PhxJ8Q2cdbq+xNYHbh5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODJEMjMwQTVGRkYxMUYxOTU0NTIwQURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCml9IMAwDBAWaX2ADBAGa
X3gDBACaX3wwDQYJKoZIhvcNAQELBQADggEBALQCFK2os6/vGfRaTldU8yF0/XU+
EnPPov9O3b/EyezXqOFJvm55twKEffWLEUprAa97sPNAtOINndBGS37OVp/xkY+/
J6uBCu9TanP3Y05zI0vPnT1y80xWyMnpLfdpzFY5zWo1rSnij7FeNNv2ZW5LwoXO
591ObNP33KG1QHoq6G0Y+NGMXcttWJdZ1HS/+fCEfswqHofP7yuJ2066Uk2gUdbk
gBfWDnJbxn39fVp/I0JaWekg8zoq6lL0+uS2BUVS0NJtgeXsAp1wegDvweUbQKfA
m7fhAmR7ZRi2Usk+YvakXIvrmWQxmXzHCYLkqRDAuQAITRl6ywDTnSaltpc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:18:05 2026 by rpki-client