Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05EFEE32771B11F1961D8FDCCE1D38B0.roa
File: 05EFEE32771B11F1961D8FDCCE1D38B0.roa (raw, json)
Hash identifier: cnjiROAMv9Geay1XO5TRHEDySqu1FjqPpSJaGkHHJMA=
Subject key identifier: 4B:F8:DA:2B:0A:B0:73:0A:FB:F0:C0:57:52:BE:1A:0A:BF:6F:02:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05EFEE32771B11F1961D8FDCCE1D38B0.roa
Signing time: Fri 03 Jul 2026 20:08:57 +0000
ROA not before: Fri 03 Jul 2026 20:08:52 +0000
ROA not after: Mon 10 Aug 2026 20:08:52 +0000
asID: 136907
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120554 (0x1d6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 20:08:52 2026 GMT
Not After : Aug 10 20:08:52 2026 GMT
Subject: CN=6a4816d9-952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:93:dd:ab:54:e8:f4:a2:17:c8:a5:da:12:
17:54:1b:37:96:57:7e:d7:db:f2:9c:c0:3d:e1:b8:
64:83:20:1e:b9:66:1c:60:4d:30:af:bc:29:8e:1d:
e9:25:56:5f:b5:b0:4d:88:60:00:06:fd:5e:6d:db:
13:90:ee:9a:13:65:c7:6c:b4:da:e6:39:f6:39:37:
8b:d8:b1:71:6b:fa:e0:1d:8a:26:d7:da:56:14:46:
c0:58:da:e5:c6:68:a2:b6:98:c0:60:10:d8:74:55:
f3:70:63:da:49:6f:b3:e0:91:d8:1a:13:50:c9:77:
b2:c2:8e:b4:22:80:76:fc:bd:f5:c6:68:11:57:d2:
1f:58:5e:63:d1:de:3c:b4:fe:e0:97:a1:6c:2b:41:
61:3f:aa:b8:9a:11:21:12:60:18:4c:cf:85:c1:b5:
56:07:df:3f:de:53:83:f3:8a:2f:5d:72:bb:69:76:
28:db:59:69:c0:a4:b7:7a:80:82:8f:31:20:3e:e2:
ef:1e:22:39:7e:3f:31:6d:7f:99:53:56:5a:86:32:
83:f8:b4:c7:11:56:35:45:ec:14:28:26:04:cf:eb:
87:25:57:96:43:b5:7a:bc:cf:3c:b8:4a:f7:cb:6b:
b5:3d:12:be:de:9b:96:ec:ab:bb:a5:81:dc:94:37:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:DA:2B:0A:B0:73:0A:FB:F0:C0:57:52:BE:1A:0A:BF:6F:02:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05EFEE32771B11F1961D8FDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
50:e2:69:c7:a3:0e:83:b7:0b:37:02:40:39:cb:4d:b8:bc:1c:
4e:88:5d:ef:6f:29:7b:16:4f:b0:41:cb:2a:01:4b:d6:d0:0a:
25:5c:fe:c0:38:a4:1a:b7:7c:30:42:13:f1:44:8f:f5:e2:1a:
6f:02:27:2d:ed:7c:54:45:c0:2b:9b:a4:80:e5:e5:9a:33:10:
45:89:20:5b:fc:da:65:eb:43:c3:9f:3e:66:b3:70:5c:0d:a4:
dd:6f:07:1d:a4:a0:30:44:d4:2d:9e:6c:c3:91:66:98:4b:53:
8f:dc:55:c2:a8:f7:d9:73:77:1b:da:55:25:26:fc:d8:48:37:
52:50:67:c6:66:46:4a:24:dc:be:a9:30:6c:ca:40:e0:22:de:
93:41:84:36:b8:4c:50:87:e6:88:08:22:3a:47:5b:c8:67:70:
24:e9:3a:35:15:9a:af:eb:7a:1f:9c:a2:ed:94:3c:a9:84:02:
99:84:4b:37:77:34:4a:48:0f:69:ca:8b:27:95:52:72:79:90:
6e:6a:b5:38:6d:da:ed:91:a0:46:59:fa:2c:d0:a5:8a:ab:9a:
c0:de:b9:24:24:45:9b:6f:48:4a:f0:2c:d1:59:4f:42:76:11:
a3:73:50:e6:b2:65:c2:dc:4b:b6:ce:54:33:b3:15:af:45:ed:
a9:f8:8a:46
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAdbqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzAzMjAwODUyWhcNMjYwODEwMjAwODUyWjAYMRYw
FAYDVQQDEw02YTQ4MTZkOS05NTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyKST3atU6PSiF8il2hIXVBs3lld+19vynMA94bhkgyAeuWYcYE0wr7wp
jh3pJVZftbBNiGAABv1ebdsTkO6aE2XHbLTa5jn2OTeL2LFxa/rgHYom19pWFEbA
WNrlxmiitpjAYBDYdFXzcGPaSW+z4JHYGhNQyXeywo60IoB2/L31xmgRV9IfWF5j
0d48tP7gl6FsK0FhP6q4mhEhEmAYTM+FwbVWB98/3lOD84ovXXK7aXYo21lpwKS3
eoCCjzEgPuLvHiI5fj8xbX+ZU1ZahjKD+LTHEVY1RewUKCYEz+uHJVeWQ7V6vM88
uEr3y2u1PRK+3puW7Ku7pYHclDfT9QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEv4
2isKsHMK+/DAV1K+Ggq/bwKUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNUVGRUUzMjc3MUIxMUYxOTYxRDhGRENDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCml9IMAwDBAWaX2ADBAGa
X3gwDQYJKoZIhvcNAQELBQADggEBAFDiacejDoO3CzcCQDnLTbi8HE6IXe9vKXsW
T7BByyoBS9bQCiVc/sA4pBq3fDBCE/FEj/XiGm8CJy3tfFRFwCubpIDl5ZozEEWJ
IFv82mXrQ8OfPmazcFwNpN1vBx2koDBE1C2ebMORZphLU4/cVcKo99lzdxvaVSUm
/NhIN1JQZ8ZmRkok3L6pMGzKQOAi3pNBhDa4TFCH5ogIIjpHW8hncCTpOjUVmq/r
eh+cou2UPKmEApmESzd3NEpID2nKiyeVUnJ5kG5qtTht2u2RoEZZ+izQpYqrmsDe
uSQkRZtvSErwLNFZT0J2EaNzUOayZcLcS7bOVDOzFa9F7an4ikY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:34 2026 by rpki-client