Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CCBF446460D11F1B36A8ED8CE1D38B0.roa
File: 1CCBF446460D11F1B36A8ED8CE1D38B0.roa (raw, json)
Hash identifier: cC4L5gVUfVNfGJHXc4o59cLYUoOzx+dTLc3CxBThSD4=
Subject key identifier: DA:D7:10:AD:49:A1:D9:E1:6E:0C:F8:EA:FE:82:14:3A:A0:CB:51:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C92F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CCBF446460D11F1B36A8ED8CE1D38B0.roa
Signing time: Sat 02 May 2026 09:55:56 +0000
ROA not before: Sat 02 May 2026 09:55:51 +0000
ROA not after: Tue 09 Jun 2026 09:55:51 +0000
asID: 138915
IP address blocks: 154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117039 (0x1c92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:55:51 2026 GMT
Not After : Jun 9 09:55:51 2026 GMT
Subject: CN=69f5ca2c-8036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:06:2f:71:90:f4:63:96:9a:46:93:a1:bb:
f0:8b:b5:a1:54:48:8d:e7:57:bd:fc:00:a9:c5:30:
dc:75:3e:6f:3b:0f:5c:a3:89:2a:23:ee:fc:bb:13:
c6:eb:d8:7b:29:11:7f:7b:0b:65:94:af:bb:e4:15:
b4:96:3a:92:e1:e7:81:f7:5b:3f:8d:20:31:66:82:
cc:42:33:12:09:b3:c9:d3:9d:97:db:04:e6:1f:e2:
08:9b:2d:8e:5c:8a:8a:43:ce:b8:e0:b6:64:8e:33:
d2:4d:64:2a:51:81:11:e5:60:94:f9:0f:4e:66:9b:
fb:48:9f:61:3a:94:02:26:a4:79:d4:24:c1:2c:87:
27:c1:0c:ed:83:ec:32:ac:a1:9b:e0:a9:72:be:77:
09:c7:f6:b9:9b:c7:22:ec:d6:8c:c0:14:3c:e0:9e:
1c:84:31:ba:78:13:99:82:2c:08:d3:f7:5d:5d:ba:
bb:52:13:01:9b:57:37:a4:3c:93:8c:02:1f:81:4d:
55:35:65:19:65:b7:29:30:71:ff:18:0d:9c:42:94:
78:aa:82:bc:a3:79:49:f5:45:a8:f6:2b:47:56:e7:
d6:ea:e9:bf:e9:ae:12:ff:a8:7a:89:ff:0a:a8:59:
0f:e6:3d:77:24:bf:23:8e:a8:ba:ec:2b:64:25:7a:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:10:AD:49:A1:D9:E1:6E:0C:F8:EA:FE:82:14:3A:A0:CB:51:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CCBF446460D11F1B36A8ED8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.83.0-154.95.88.255
Signature Algorithm: sha256WithRSAEncryption
1f:34:4c:f2:db:fd:7e:28:70:3b:36:47:77:48:01:46:51:60:
10:d6:03:80:1b:d2:0b:36:b8:69:6a:a7:ed:1d:ac:5f:bc:26:
d4:e5:f3:f1:f7:7d:7b:cf:9d:e6:65:4e:54:57:0f:7c:e8:06:
e8:38:37:48:2b:4c:20:e8:c6:7f:af:a8:1d:d5:98:0e:7b:48:
32:09:b5:c2:15:1b:92:11:fc:59:be:3c:15:57:52:9a:1e:e8:
2c:bd:9e:8a:a5:27:26:d8:44:00:b8:8c:dc:86:58:0a:1c:7c:
d9:a5:ac:74:d4:fd:a5:2e:6b:3c:34:06:51:fe:ed:3b:27:dc:
7c:cd:68:7f:97:73:af:b3:a8:cb:08:cc:cf:e6:6d:d4:82:43:
ee:c9:04:3f:c5:3f:e6:3f:61:77:67:34:31:77:41:9b:ba:76:
bd:d7:21:ef:9a:01:4c:4c:99:41:0e:25:40:63:fa:1b:f1:63:
1e:18:e7:81:07:8a:a9:83:b4:3e:a5:4d:d0:ab:f1:2f:e7:a7:
83:74:6f:49:14:47:6c:1a:0a:2c:54:08:16:13:a4:cf:c3:ad:
18:d5:47:c8:a6:dc:fb:c5:f9:43:a6:bb:98:a3:e7:c5:a4:13:
19:a0:70:64:cd:dc:f5:10:83:c0:98:43:91:01:fc:40:a3:b1:
aa:3f:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:55 2026 by rpki-client