Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B9737DC73EF11F19340FA13CF1D38B0.roa
File: 2B9737DC73EF11F19340FA13CF1D38B0.roa (raw, json)
Hash identifier: kvhNW8m+nMwerUT7gq2l9QEeMNCK8tQOb/uj9ZpYHkY=
Subject key identifier: AA:FB:91:6A:D6:E5:68:E6:82:AF:1F:7F:9A:B6:97:4D:F5:81:1B:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D610
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B9737DC73EF11F19340FA13CF1D38B0.roa
Signing time: Mon 29 Jun 2026 19:17:29 +0000
ROA not before: Mon 29 Jun 2026 19:17:25 +0000
ROA not after: Thu 30 Jul 2026 19:17:25 +0000
asID: 32043
IP address blocks: 154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120336 (0x1d610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 19:17:25 2026 GMT
Not After : Jul 30 19:17:25 2026 GMT
Subject: CN=6a42c4c9-05f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:e0:81:48:e6:68:93:44:13:61:fb:3a:4d:
a2:21:21:b2:e7:8f:3e:90:1e:b4:d0:7f:f1:ba:4a:
22:51:99:7b:9e:95:b0:d5:50:a8:03:11:f1:96:3a:
10:ce:eb:ce:22:46:46:2e:39:36:c5:f6:bd:fa:f0:
c8:36:b9:d6:2f:c5:d7:00:59:4b:e2:dc:c0:56:e7:
f7:03:46:3e:4c:27:bc:62:aa:3e:ea:8a:88:f7:11:
17:1c:d8:bc:bf:f2:6e:96:a1:76:5c:73:43:b0:b3:
1e:37:c7:97:76:97:df:41:58:73:9d:da:af:ea:10:
5b:17:6f:02:1e:a3:09:cd:2c:42:20:f8:1c:91:92:
ee:f6:5d:e0:8e:47:bd:79:96:fd:1b:b3:4a:8e:41:
a7:82:98:83:17:4e:b4:3f:e7:30:25:21:e6:99:5f:
4b:e7:cd:19:85:cc:4b:83:95:50:c8:59:c4:a3:83:
91:c6:19:f2:15:c6:a2:14:d3:63:fe:fa:17:4f:c5:
00:bf:8a:38:c2:0f:33:9b:5b:76:b9:6f:df:df:cb:
02:45:18:f7:5d:30:38:5f:13:5d:d4:d8:65:6e:c7:
cf:63:33:d8:dc:14:7c:51:ac:2b:1a:a7:09:d3:dc:
19:b0:9c:fc:ac:d7:22:7e:c3:56:67:10:be:b3:b3:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:91:6A:D6:E5:68:E6:82:AF:1F:7F:9A:B6:97:4D:F5:81:1B:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B9737DC73EF11F19340FA13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
12:d3:4c:4f:a9:d0:9b:10:a0:6f:8f:21:85:6c:8e:77:1f:b1:
eb:d5:5f:35:1f:36:5c:49:01:0b:dd:c0:b2:fd:46:97:12:89:
ef:bf:ed:a4:d4:4c:81:6b:ce:9a:b0:04:70:43:6e:26:44:a3:
91:39:d7:4e:9f:e1:08:db:65:93:8b:ad:3f:07:99:43:fe:fe:
f0:d6:b6:7f:24:66:de:d1:f8:8e:31:9e:56:bc:a7:88:5e:08:
d6:78:fd:3b:06:e4:94:72:8e:3f:68:25:f6:c8:71:9d:05:fd:
d3:3c:06:75:c2:8c:2f:c4:db:b0:cc:b9:61:9a:83:37:01:59:
d2:17:f7:f0:ff:b1:59:d1:ab:ee:27:51:bb:fb:14:76:70:3e:
a9:0a:14:7d:7c:33:87:2a:a4:78:77:14:ab:81:1c:24:0f:10:
65:8c:5e:fb:ef:00:3c:3e:17:07:50:5e:8f:0a:7f:2f:42:02:
f7:5c:f7:62:c6:fd:9e:54:6f:d2:12:34:88:e0:49:21:c4:60:
29:3f:e8:67:04:f7:82:27:2d:da:01:e9:16:d6:1b:e8:ec:5a:
fa:d6:7b:a5:40:2f:f0:37:3d:de:a2:30:0e:9e:7f:0c:a0:22:
9d:e4:83:57:67:3e:c3:2a:f5:cf:48:07:10:25:7c:81:83:d9:
f1:32:ea:f1
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdYQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI5MTkxNzI1WhcNMjYwNzMwMTkxNzI1WjAYMRYw
FAYDVQQDEw02YTQyYzRjOS0wNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2D7ggUjmaJNEE2H7Ok2iISGy548+kB600H/xukoiUZl7npWw1VCoAxHx
ljoQzuvOIkZGLjk2xfa9+vDINrnWL8XXAFlL4tzAVuf3A0Y+TCe8Yqo+6oqI9xEX
HNi8v/JulqF2XHNDsLMeN8eXdpffQVhzndqv6hBbF28CHqMJzSxCIPgckZLu9l3g
jke9eZb9G7NKjkGngpiDF060P+cwJSHmmV9L580ZhcxLg5VQyFnEo4ORxhnyFcai
FNNj/voXT8UAv4o4wg8zm1t2uW/f38sCRRj3XTA4XxNd1NhlbsfPYzPY3BR8Uawr
GqcJ09wZsJz8rNcifsNWZxC+s7PgUwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKr7
kWrW5Wjmgq8ff5q2l031gRvjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQjk3MzdEQzczRUYxMUYxOTM0MEZBMTNDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaXwYDBAGaXwgwDQYJ
KoZIhvcNAQELBQADggEBABLTTE+p0JsQoG+PIYVsjncfsevVXzUfNlxJAQvdwLL9
RpcSie+/7aTUTIFrzpqwBHBDbiZEo5E5106f4QjbZZOLrT8HmUP+/vDWtn8kZt7R
+I4xnla8p4heCNZ4/TsG5JRyjj9oJfbIcZ0F/dM8BnXCjC/E27DMuWGagzcBWdIX
9/D/sVnRq+4nUbv7FHZwPqkKFH18M4cqpHh3FKuBHCQPEGWMXvvvADw+FwdQXo8K
fy9CAvdc92LG/Z5Ub9ISNIjgSSHEYCk/6GcE94InLdoB6RbWG+jsWvrWe6VAL/A3
Pd6iMA6efwygIp3kg1dnPsMq9c9IBxAlfIGD2fEy6vE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:09 2026 by rpki-client