Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEB49EF4873411F1BF381FE8CE1D38B0.roa
File: AEB49EF4873411F1BF381FE8CE1D38B0.roa (raw, json)
Hash identifier: 7nlxYcuOiBG63BbV4vz4eL2XPMJ3BM7VvNIN4yzEh3o=
Subject key identifier: 42:AF:77:2D:4B:5D:96:F7:19:65:DC:96:8E:42:41:57:97:C0:E8:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEB49EF4873411F1BF381FE8CE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:52:57 +0000
ROA not before: Fri 24 Jul 2026 07:52:53 +0000
ROA not after: Mon 03 Aug 2026 07:52:53 +0000
asID: 274930
IP address blocks: 154.95.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121638 (0x1db26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 07:52:53 2026 GMT
Not After : Aug 3 07:52:53 2026 GMT
Subject: CN=6a6319d9-0a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:b8:c7:6a:6e:b7:4d:be:ab:c2:1e:8c:ee:
5a:b6:27:0c:70:f4:28:7d:8d:84:0a:4f:cb:8c:74:
63:27:ce:40:3b:d3:63:87:11:7e:6e:c2:c4:e1:2f:
c8:a7:fc:13:bd:b7:40:18:d0:33:a3:d1:4c:42:1f:
63:9e:30:7f:a3:e4:2b:5d:db:3b:34:43:13:bb:11:
24:68:d4:d6:75:08:a4:21:9c:10:a4:4c:8f:07:7f:
6b:13:f5:d3:45:44:69:5f:81:08:ff:26:c9:91:96:
f2:35:85:54:6b:bc:d4:17:f3:21:c6:51:3f:4a:66:
b8:78:7f:a2:f7:51:98:46:d7:15:06:05:83:32:0a:
3e:26:d6:a2:ce:97:57:e0:68:e3:ac:6a:2b:1f:ea:
97:9a:80:ee:6f:70:12:ea:13:72:71:23:83:b2:f1:
10:62:8a:41:a5:61:6c:2a:97:d0:c2:97:dd:10:c0:
17:a0:6c:a4:50:d2:46:1d:06:6d:98:ee:8b:f5:75:
f9:94:e9:3c:0b:59:82:0a:2f:40:4f:be:1a:88:cc:
80:bc:60:26:95:28:80:df:c7:f8:ff:18:b1:b5:dd:
c5:a2:94:f7:3e:b2:13:28:b4:64:a3:92:df:7a:46:
ad:ff:d4:a8:8d:67:e0:3b:8d:46:34:e4:d1:17:34:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AF:77:2D:4B:5D:96:F7:19:65:DC:96:8E:42:41:57:97:C0:E8:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEB49EF4873411F1BF381FE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:27:96:55:3c:2d:23:e8:52:f0:16:25:e8:34:eb:a2:66:df:
eb:54:f3:22:17:01:ff:23:b4:34:54:20:e8:35:6c:74:ab:c1:
77:b3:02:8b:87:16:b3:6d:74:b7:2b:99:58:95:f7:58:68:b2:
5b:0f:71:63:8f:8b:ce:bb:0e:84:d0:84:50:26:ec:d5:ba:2f:
76:01:5c:9f:aa:5e:fc:5e:47:bc:1f:0d:a8:d3:3e:07:10:7a:
f8:84:0f:89:c2:6d:ec:06:33:0d:c4:fa:68:5f:e3:c2:49:2c:
82:0a:a1:b9:37:9f:f1:8c:59:7f:18:9d:2f:c0:0d:b9:d8:72:
af:e8:28:21:8e:41:05:44:65:6b:55:2b:b4:4c:13:bb:be:fd:
98:70:4a:53:63:3a:04:d4:44:f0:1b:98:41:99:40:a6:2f:ba:
b9:d9:48:72:f8:5b:3f:dd:fd:f5:48:e6:07:1b:ed:10:ea:0b:
03:2f:d0:2e:80:d8:b4:42:15:7e:35:e7:92:7e:1f:5e:b4:9d:
2a:ee:56:9d:94:64:c3:cf:70:f1:0d:c1:94:ef:d2:20:fa:5b:
8b:17:3f:15:89:dd:7d:8d:6b:b3:c4:eb:d4:84:cc:cf:70:1b:
b3:5b:6b:7a:0a:3c:a6:f1:df:34:d0:d3:54:3f:53:20:5a:e3:
f1:2c:5f:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdsmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI0MDc1MjUzWhcNMjYwODAzMDc1MjUzWjAYMRYw
FAYDVQQDEw02YTYzMTlkOS0wYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn1+4x2put02+q8IejO5aticMcPQofY2ECk/LjHRjJ85AO9NjhxF+bsLE
4S/Ip/wTvbdAGNAzo9FMQh9jnjB/o+QrXds7NEMTuxEkaNTWdQikIZwQpEyPB39r
E/XTRURpX4EI/ybJkZbyNYVUa7zUF/MhxlE/Sma4eH+i91GYRtcVBgWDMgo+Jtai
zpdX4GjjrGorH+qXmoDub3AS6hNycSODsvEQYopBpWFsKpfQwpfdEMAXoGykUNJG
HQZtmO6L9XX5lOk8C1mCCi9AT74aiMyAvGAmlSiA38f4/xixtd3FopT3PrITKLRk
o5Lfekat/9SojWfgO41GNOTRFzQHUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEKv
dy1LXZb3GWXclo5CQVeXwOj8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRUI0OUVGNDg3MzQxMUYxQkYzODFGRThDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8ZMA0GCSqGSIb3DQEB
CwUAA4IBAQBLJ5ZVPC0j6FLwFiXoNOuiZt/rVPMiFwH/I7Q0VCDoNWx0q8F3swKL
hxazbXS3K5lYlfdYaLJbD3Fjj4vOuw6E0IRQJuzVui92AVyfql78Xke8Hw2o0z4H
EHr4hA+Jwm3sBjMNxPpoX+PCSSyCCqG5N5/xjFl/GJ0vwA252HKv6CghjkEFRGVr
VSu0TBO7vv2YcEpTYzoE1ETwG5hBmUCmL7q52Uhy+Fs/3f31SOYHG+0Q6gsDL9Au
gNi0QhV+NeeSfh9etJ0q7ladlGTDz3DxDcGU79Ig+luLFz8Vid19jWuzxOvUhMzP
cBuzW2t6Cjym8d800NNUP1MgWuPxLF8L
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:39 2026 by rpki-client