Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE41354C706911F190465DB8CE1D38B0.roa
File: DE41354C706911F190465DB8CE1D38B0.roa (raw, json)
Hash identifier: qwUqDKMt7nYvGa8NH8i3r0tArktgl07QIkMQJD4AhJE=
Subject key identifier: 37:52:DC:3D:68:26:3A:8E:D6:93:39:14:7B:A4:F8:DF:AB:C2:BD:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D50A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE41354C706911F190465DB8CE1D38B0.roa
Signing time: Thu 25 Jun 2026 07:45:43 +0000
ROA not before: Thu 25 Jun 2026 07:45:38 +0000
ROA not after: Fri 31 Jul 2026 07:45:38 +0000
asID: 269741
IP address blocks: 154.95.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120074 (0x1d50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:45:38 2026 GMT
Not After : Jul 31 07:45:38 2026 GMT
Subject: CN=6a3cdca7-27dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:00:bd:3c:9b:0a:36:98:d2:14:0e:97:3b:
db:d4:68:23:01:29:0c:3d:e0:82:ec:70:e2:13:68:
ec:19:8a:8a:70:8f:12:73:89:5c:3a:dc:45:75:0b:
cd:74:f1:d8:1b:57:cc:11:87:9b:34:91:1f:1e:c8:
cf:96:75:1c:31:31:8f:7a:80:bc:03:e2:de:85:29:
62:d0:1d:c8:a5:70:0d:5b:dc:54:61:06:86:c2:2c:
00:e5:19:7f:ff:70:39:45:23:cf:10:ac:c0:c5:e1:
3f:d1:09:ae:ed:a4:74:24:93:2f:f2:15:74:ca:3b:
cd:c8:48:5b:5f:eb:d4:4f:ab:32:e4:61:22:cd:8f:
50:da:ce:b2:d5:de:ee:22:a5:50:c7:dc:24:4b:a6:
99:39:2a:ee:3c:41:30:2f:d3:40:46:dc:98:1e:8d:
26:69:9b:c0:f5:65:5c:75:cc:6d:60:11:0c:c5:76:
04:19:75:92:d2:99:ff:9e:a1:d5:66:b2:5c:50:fa:
68:c9:68:17:74:b8:09:ad:d4:a2:21:17:59:c7:8b:
a0:e0:82:a4:3f:6e:ea:d6:b9:e8:47:bf:21:0c:02:
48:80:3d:d0:c0:fe:08:fb:b2:62:87:69:ac:45:7e:
a2:7d:b1:f8:ba:c1:af:0c:be:26:1c:cd:eb:98:5b:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:DC:3D:68:26:3A:8E:D6:93:39:14:7B:A4:F8:DF:AB:C2:BD:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE41354C706911F190465DB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.25.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4e:c8:2f:5f:31:99:d0:cb:7f:50:c0:f5:c1:c3:69:4f:ad:
65:73:fe:3a:b3:5e:44:a1:e7:e9:7e:9c:d1:7e:d8:e8:06:7f:
77:8f:19:42:d6:21:2b:8a:72:13:a6:df:25:19:32:97:06:68:
a0:fa:65:b5:d1:6a:30:34:81:46:de:86:7f:3f:c5:31:10:f1:
8a:7a:8e:5c:bd:07:ca:f1:f5:67:6b:d7:00:65:9d:92:d2:03:
b7:38:82:49:60:f4:12:f6:79:2c:b3:60:b7:3f:30:96:a7:d1:
55:a8:2f:97:c5:ec:a1:f5:cc:b8:1e:99:a7:4d:9e:b0:9b:e8:
72:02:de:3e:ef:fa:54:4b:19:aa:43:53:fd:43:b2:11:a9:c2:
b2:b5:5c:44:79:bb:35:b5:b2:1a:28:56:4c:4b:df:7e:c1:70:
48:75:d2:4a:a9:34:ad:31:08:c8:90:9d:e6:87:b8:28:26:29:
f4:0d:c2:e2:b4:6a:22:82:5a:c9:b2:3e:a0:2d:d2:23:b7:ca:
ca:1e:3b:4d:f5:f8:0b:de:2e:8e:3c:cc:77:eb:2a:24:d1:83:
08:bd:e7:6a:9d:16:34:1c:ee:08:9a:fb:c0:42:bb:37:69:4b:
54:c4:a3:c4:dd:90:55:37:d7:25:2a:f1:25:2c:7a:95:f5:ab:
70:3e:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:18 2026 by rpki-client