Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D77F694707511F1999A3AFECE1D38B0.roa
File: 8D77F694707511F1999A3AFECE1D38B0.roa (raw, json)
Hash identifier: fixLpq5zGZB8CvWZTXnG4VRrJuf2sVY1+kDNqcRVpnQ=
Subject key identifier: 6B:AD:7D:AA:FD:DB:40:A2:9A:8B:99:B4:79:F2:8F:EA:DD:C9:07:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D522
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D77F694707511F1999A3AFECE1D38B0.roa
Signing time: Thu 25 Jun 2026 09:09:21 +0000
ROA not before: Thu 25 Jun 2026 09:09:16 +0000
ROA not after: Sat 01 Aug 2026 09:09:16 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
154.81.53.0/24 maxlen: 24
154.81.54.0/24 maxlen: 24
154.81.55.0/24 maxlen: 24
154.81.192.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120098 (0x1d522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:09:16 2026 GMT
Not After : Aug 1 09:09:16 2026 GMT
Subject: CN=6a3cf041-ab06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:4e:37:bf:4e:95:df:7f:20:5d:19:af:05:
09:e6:82:2e:4f:49:6a:4b:a9:48:33:ff:0a:c4:95:
7c:11:9f:18:db:e4:23:cd:12:ce:d4:8d:61:a0:fe:
73:04:73:a2:7c:b8:d9:a6:3d:59:f1:a5:6a:78:ee:
f5:4c:3b:cc:54:9e:eb:1e:7c:88:c7:66:90:a4:22:
5b:d3:b1:1e:fe:e5:ed:e8:95:97:07:f9:b9:6b:e3:
ef:7c:f1:97:fc:ec:45:46:a4:9c:08:3a:d4:a6:71:
db:b2:11:b2:95:68:e5:6f:94:67:8f:8d:70:cd:c8:
b6:9d:21:4b:51:1a:8e:67:0b:17:a3:d7:a6:88:02:
1a:66:81:46:ac:2d:ea:d6:fb:70:72:5c:a6:08:8c:
27:f8:63:b1:cb:29:74:b0:32:12:4c:4f:2c:a3:ed:
fa:f5:d2:08:ce:18:f3:08:0b:76:db:5d:64:77:98:
7f:de:81:b7:97:0f:b3:05:4b:e8:d9:75:5a:28:8b:
e6:bc:5c:99:77:5a:03:13:d3:03:0b:5c:67:4e:69:
15:3b:d2:23:31:6a:18:22:96:da:45:ae:29:e3:1d:
ab:53:20:7f:40:3f:5a:f6:38:7d:88:36:32:f4:b6:
f6:e4:7b:a2:48:ff:35:cd:85:07:ec:d5:07:54:3c:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:7D:AA:FD:DB:40:A2:9A:8B:99:B4:79:F2:8F:EA:DD:C9:07:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D77F694707511F1999A3AFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/24
154.81.53.0-154.81.55.255
154.81.192.0/24
154.81.195.0-154.81.199.255
Signature Algorithm: sha256WithRSAEncryption
06:2d:6c:0b:6b:73:5a:0b:11:3f:54:ba:e6:31:3e:4b:9c:50:
03:45:74:d9:95:6c:69:95:97:35:8e:35:11:83:df:60:29:ce:
20:33:ef:58:e2:be:20:07:de:6c:e9:35:4c:a8:14:e2:15:07:
bd:4f:ad:bb:c0:f1:c2:53:5f:05:b2:b2:f9:a0:da:7c:7e:af:
b1:cb:a6:c7:78:30:1f:82:bd:25:cd:c1:84:7b:aa:89:22:bd:
06:aa:48:5d:eb:ba:9e:09:25:da:f7:8b:23:9f:73:41:00:e9:
cc:d0:dc:28:93:66:59:e5:99:5b:50:27:35:8f:37:60:e5:79:
66:4a:1f:d9:e9:c7:d9:95:b8:2d:86:ed:76:a3:81:a2:cd:63:
1c:3a:af:bd:1f:ea:09:60:42:a2:ad:3d:51:a8:a9:33:af:9e:
cb:8a:fb:02:bd:6e:d4:16:12:a9:de:28:a5:17:e0:f5:dc:29:
ea:4a:f0:ca:b4:47:77:48:e8:31:59:f8:bc:72:6c:7e:fe:32:
23:82:0a:2f:c1:55:38:5b:32:6d:09:a1:3e:e2:ca:ee:80:23:
20:4a:e8:98:99:03:19:73:bb:cb:e2:c4:14:c7:57:a9:df:f9:
70:fa:c7:47:42:c7:60:b0:99:eb:c1:c5:dc:d4:fa:87:f4:69:
14:2d:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:48 2026 by rpki-client