Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77974B1242E511F1867EB7A5CE1D38B0.roa
File: 77974B1242E511F1867EB7A5CE1D38B0.roa (raw, json)
Hash identifier: AO5voO4ZcchqF37KQ8PnexWE3m/PbtpuguN5KTTqlcw=
Subject key identifier: 4D:25:09:6D:91:B0:00:DF:27:22:E5:6F:70:35:8A:3A:5C:FF:E5:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77974B1242E511F1867EB7A5CE1D38B0.roa
Signing time: Tue 28 Apr 2026 09:34:35 +0000
ROA not before: Tue 28 Apr 2026 09:34:30 +0000
ROA not after: Tue 02 Jun 2026 09:34:30 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116653 (0x1c7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 09:34:30 2026 GMT
Not After : Jun 2 09:34:30 2026 GMT
Subject: CN=69f07f2b-fae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:76:d8:58:57:c8:4e:74:de:2e:14:7a:70:
ae:13:b0:ca:e7:43:e4:6e:ae:2f:bb:0e:3d:96:b8:
76:e8:c8:26:1d:c6:5f:f1:a9:7c:1f:e5:dd:95:d9:
27:20:4d:6c:fd:e2:90:57:59:f6:37:e8:fa:3f:30:
79:d2:4a:eb:45:6f:50:ce:0a:af:37:a4:2a:a9:00:
17:72:ed:31:f5:9f:c7:ef:4c:f2:14:4a:89:c1:64:
4d:17:12:85:27:b3:ad:a1:d0:b6:7a:b6:cd:61:48:
be:f9:4b:d0:f6:da:93:a1:58:50:65:bb:56:48:21:
14:ea:0e:b3:18:80:e6:73:82:61:e6:28:78:ed:32:
11:6f:8b:95:bf:00:c2:20:cf:c1:dd:88:48:63:3f:
90:9b:ab:c0:c9:2f:d8:3e:bd:b4:d5:e9:06:a2:fe:
93:36:bf:0c:6b:a6:46:a3:ec:c9:08:c7:af:99:05:
5e:e1:66:47:14:d1:85:d7:ef:1f:f6:a7:c7:3c:99:
e5:20:15:84:9d:98:7b:00:bc:5d:5e:99:c7:19:21:
ef:23:dd:20:a4:f7:f2:1e:f8:36:2d:b9:55:0d:05:
2c:54:c1:a1:a8:75:65:e8:53:4f:18:00:e4:74:f3:
c9:0d:1b:a6:95:1a:83:9b:c8:f5:7d:3e:c4:98:5b:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:09:6D:91:B0:00:DF:27:22:E5:6F:70:35:8A:3A:5C:FF:E5:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77974B1242E511F1867EB7A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:69:ae:f5:90:92:ca:43:6e:cd:15:35:1f:e3:cb:57:5c:bb:
eb:fc:38:a9:06:b5:84:1a:da:db:4f:d2:fa:ba:59:72:f3:ae:
01:98:6c:9c:1d:df:e9:86:c6:a3:d5:a8:8b:93:6a:6a:d1:16:
ed:92:9c:51:14:e8:b2:69:ea:18:26:0b:f5:9f:dd:bc:e7:43:
63:19:f6:77:38:7e:93:28:44:28:bd:13:b5:5f:cb:34:73:7f:
45:c0:fe:80:97:7f:72:26:8e:65:3f:a6:e2:25:2c:3f:39:00:
a3:ce:a4:ca:be:9e:35:32:b9:ae:63:36:9a:56:f3:72:63:88:
68:98:b7:80:ce:bc:67:d7:7d:1a:be:19:41:0c:8a:11:68:6c:
0a:a7:49:e8:93:e3:51:cf:07:69:5b:c3:92:fb:0d:64:9c:fa:
08:09:3c:0a:01:ee:d5:e7:41:1d:4d:a3:0c:72:32:ec:56:04:
7f:73:38:17:02:22:99:9e:a2:49:a4:44:e5:28:42:93:d3:77:
6b:ac:0f:5e:57:fa:fa:9c:90:7f:8d:ed:f0:f4:f0:ac:f6:3e:
c0:fe:00:ce:a3:c1:a6:67:c8:c0:83:d3:5d:b1:ec:04:cf:36:
0e:14:69:6e:9b:4e:57:5e:9d:d0:ef:c9:3e:15:ef:b9:40:02:
e0:27:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:04 2026 by rpki-client