Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77975A027CD411F1B32A94E4CE1D38B0.roa
File: 77975A027CD411F1B32A94E4CE1D38B0.roa (raw, json)
Hash identifier: NktuhrMb5d+HEzqNn2rmfUW2oR/VqUncqUNUqKKBxtg=
Subject key identifier: 21:56:17:85:EA:F7:9B:62:19:24:F5:DB:BD:02:3E:01:6B:B6:AD:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D82E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77975A027CD411F1B32A94E4CE1D38B0.roa
Signing time: Sat 11 Jul 2026 02:59:01 +0000
ROA not before: Sat 11 Jul 2026 02:58:55 +0000
ROA not after: Tue 10 Jul 2029 02:58:55 +0000
asID: 17561
IP address blocks: 154.202.38.0/24 maxlen: 24
154.202.39.0/24 maxlen: 24
154.202.40.0/24 maxlen: 24
154.202.41.0/24 maxlen: 24
154.202.42.0/24 maxlen: 24
154.202.43.0/24 maxlen: 24
154.202.44.0/24 maxlen: 24
154.202.45.0/24 maxlen: 24
154.202.46.0/24 maxlen: 24
154.202.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120878 (0x1d82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 02:58:55 2026 GMT
Not After : Jul 10 02:58:55 2029 GMT
Subject: CN=6a51b175-684d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:6a:77:76:00:84:b4:2c:ca:fa:46:d2:95:
f2:12:ae:15:97:c4:58:51:8c:9e:48:6a:74:0f:00:
f5:ca:9b:97:4f:8c:bf:e8:37:f4:2b:fe:21:e3:3b:
38:45:91:59:92:0e:9b:63:88:8e:40:21:cc:cb:17:
4b:3e:98:2c:60:f7:f3:75:30:be:3b:58:40:1a:78:
fb:d9:3c:b0:79:b0:25:ef:81:70:1b:79:d9:d8:1b:
0f:9e:82:d2:67:29:75:c4:5a:44:cc:e6:fe:ec:39:
63:87:29:76:6c:b6:36:1d:2a:fe:bf:6b:a0:b5:75:
69:4f:a3:ff:8c:31:8d:74:43:35:2a:a9:53:e5:ed:
49:46:a2:0e:d6:58:5e:ef:b5:43:df:b5:ff:66:29:
4d:71:75:cd:4f:97:40:05:be:29:db:20:a9:5c:9c:
16:59:6d:63:13:44:3a:68:d7:be:8f:a7:9c:84:55:
de:b1:46:2e:6b:09:53:d6:70:9a:e2:1b:0f:b7:d5:
65:57:f3:b4:87:32:25:f6:ab:98:fc:02:84:31:49:
3d:c2:b8:5f:8f:8c:e3:33:81:24:81:6a:73:c1:46:
f8:15:22:c0:bd:4f:96:10:20:9a:ba:8a:45:3a:7a:
c0:2b:8a:4a:82:b8:3b:c0:7c:4d:38:75:b9:e3:44:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:56:17:85:EA:F7:9B:62:19:24:F5:DB:BD:02:3E:01:6B:B6:AD:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77975A027CD411F1B32A94E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.38.0-154.202.47.255
Signature Algorithm: sha256WithRSAEncryption
d6:b1:75:1f:f0:83:93:26:9e:a9:88:6d:85:e8:ac:61:45:57:
e9:d3:8a:33:58:09:bb:43:0c:d6:09:df:2a:cb:b6:b0:82:f5:
75:7f:93:8b:4f:1f:7b:d8:4d:4e:6a:ff:96:59:83:a9:33:79:
ac:95:7f:e2:2a:21:62:b2:1b:0b:a3:fe:73:5c:3b:20:da:7f:
26:3d:86:1f:cc:a3:a0:01:10:85:82:aa:3a:13:29:cf:b0:c9:
56:3f:0d:aa:69:5f:37:ff:17:a3:3e:2d:b8:92:5a:ea:ce:ee:
c6:1c:8b:84:eb:3d:16:7d:a6:57:da:62:47:59:b2:8e:8e:a7:
1c:5d:e6:8d:56:1f:d5:28:a2:ad:ed:45:d3:dd:ef:d5:aa:86:
73:84:60:6d:e2:05:ec:9e:49:08:05:ce:8f:93:eb:98:90:f4:
8b:78:60:60:5f:a6:a2:7d:40:f7:82:86:27:28:7c:32:6e:48:
82:92:0f:3e:a2:9a:ab:8d:46:58:15:60:a7:00:89:c0:2e:98:
d8:3b:04:ed:ae:33:de:ec:07:7b:20:9d:35:c5:10:15:35:1f:
30:36:ef:b8:af:52:b7:82:25:92:02:69:ca:97:ff:80:d9:b9:
ad:78:17:22:4c:b3:23:e0:66:b8:d4:9f:d9:04:b0:9b:85:d9:
85:62:c5:63
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAdguMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzExMDI1ODU1WhcNMjkwNzEwMDI1ODU1WjAYMRYw
FAYDVQQDEw02YTUxYjE3NS02ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvYtqd3YAhLQsyvpG0pXyEq4Vl8RYUYyeSGp0DwD1ypuXT4y/6Df0K/4h
4zs4RZFZkg6bY4iOQCHMyxdLPpgsYPfzdTC+O1hAGnj72TywebAl74FwG3nZ2BsP
noLSZyl1xFpEzOb+7Dljhyl2bLY2HSr+v2ugtXVpT6P/jDGNdEM1KqlT5e1JRqIO
1lhe77VD37X/ZilNcXXNT5dABb4p2yCpXJwWWW1jE0Q6aNe+j6echFXesUYuawlT
1nCa4hsPt9VlV/O0hzIl9quY/AKEMUk9wrhfj4zjM4EkgWpzwUb4FSLAvU+WECCa
uopFOnrAK4pKgrg7wHxNOHW540TJQwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCFW
F4Xq95tiGST1270CPgFrtq0BMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Nzk3NUEwMjdDRDQxMUYxQjMyQTk0RTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGayiYDBASayiAwDQYJ
KoZIhvcNAQELBQADggEBANaxdR/wg5MmnqmIbYXorGFFV+nTijNYCbtDDNYJ3yrL
trCC9XV/k4tPH3vYTU5q/5ZZg6kzeayVf+IqIWKyGwuj/nNcOyDafyY9hh/Mo6AB
EIWCqjoTKc+wyVY/DappXzf/F6M+LbiSWurO7sYci4TrPRZ9plfaYkdZso6Opxxd
5o1WH9Uooq3tRdPd79WqhnOEYG3iBeyeSQgFzo+T65iQ9It4YGBfpqJ9QPeChico
fDJuSIKSDz6imquNRlgVYKcAicAumNg7BO2uM97sB3sgnTXFEBU1HzA277ivUreC
JZICacqX/4DZua14FyJMsyPgZrjUn9kEsJuF2YVixWM=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:19 2026 by rpki-client