Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77DD26DA3FB811F198F001C9CE1D38B0.roa
File: 77DD26DA3FB811F198F001C9CE1D38B0.roa (raw, json)
Hash identifier: pXX4TY/W3b65oMXBLx4S2tf5Fl2wAI68qcAddG6Tkg0=
Subject key identifier: AB:DF:CA:E9:C5:91:97:0F:0B:A8:4F:A7:CC:9F:17:59:C3:F7:D3:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C715
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77DD26DA3FB811F198F001C9CE1D38B0.roa
Signing time: Fri 24 Apr 2026 08:34:55 +0000
ROA not before: Fri 24 Apr 2026 08:34:50 +0000
ROA not after: Sun 31 May 2026 08:34:50 +0000
asID: 62240
IP address blocks: 154.196.31.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116501 (0x1c715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 08:34:50 2026 GMT
Not After : May 31 08:34:50 2026 GMT
Subject: CN=69eb2b2e-4ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:d5:ff:78:60:37:83:2d:e1:40:4f:cb:b1:
0b:3c:46:81:df:be:80:ba:c1:13:0a:7b:eb:69:db:
75:b0:1f:4d:01:6f:bf:1b:e7:ba:71:4d:52:51:f4:
1c:55:72:63:0b:ee:fd:0e:27:15:5f:0b:a5:e3:a9:
fb:2a:ea:06:19:b4:b3:33:e4:20:0a:95:53:31:fd:
12:93:ea:f9:54:5e:4d:a2:78:31:50:52:2a:80:33:
32:1d:c3:c0:ad:6a:e4:fe:4f:7b:1b:ff:9d:18:00:
86:6c:93:73:12:7d:4c:c4:c1:bd:c0:62:02:f8:27:
d2:a6:a5:15:da:c1:f6:eb:a3:60:1e:a6:ec:e8:2a:
4e:7a:bf:a8:ec:85:7e:f8:02:5f:93:7f:41:a1:f1:
e8:47:c4:58:cb:eb:00:d9:b6:d0:52:5d:10:62:a2:
96:56:bc:3e:c9:ae:a3:a1:35:9e:68:f1:98:89:b0:
fe:14:6f:65:9d:a1:c5:27:f5:68:c4:6d:9b:38:6a:
94:53:52:2a:ec:12:3d:99:c8:5d:76:72:13:af:1d:
ad:5e:6f:d1:a4:5b:65:7f:de:41:b2:19:4d:d5:45:
90:e0:79:1c:d3:59:b8:e6:31:2c:46:0d:6d:cb:48:
a7:f6:f7:30:31:a7:9a:07:04:16:7d:d2:5f:8a:ea:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:CA:E9:C5:91:97:0F:0B:A8:4F:A7:CC:9F:17:59:C3:F7:D3:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77DD26DA3FB811F198F001C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.31.0/24
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.81.255
154.196.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fb:b9:f6:49:1e:9d:7b:c1:25:3e:fd:75:28:d1:8a:a8:07:
fa:9e:34:5b:38:8f:be:dd:11:0b:cc:fa:af:79:4d:c3:7b:4c:
d5:4b:1e:7f:4d:e4:0c:62:71:8c:12:ec:12:0a:6c:c2:27:5a:
4f:ce:18:66:64:46:f6:7a:5c:1b:e6:8b:ae:0e:16:42:9d:da:
f5:a0:ef:16:39:55:b6:4a:6c:e1:3d:12:66:fe:0f:8f:30:b7:
08:44:9d:5f:42:10:77:82:ef:d1:8c:fc:38:b5:e6:96:51:76:
9e:23:7f:8f:c7:0e:d4:be:06:e2:5d:74:81:41:7a:5a:05:10:
c6:77:b8:21:f3:b9:b9:25:79:a3:54:a3:de:63:64:9e:58:d1:
3e:d1:28:9b:a3:26:98:fb:a5:5b:be:a7:59:1a:45:ce:54:94:
38:68:5a:1c:30:e6:c0:7c:4c:ec:55:2c:df:c8:b5:f1:58:3a:
e2:1a:ac:51:d1:52:ec:14:1a:28:a3:c0:1f:e7:4c:5f:33:73:
ad:df:60:91:15:3c:82:4e:39:97:89:76:b3:2d:1e:af:2a:dd:
db:89:63:34:89:4e:b5:40:5c:3d:8b:b9:80:d9:f6:75:5a:3a:
cc:04:38:93:03:02:be:be:12:f1:9f:87:ce:78:b4:0a:a5:e0:
14:93:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:40 2026 by rpki-client