Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F493F23FC111F1BF9443FECE1D38B0.roa
File: 77F493F23FC111F1BF9443FECE1D38B0.roa (raw, json)
Hash identifier: RR9qEbj8wBpo3fuMtDWvAe4oHuQ2dycrJhl+XmSO2cU=
Subject key identifier: 87:1D:87:A5:A6:DF:01:6A:34:43:35:AD:A1:69:F2:70:3B:5F:FF:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C72B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F493F23FC111F1BF9443FECE1D38B0.roa
Signing time: Fri 24 Apr 2026 09:39:20 +0000
ROA not before: Fri 24 Apr 2026 09:39:15 +0000
ROA not after: Sun 31 May 2026 09:39:15 +0000
asID: 62240
IP address blocks: 154.194.125.0/24 maxlen: 24
154.194.127.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116523 (0x1c72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 09:39:15 2026 GMT
Not After : May 31 09:39:15 2026 GMT
Subject: CN=69eb3a48-0701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:ad:69:f2:58:ea:fb:8d:5b:f6:a7:60:a9:
fe:ac:4b:fb:ba:ca:73:b2:de:6e:1d:64:61:1c:0a:
e8:19:5c:41:5f:41:f5:3d:9e:3a:d8:d4:74:c5:ae:
66:ee:9f:a8:0c:7e:3d:eb:e0:40:ea:d8:bc:55:58:
88:7e:39:31:3d:99:53:c9:75:da:c6:62:43:d6:d1:
53:1c:f2:6d:99:56:9a:dd:d0:80:b1:2b:87:ca:26:
99:cf:15:70:47:80:c1:5f:cb:b3:d4:af:e7:62:97:
0b:09:76:22:3d:07:82:83:e7:51:c5:ec:01:bb:d0:
4e:06:1d:57:66:b7:c3:0d:6f:bc:c6:78:dc:72:eb:
da:a1:8f:7b:2e:92:d8:20:ce:e0:70:5b:6c:1b:8a:
5a:86:02:1a:c0:1a:d7:ca:a4:81:ee:49:f1:14:90:
bc:c4:6c:0b:6d:be:8b:f4:bf:80:58:48:5a:b4:c3:
98:0a:47:50:ae:a5:c0:f0:aa:8e:1c:74:e1:3f:90:
cf:35:92:cb:de:42:3b:28:3a:c7:08:b5:84:b8:6c:
5d:e8:be:c2:7a:f7:d5:71:51:84:aa:77:e5:de:22:
48:7e:e6:8d:42:bc:05:0d:35:2c:bb:16:fd:36:6c:
93:d6:d4:18:f7:61:75:ca:b8:89:f4:14:49:79:c1:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:87:A5:A6:DF:01:6A:34:43:35:AD:A1:69:F2:70:3B:5F:FF:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F493F23FC111F1BF9443FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.125.0/24
154.194.127.0/24
154.195.127.0-154.195.134.255
Signature Algorithm: sha256WithRSAEncryption
b5:6e:b0:59:e8:10:80:ab:0b:86:98:fa:a4:d8:13:dc:1a:56:
06:9b:85:5a:94:b1:1f:f2:5d:3e:c7:3f:1f:57:28:55:0d:1b:
ac:5c:50:3d:94:ff:ed:08:20:e4:e8:de:a8:ae:79:e1:ed:1c:
88:5d:3e:ee:e0:d5:4e:ae:af:8e:56:2c:f1:75:6e:3e:7d:0a:
ac:02:36:46:e5:07:e1:3c:e9:33:2c:fa:1f:db:4a:33:51:41:
b0:9b:f5:24:c6:14:df:c8:77:8a:d8:5a:ff:bb:be:ce:cc:e0:
06:62:0a:17:75:b5:37:9d:e0:0a:68:3d:49:70:c1:f8:20:10:
4e:bc:0a:9e:88:f2:d1:5f:9c:e3:e3:84:6b:c6:3e:34:13:d2:
b4:6a:bc:8b:6a:87:e4:91:04:d7:f9:8d:44:4b:e5:6d:cc:eb:
23:4b:d6:51:0f:3c:e7:3d:ff:14:e8:a0:ca:91:ae:88:a0:59:
2d:f9:12:79:d5:6f:d9:d6:3e:79:0f:86:0c:3f:34:cc:19:e8:
cc:c2:05:f3:1f:91:7b:80:e3:5d:3d:30:f5:17:42:fb:72:75:
01:bf:30:ad:d2:99:93:d1:6d:51:ae:8f:5a:62:cc:2f:c4:89:
b1:a2:c0:de:d7:6b:62:8c:3c:ca:60:5a:07:c4:d4:ac:20:3b:
74:8d:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:11 2026 by rpki-client