Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F9BCD0275011F185B1F289DAE4EC9C.roa
File: 77F9BCD0275011F185B1F289DAE4EC9C.roa (raw, json)
Hash identifier: SCICUZmrCZNa90hR7Aze/t1VWfcQasDuSozO4Dwqz/k=
Subject key identifier: FA:5E:17:58:3D:04:36:96:73:91:82:A0:43:18:3A:07:6E:1F:A6:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C075
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F9BCD0275011F185B1F289DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 07:09:59 +0000
ROA not before: Tue 24 Mar 2026 07:09:54 +0000
ROA not after: Thu 27 Aug 2026 07:09:54 +0000
asID: 45669
IP address blocks: 154.198.64.0/18 maxlen: 24
154.198.109.0/24 maxlen: 24
154.198.110.0/24 maxlen: 24
154.198.111.0/24 maxlen: 24
154.198.112.0/24 maxlen: 24
154.198.113.0/24 maxlen: 24
154.198.114.0/24 maxlen: 24
154.198.115.0/24 maxlen: 24
154.198.116.0/24 maxlen: 24
154.198.117.0/24 maxlen: 24
154.198.118.0/24 maxlen: 24
154.198.119.0/24 maxlen: 24
154.198.120.0/24 maxlen: 24
154.198.121.0/24 maxlen: 24
154.198.122.0/24 maxlen: 24
154.198.123.0/24 maxlen: 24
154.198.124.0/24 maxlen: 24
154.198.125.0/24 maxlen: 24
154.198.126.0/24 maxlen: 24
154.198.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114805 (0x1c075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 07:09:54 2026 GMT
Not After : Aug 27 07:09:54 2026 GMT
Subject: CN=69c238c7-e3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:99:8f:d2:c4:15:53:7c:6d:95:fa:3d:bb:
bf:d0:28:b6:8e:85:e6:9e:6f:99:21:e9:91:70:2a:
20:95:44:2e:c7:65:33:8f:59:4c:fa:a3:0f:bd:06:
aa:24:94:74:9e:56:e9:83:88:b9:d1:0a:c9:42:9e:
e9:52:aa:39:3a:23:e8:84:40:d1:05:75:e1:ea:55:
19:3a:20:d8:69:68:3a:3a:07:2c:d5:cb:8f:ce:ea:
5a:ec:ec:19:e8:9b:86:21:95:94:6a:32:8e:b4:0a:
e2:5d:f4:ec:0b:b2:40:8f:67:4d:72:a4:73:7e:c0:
f7:65:e9:ef:ec:94:2f:7d:c8:40:1a:39:b3:32:72:
1f:c1:47:39:81:64:51:b1:4e:e7:35:93:b8:32:34:
e7:24:70:72:26:06:81:fe:5c:46:09:55:6f:30:2b:
99:46:ac:d4:35:7d:5c:43:d1:15:f2:f4:3d:fb:18:
5a:29:29:21:0b:48:09:43:d7:ea:42:6c:3f:c1:f4:
d3:19:21:c8:26:88:dd:c0:cc:0a:5c:d7:ae:08:eb:
94:bf:bd:8c:3f:58:ab:9c:42:5b:9a:07:21:92:52:
d6:f5:08:10:30:c4:a6:48:c2:d3:76:f0:23:48:95:
0d:35:2c:1e:ee:2a:c9:01:e6:46:8b:0a:06:02:1c:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:17:58:3D:04:36:96:73:91:82:A0:43:18:3A:07:6E:1F:A6:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F9BCD0275011F185B1F289DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:57:cf:dd:23:3d:35:b3:54:7b:66:71:d2:7d:73:41:76:96:
da:f5:22:90:70:7a:15:29:3f:2f:6b:de:3e:58:a2:ba:d4:70:
fc:79:f5:45:d2:0b:69:42:07:79:b5:61:a7:e4:b9:e2:3f:ed:
78:1f:cb:58:73:0c:50:ad:2f:c1:4e:6c:59:89:da:64:a4:f4:
ae:54:8e:4f:1c:bc:1f:49:7f:58:3e:79:c7:31:ca:a9:27:96:
6a:82:79:85:71:7e:98:23:e7:8a:af:8c:5a:94:0e:6c:ae:b1:
26:9e:a7:9a:44:62:b4:12:c2:23:3e:df:b9:7d:48:f1:07:16:
07:f8:c9:35:f5:9e:ae:a0:e8:63:9a:06:74:2c:fb:9a:79:73:
6d:28:d1:2e:9a:b5:64:c2:c5:71:37:c0:6d:8f:9a:a3:1d:f8:
89:0f:d2:6a:49:6d:eb:93:f3:f5:1f:50:bb:50:4b:d8:96:1a:
a2:85:76:d6:ad:9d:78:64:94:b8:92:ec:88:9a:20:30:cc:3d:
8e:80:c3:5a:fb:52:70:e0:79:bd:41:9f:b1:6a:63:5e:7a:a5:
6c:da:f0:14:65:01:3c:72:f6:ac:60:9b:f4:01:6e:61:ab:2e:
02:72:d5:d7:d1:31:41:0a:38:d8:d6:41:6b:4f:3d:93:08:40:
97:03:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:07 2026 by rpki-client