Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A177CF863FB311F196676AABCE1D38B0.roa
File: A177CF863FB311F196676AABCE1D38B0.roa (raw, json)
Hash identifier: 7hnGsLuPO/oF1MRfAXthSpVb2zYDA+jaGhYvDNjIKrg=
Subject key identifier: 12:77:79:70:03:8C:63:8B:6E:BE:2D:31:6E:52:BC:5C:46:ED:C9:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C70B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A177CF863FB311F196676AABCE1D38B0.roa
Signing time: Fri 24 Apr 2026 08:00:17 +0000
ROA not before: Fri 24 Apr 2026 08:00:12 +0000
ROA not after: Sat 30 May 2026 08:00:12 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116491 (0x1c70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 08:00:12 2026 GMT
Not After : May 30 08:00:12 2026 GMT
Subject: CN=69eb2311-b12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:fc:46:75:37:88:ed:11:f2:32:d2:ed:d5:
5b:1c:43:8c:e2:a9:80:64:0d:f2:e8:b2:cc:9d:d5:
e9:1a:92:20:f6:97:b8:fd:bd:4d:fa:b9:ef:d5:3e:
40:0b:89:d8:55:24:f8:f4:0e:30:fe:b7:4b:75:0e:
a2:dd:ec:03:d8:9c:1a:ed:32:ae:b6:7a:c5:83:ef:
6e:08:bc:84:b8:9d:2f:1a:07:2c:68:f8:7e:f4:ea:
dd:c6:5c:5e:20:b8:6d:93:d7:12:47:a4:23:7f:b4:
a9:e0:e9:c7:44:4f:3b:a1:01:d7:e8:47:41:4b:0d:
77:54:4a:40:ba:c3:cd:9f:bd:7d:cc:ff:41:96:ea:
ca:25:8f:5b:94:65:36:54:48:15:96:81:63:cc:f3:
cd:b7:fc:73:46:e5:d2:6e:f9:1a:c2:b6:44:12:57:
50:11:28:e6:1b:c4:7f:e4:f7:97:56:8b:4f:b6:3b:
04:a3:ef:76:42:74:60:28:b1:45:99:66:7b:37:b7:
c1:3b:31:d0:6a:1b:13:2d:1d:86:4b:f2:d9:43:c0:
22:ce:59:cc:3b:fe:6f:f6:ec:a0:36:32:80:84:13:
e6:a1:67:ec:f2:8d:02:d4:1d:9d:68:fa:6e:22:69:
a1:e3:cb:40:5e:89:9b:0a:c3:0a:86:83:0d:0e:b7:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:79:70:03:8C:63:8B:6E:BE:2D:31:6E:52:BC:5C:46:ED:C9:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A177CF863FB311F196676AABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
64:1b:95:f1:e9:53:ee:d5:df:52:66:0f:53:55:53:87:e9:e4:
b0:c4:7a:52:a4:16:30:ec:3d:03:5d:4c:da:2e:e7:2e:aa:a9:
94:6e:4d:ac:6e:fb:fa:90:ae:08:24:88:c2:e3:77:09:b4:6a:
52:78:4c:5c:51:6d:4c:a4:fb:47:75:4e:6a:8a:7a:66:fd:b8:
80:be:39:05:51:63:d8:66:91:9d:8a:68:a7:92:93:1e:9c:1c:
57:35:d8:1d:6a:ea:e1:49:b2:58:3e:e6:1c:d2:0a:f7:db:a0:
e6:34:83:0b:aa:fe:58:07:58:9a:42:e0:65:04:1b:65:c9:94:
45:c4:a6:21:0e:d2:e3:0c:bc:fc:2a:a1:76:7b:a6:37:ba:93:
fd:8e:c2:51:81:38:ff:ea:d8:ca:90:c8:0f:8f:a5:e9:8c:f5:
4e:8f:dd:4b:fb:c6:47:8d:00:e2:88:ae:fc:4f:09:11:63:52:
bb:ba:e6:6d:bc:91:13:ed:78:59:5f:3d:a2:f0:7e:f1:6e:35:
64:2b:c7:f6:6e:59:db:ec:aa:d5:2c:98:ee:3b:0c:8c:a9:fd:
d7:8d:be:7f:65:bd:9a:1b:b7:cb:57:31:a5:83:44:2a:27:79:
29:eb:63:c5:f0:a4:a1:b3:d5:4e:34:59:c0:7f:36:bb:05:99:
17:3c:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:45 2026 by rpki-client