Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B77A2CC86A6211F1AFA6B9CACE1D38B0.roa
File: B77A2CC86A6211F1AFA6B9CACE1D38B0.roa (raw, json)
Hash identifier: xm5HHIA5qOGWIvXfoJPv46tWpa51rXq9xRjKSw7DHeA=
Subject key identifier: 40:DC:B1:30:7E:12:E0:0E:97:69:7D:6E:B3:27:45:0D:E5:A4:5A:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B77A2CC86A6211F1AFA6B9CACE1D38B0.roa
Signing time: Wed 17 Jun 2026 15:39:25 +0000
ROA not before: Wed 17 Jun 2026 15:39:20 +0000
ROA not after: Thu 14 Jun 2029 15:39:20 +0000
asID: 17561
IP address blocks: 154.194.34.0/24 maxlen: 24
154.197.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119772 (0x1d3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 15:39:20 2026 GMT
Not After : Jun 14 15:39:20 2029 GMT
Subject: CN=6a32bfad-e241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:ab:41:39:0c:43:d0:37:b6:42:f9:c7:28:
b7:2c:82:70:d6:4e:27:aa:f8:c2:37:83:fa:4d:7b:
60:5b:ca:95:31:07:c5:b0:0a:bd:98:67:6e:0a:db:
e9:7c:49:36:52:ea:e1:3b:31:8e:54:3e:e6:3f:60:
90:0c:70:16:85:be:9c:9b:eb:9e:e9:f5:80:40:23:
c4:d0:a8:b3:a2:11:cf:5b:ae:81:29:14:10:79:f2:
af:5a:49:fb:46:3c:4f:08:41:f9:cc:28:bf:22:1b:
0a:0c:be:aa:e8:3a:b7:ba:fa:cc:f1:79:c9:b1:fa:
cf:c4:23:c5:3f:c0:78:b5:6d:fc:72:c6:c6:02:04:
0c:7a:c4:38:7a:bb:4e:68:06:79:ad:f7:70:87:90:
18:70:fb:e0:4b:13:0b:72:38:54:9d:a8:39:c0:5e:
1a:43:4d:3d:d8:ac:aa:df:32:d7:4c:61:5b:f1:1b:
08:21:03:47:75:a3:8c:8d:60:b8:0b:a4:a0:d3:f9:
6d:ba:d5:10:ef:4f:cd:00:b1:4b:e3:e8:18:2b:38:
ab:3d:3e:8a:4d:1c:3f:a8:de:69:89:04:ee:f2:4d:
18:87:7a:01:87:56:cd:30:7b:de:17:5a:7b:b1:12:
48:b3:16:4d:54:78:07:18:34:49:06:47:b7:21:57:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:B1:30:7E:12:E0:0E:97:69:7D:6E:B3:27:45:0D:E5:A4:5A:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B77A2CC86A6211F1AFA6B9CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.34.0/24
154.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:72:26:21:87:19:2a:72:77:c1:b6:c6:d6:72:f0:db:5f:b3:
ca:aa:3d:19:8d:a0:c3:4e:99:67:b7:60:66:75:00:f3:be:3e:
d6:45:e8:b4:2c:6b:25:51:69:08:83:6c:01:c7:aa:85:c2:bc:
7a:6f:04:57:e8:91:02:fc:fb:a4:3e:c8:fa:d3:c3:05:df:50:
8f:3b:26:47:41:e4:7e:77:2c:d3:a2:eb:de:b9:7a:33:f0:08:
06:fd:e2:93:0c:2e:3a:bf:3d:a3:42:11:3b:a0:6d:4e:11:9f:
22:12:41:1b:d6:91:6a:0b:cc:0a:80:85:56:d0:ff:5a:14:af:
62:8f:84:50:c2:c0:ec:08:57:ca:18:5e:20:15:ef:90:d7:1e:
31:21:7f:cd:e8:32:39:6e:58:b9:eb:b5:10:33:42:71:1a:9d:
ab:94:ba:c8:2a:15:d7:55:6b:74:2e:30:04:f2:66:4f:a6:67:
4f:44:d5:f8:f6:65:60:3f:01:bc:e8:8e:14:d1:47:81:f4:b3:
fc:e9:cf:02:63:7b:07:18:88:fe:ea:79:ca:86:47:9a:f0:66:
5b:97:12:a1:0c:36:3a:68:fb:67:8d:de:03:89:e8:f6:42:ff:
f4:ed:9b:a3:e4:74:50:83:29:ba:5c:5f:34:c4:b6:18:02:d9:
ed:11:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:24 2026 by rpki-client