Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B77B6304693611F1ACED68A9CE1D38B0.roa
File: B77B6304693611F1ACED68A9CE1D38B0.roa (raw, json)
Hash identifier: KKhLT232AVhHe/J/1RQZ/R5D5ewkVmDpeYpjGxCwoN0=
Subject key identifier: 5A:42:7A:44:68:79:A9:DE:8D:71:1B:68:75:2F:2F:F3:69:D3:FC:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D30A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B77B6304693611F1ACED68A9CE1D38B0.roa
Signing time: Tue 16 Jun 2026 03:51:56 +0000
ROA not before: Tue 16 Jun 2026 03:51:51 +0000
ROA not after: Tue 21 Jul 2026 03:51:51 +0000
asID: 2914
IP address blocks: 154.197.12.0/22 maxlen: 24
154.216.132.0/24 maxlen: 24
154.216.133.0/24 maxlen: 24
154.216.134.0/24 maxlen: 24
154.216.135.0/24 maxlen: 24
154.216.136.0/24 maxlen: 24
154.216.137.0/24 maxlen: 24
154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119562 (0x1d30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 03:51:51 2026 GMT
Not After : Jul 21 03:51:51 2026 GMT
Subject: CN=6a30c85b-3510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:90:7f:58:e1:4d:5a:ff:9c:61:b7:17:4e:
43:a7:50:91:96:8b:34:4e:55:f8:c4:ce:19:7a:99:
9b:ae:c8:77:fb:25:d3:c6:a5:40:72:e1:83:af:98:
af:6b:7f:73:db:08:03:54:03:a2:b2:44:93:9f:37:
a6:e3:f7:f1:6b:f0:c4:59:e5:eb:70:7e:1f:0d:8f:
24:73:3a:ca:02:56:39:5d:d4:00:aa:36:44:80:f8:
e8:27:0d:77:6e:4f:0b:04:91:0b:83:81:40:27:6a:
6e:e2:da:72:d2:fc:dd:07:fe:ba:a4:80:1b:9d:ed:
58:c0:40:5a:ca:a0:06:00:d9:c0:08:22:ee:13:45:
f6:93:06:28:2f:4e:69:7f:a3:4c:32:9d:5c:3d:06:
df:a1:7c:e9:17:64:92:19:8b:dc:3c:17:0d:fa:67:
40:96:86:ef:29:9a:f7:48:bc:fa:14:fa:e3:1b:21:
a3:aa:8c:d2:c0:0f:6b:f9:3c:e4:2c:d5:95:e9:bb:
7a:76:09:ca:44:ee:b5:57:61:19:3f:8b:53:4f:0e:
62:be:ff:b8:0d:62:51:77:7d:aa:c8:83:5c:f0:d0:
53:5e:70:b9:93:a6:28:c4:d4:1b:11:c9:d4:66:1d:
e7:26:62:c3:cb:50:67:1f:31:89:28:fe:31:93:94:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:42:7A:44:68:79:A9:DE:8D:71:1B:68:75:2F:2F:F3:69:D3:FC:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B77B6304693611F1ACED68A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
154.216.132.0-154.216.137.255
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:21:77:ef:de:27:09:3a:59:d5:cf:f0:89:fe:7a:c0:a9:fe:
ee:51:f7:bb:d3:36:22:d4:7e:4e:59:03:47:e6:02:04:f9:71:
a9:bd:72:ed:ce:27:ba:f5:22:11:29:fa:a3:2d:0b:c3:fc:17:
92:a3:f1:3a:4b:bf:0c:06:23:e1:3e:d2:37:99:70:11:67:87:
94:3e:42:0b:37:96:56:ab:82:90:bd:c1:43:23:8a:0d:98:cc:
cf:d3:1e:ec:3b:e9:b2:37:24:3a:59:bc:f5:ea:b5:ea:6f:d2:
93:9d:d6:e3:90:5f:41:7e:b0:12:23:6a:6a:c8:2e:da:66:59:
6b:9b:d7:3d:5c:bd:80:23:c3:f1:18:f0:87:f4:22:f0:3e:02:
7d:ce:7f:de:a2:8b:53:eb:aa:6f:7b:d2:ce:84:5e:6d:32:95:
9e:9a:e5:fe:ae:fb:3b:db:a3:e6:21:82:e8:d5:37:4f:f1:79:
ff:61:bb:b5:e1:2a:03:87:8f:bb:6e:66:e4:fb:f6:c5:c0:88:
ea:a0:0b:04:4f:c9:9d:17:97:de:75:47:4e:a9:2c:c3:2d:7c:
a4:0b:e1:21:6d:17:f6:a4:8a:c6:d7:22:3f:03:66:4a:4d:01:
3a:81:d3:0c:02:25:aa:8e:9b:25:17:72:e4:88:57:4e:75:e1:
2d:3e:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:15 2026 by rpki-client