Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77F030656D911F190F5F806CF1D38B0.roa
File: C77F030656D911F190F5F806CF1D38B0.roa (raw, json)
Hash identifier: gODnZX3fN6eju5En4CRipx+6p0gCg6qEHS8bh1h0ZpQ=
Subject key identifier: 02:4A:7D:4B:A2:1B:90:9C:D9:DD:87:A1:8E:99:E1:94:F5:7B:FF:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77F030656D911F190F5F806CF1D38B0.roa
Signing time: Sat 23 May 2026 19:01:18 +0000
ROA not before: Sat 23 May 2026 19:01:13 +0000
ROA not after: Mon 29 Jun 2026 19:01:13 +0000
asID: 134365
IP address blocks: 154.194.248.0/21 maxlen: 24
154.194.248.0/24 maxlen: 24
154.194.249.0/24 maxlen: 24
154.194.250.0/24 maxlen: 24
154.194.251.0/24 maxlen: 24
154.194.252.0/24 maxlen: 24
154.194.253.0/24 maxlen: 24
154.194.254.0/24 maxlen: 24
154.194.255.0/24 maxlen: 24
154.198.40.0/22 maxlen: 24
154.198.40.0/24 maxlen: 24
154.198.41.0/24 maxlen: 24
154.198.42.0/24 maxlen: 24
154.198.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118426 (0x1ce9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 19:01:13 2026 GMT
Not After : Jun 29 19:01:13 2026 GMT
Subject: CN=6a11f97e-e7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:cf:4f:03:7a:36:7e:3e:dd:18:12:17:3a:
e1:5e:59:ea:cb:11:66:cd:8a:2e:0d:73:d2:bd:5c:
8b:09:37:34:ee:33:ca:91:ff:17:0f:0e:70:df:e8:
78:05:c3:1e:c0:18:18:c7:f7:fa:1d:97:7b:25:da:
a8:78:fc:a3:50:d9:3a:c6:3d:56:ba:ff:11:6c:ca:
08:b3:ab:3d:a1:65:c8:60:95:fa:ee:d5:fe:dd:b0:
f9:da:1c:87:d5:79:dd:f3:86:cb:11:b8:60:87:c7:
6b:96:ad:53:17:7c:7d:e8:0d:8f:8e:6d:e1:fa:ca:
61:92:76:8c:26:8c:2f:5c:33:88:0a:ba:6e:74:84:
9e:cd:27:ec:21:da:ea:d0:7c:c4:2e:b2:1b:10:5c:
e4:cf:43:3a:33:b7:cf:37:0d:0b:ca:45:ee:05:35:
fd:bf:65:4f:3d:8a:27:de:83:55:fb:25:3e:b5:6b:
c7:42:52:fc:99:40:3b:57:fa:84:79:54:0b:38:bb:
73:52:50:57:cd:93:c7:d6:81:89:ba:3e:57:7c:75:
b6:d9:b9:51:1e:74:9c:a6:6d:14:b1:22:b9:b0:9e:
d0:31:5f:48:2d:b8:df:37:e8:44:54:b9:9e:7f:24:
d1:ab:d7:6e:c9:c4:f9:a6:9b:c2:f1:c6:82:06:94:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:7D:4B:A2:1B:90:9C:D9:DD:87:A1:8E:99:E1:94:F5:7B:FF:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77F030656D911F190F5F806CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.248.0/21
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fb:3a:c4:91:a4:6d:bd:c8:37:23:d3:79:79:e0:74:7c:a1:
ca:ab:8e:c6:c7:04:50:3b:8e:72:2d:a3:6e:93:98:18:a5:52:
25:45:ab:98:8c:b9:fd:a1:1c:78:78:e5:47:d6:64:81:e2:45:
71:76:65:51:f3:6b:f1:e0:f8:56:ed:c8:41:6c:93:df:a3:d9:
9a:db:ea:63:01:35:e6:21:c5:ee:62:f0:77:75:3b:ce:f5:01:
96:6d:61:7e:f1:8d:fc:13:e0:5b:03:0d:95:22:85:35:17:f5:
02:57:59:ca:29:2d:46:38:d2:69:25:28:bd:52:9c:99:83:71:
81:a5:a4:5b:5f:e9:2b:ef:8a:1c:9f:56:40:96:fa:f3:56:0f:
e0:89:87:0c:8f:3e:e0:59:4b:e7:8f:90:53:56:03:da:97:85:
4a:5b:e9:c4:0f:8f:93:f8:3c:49:bb:89:ad:8b:37:6f:6d:7e:
2c:ef:93:c9:b1:2f:9e:04:d3:af:87:df:fc:74:82:87:a9:f3:
5b:61:78:36:41:02:8b:a3:54:15:f9:5b:d3:88:e4:80:0f:00:
04:cf:14:6a:60:8a:b0:09:62:d4:ce:74:e4:43:68:03:c2:c6:
fe:db:4c:63:8e:25:7b:8d:1c:30:22:de:88:35:34:4d:b1:72:
03:30:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:23 2026 by rpki-client