Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77FE365A84DB11F18ED9A112CF1D38B0.roa
File: 77FE365A84DB11F18ED9A112CF1D38B0.roa (raw, json)
Hash identifier: ulySH79IhULbhe5KRNtCj5Cs+dTHodTTQiRorbuJvaE=
Subject key identifier: 83:B1:B1:6C:60:C6:D9:98:F8:5D:9C:3D:CD:4D:F6:88:8F:30:A5:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77FE365A84DB11F18ED9A112CF1D38B0.roa
Signing time: Tue 21 Jul 2026 08:09:18 +0000
ROA not before: Tue 21 Jul 2026 08:09:13 +0000
ROA not after: Sat 21 Jul 2029 08:09:13 +0000
asID: 17561
IP address blocks: 154.193.34.0/24 maxlen: 24
154.193.130.0/24 maxlen: 24
154.198.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121428 (0x1da54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 08:09:13 2026 GMT
Not After : Jul 21 08:09:13 2029 GMT
Subject: CN=6a5f292d-ff0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:fd:50:21:d8:ad:f0:bb:b8:24:d0:70:7c:
de:d4:83:cd:a7:19:e0:a2:6c:ed:7c:ac:c2:f8:30:
56:99:07:34:82:ab:0e:d6:d9:87:a9:14:7a:c7:eb:
e0:e7:fc:18:2c:22:f3:e7:07:45:9b:9a:22:ec:f1:
28:e1:05:f7:da:9a:45:a5:d2:c7:ea:4e:e7:ca:84:
88:ad:a0:05:e2:4b:6e:fd:0c:82:44:59:ac:a5:c6:
4f:5b:df:ec:b9:61:82:29:1d:1f:1d:59:21:da:5b:
4a:69:c9:bc:d7:2d:66:87:14:2e:9b:fb:11:f7:c6:
bb:b4:82:6c:d8:c6:ea:34:c6:13:c6:f9:42:15:89:
0c:35:ba:d6:80:cf:49:16:d1:d7:ce:99:c5:62:d4:
f4:2b:38:b9:a5:01:7b:02:88:e0:bc:5a:03:f6:d4:
6d:60:68:24:76:2f:67:66:92:74:f7:4b:98:f8:d5:
d3:9c:8f:f0:6e:b9:22:f3:bc:b5:c0:65:f4:80:26:
82:e5:d6:ac:18:5a:8c:8d:d5:9e:2e:28:7a:b5:81:
3b:3b:4d:eb:29:67:ca:f3:41:3f:d5:1c:da:58:bc:
21:d0:bc:c4:24:39:7f:c8:ad:6e:2c:83:b4:49:c5:
a9:5a:66:44:c2:c4:98:d9:bf:fd:0f:b2:e0:77:d8:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:B1:6C:60:C6:D9:98:F8:5D:9C:3D:CD:4D:F6:88:8F:30:A5:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77FE365A84DB11F18ED9A112CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.34.0/24
154.193.130.0/24
154.198.185.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ef:35:45:f5:dc:61:20:f0:5c:d9:f8:0b:b8:c3:4f:98:1a:
aa:be:7a:0f:4a:8c:78:a2:cf:e9:b9:8a:59:e6:8b:6e:04:40:
18:73:51:75:9f:a7:01:9b:40:3b:45:76:ee:24:94:ee:cf:50:
80:43:03:fb:d7:eb:19:89:3b:2d:bc:55:85:b4:0f:b8:4a:53:
ba:a3:71:30:cb:d8:e6:e5:22:28:93:9d:65:e1:10:bd:ee:29:
c3:97:1c:be:fb:05:86:9d:3a:82:55:47:32:c4:5a:25:ed:89:
35:aa:dd:1d:d8:df:d5:4c:09:f6:c0:34:7a:fb:a6:75:c7:af:
c7:6e:9c:b3:b2:ba:39:76:76:b0:67:92:6e:c3:56:74:92:da:
1b:ca:58:ce:ae:55:f3:b1:0c:1a:59:a8:a2:8e:4f:db:3f:a9:
89:bd:8e:d4:34:ce:17:6c:9b:aa:3a:fe:14:0c:06:86:f7:4a:
d2:28:75:c5:55:c5:8c:f0:49:37:17:01:8e:fd:13:53:53:20:
7a:85:2b:6f:91:c3:e9:80:12:5d:c5:9e:62:ae:f3:e8:fc:a8:
e9:28:0e:4c:06:1f:aa:5e:c5:41:50:8a:a7:ec:e0:e1:9e:e4:
11:82:47:e3:e3:1e:2f:55:fd:3c:f1:62:10:70:5c:1f:b6:cc:
cc:e1:31:f2
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAdpUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzIxMDgwOTEzWhcNMjkwNzIxMDgwOTEzWjAYMRYw
FAYDVQQDEw02YTVmMjkyZC1mZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1yb9UCHYrfC7uCTQcHze1IPNpxngomztfKzC+DBWmQc0gqsO1tmHqRR6
x+vg5/wYLCLz5wdFm5oi7PEo4QX32ppFpdLH6k7nyoSIraAF4ktu/QyCRFmspcZP
W9/suWGCKR0fHVkh2ltKacm81y1mhxQum/sR98a7tIJs2MbqNMYTxvlCFYkMNbrW
gM9JFtHXzpnFYtT0Kzi5pQF7AojgvFoD9tRtYGgkdi9nZpJ090uY+NXTnI/wbrki
87y1wGX0gCaC5dasGFqMjdWeLih6tYE7O03rKWfK80E/1RzaWLwh0LzEJDl/yK1u
LIO0ScWpWmZEwsSY2b/9D7Lgd9i9RwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFIOx
sWxgxtmY+F2cPc1N9oiPMKXnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83N0ZFMzY1QTg0REIxMUYxOEVEOUExMTJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmsEiAwQAmsGCAwQAmsa5
MA0GCSqGSIb3DQEBCwUAA4IBAQBG7zVF9dxhIPBc2fgLuMNPmBqqvnoPSox4os/p
uYpZ5otuBEAYc1F1n6cBm0A7RXbuJJTuz1CAQwP71+sZiTstvFWFtA+4SlO6o3Ew
y9jm5SIok51l4RC97inDlxy++wWGnTqCVUcyxFol7Yk1qt0d2N/VTAn2wDR6+6Z1
x6/Hbpyzsro5dnawZ5Juw1Z0ktobyljOrlXzsQwaWaiijk/bP6mJvY7UNM4XbJuq
Ov4UDAaG90rSKHXFVcWM8Ek3FwGO/RNTUyB6hStvkcPpgBJdxZ5irvPo/KjpKA5M
Bh+qXsVBUIqn7ODhnuQRgkfj4x4vVf088WIQcFwftszM4THy
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:20 2026 by rpki-client