Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC78A51A279611F1B9C6A29ADAE4EC9C.roa
File: BC78A51A279611F1B9C6A29ADAE4EC9C.roa (raw, json)
Hash identifier: gcB9c4l2+zza+IW/Q+SXPDjRAEkJx9yogFoDlLKn/z4=
Subject key identifier: E8:77:A2:45:E1:2D:23:70:B9:90:BF:38:60:8E:89:20:AF:88:00:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC78A51A279611F1B9C6A29ADAE4EC9C.roa
Signing time: Tue 24 Mar 2026 15:32:59 +0000
ROA not before: Tue 24 Mar 2026 15:32:54 +0000
ROA not after: Thu 27 Aug 2026 15:32:54 +0000
asID: 45669
IP address blocks: 154.80.36.0/24 maxlen: 24
154.80.37.0/24 maxlen: 24
154.80.38.0/24 maxlen: 24
154.80.39.0/24 maxlen: 24
154.80.40.0/24 maxlen: 24
154.80.41.0/24 maxlen: 24
154.80.42.0/24 maxlen: 24
154.80.43.0/24 maxlen: 24
154.80.44.0/24 maxlen: 24
154.80.45.0/24 maxlen: 24
154.80.46.0/24 maxlen: 24
154.80.47.0/24 maxlen: 24
154.80.48.0/24 maxlen: 24
154.80.49.0/24 maxlen: 24
154.80.50.0/24 maxlen: 24
154.80.51.0/24 maxlen: 24
154.80.52.0/24 maxlen: 24
154.80.53.0/24 maxlen: 24
154.80.54.0/24 maxlen: 24
154.80.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114853 (0x1c0a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 15:32:54 2026 GMT
Not After : Aug 27 15:32:54 2026 GMT
Subject: CN=69c2aeab-dc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:93:3f:b7:7a:b7:34:0f:67:8c:f0:1d:cd:c3:
5e:ef:1e:e0:cd:4a:99:73:87:47:83:15:7a:ba:8c:
6d:56:27:fa:ee:cc:f6:24:05:3d:8d:4d:34:b4:1b:
fa:d0:06:da:8a:7d:2f:07:c3:1a:40:9d:53:3f:da:
1b:cd:ad:10:b8:23:f3:02:11:a4:1a:b8:43:17:89:
f0:c6:de:2d:cb:74:69:7f:75:25:96:0b:f7:07:f4:
ee:47:cf:15:44:0a:05:17:79:ee:1c:20:e8:46:d5:
3b:00:ff:8c:05:69:7b:37:6c:6f:d7:7d:f9:79:94:
92:2a:4a:a5:1d:cc:92:7f:26:db:68:30:f2:e2:f6:
9f:06:1a:02:03:20:ad:08:ad:ae:88:ca:c3:77:1c:
be:32:73:30:83:0e:2e:bd:2f:32:f8:e1:b3:58:a3:
77:d3:04:77:b6:1c:36:73:82:96:5b:b0:e5:8e:21:
36:b4:41:22:cd:13:9c:0a:40:01:15:5f:5a:f8:e7:
d7:4b:8c:c7:a2:d8:4a:38:be:c9:6f:b1:53:e5:0e:
08:5b:31:9a:e7:19:cc:0e:aa:e5:8d:fc:59:39:dc:
51:42:4b:f3:f4:4b:fc:c7:19:07:90:3a:1b:b0:a3:
ff:3e:6e:7b:65:02:ea:99:e8:c1:7d:33:84:df:fd:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:77:A2:45:E1:2D:23:70:B9:90:BF:38:60:8E:89:20:AF:88:00:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC78A51A279611F1B9C6A29ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.36.0-154.80.55.255
Signature Algorithm: sha256WithRSAEncryption
12:3c:c9:84:c0:54:91:de:a7:e8:94:59:7f:cb:80:60:cb:e5:
d0:cc:b6:d7:dc:28:ba:a9:0e:9b:09:f9:a9:b8:ce:86:e5:75:
0c:4b:28:98:c0:b7:d6:f5:ac:63:b7:1d:a0:2f:81:ec:c0:84:
3e:fc:48:a6:17:f1:1d:44:86:32:57:2b:37:4e:9f:35:43:05:
85:99:40:fd:e6:b2:85:ac:43:10:ce:d1:49:4b:da:fc:c6:1b:
ab:99:b2:c9:82:4f:d8:f1:ed:68:65:e2:f5:f3:c7:b7:5c:8a:
ec:46:5f:74:7b:39:a4:da:e1:8c:12:82:d2:bf:76:1a:4d:a4:
00:c7:f4:04:5a:29:89:a4:22:e1:f9:42:d2:d7:25:14:73:5a:
44:50:20:cb:34:3d:9a:2b:79:5e:63:a3:1b:0d:07:17:96:78:
a4:6f:81:40:af:1d:e2:27:c2:30:b6:24:e9:57:22:8b:de:99:
19:49:3e:cc:fa:8b:84:08:ae:8b:0f:c2:21:39:39:99:35:8e:
2f:c8:79:95:67:7f:bd:01:3f:61:e1:3a:1a:18:7b:98:89:dc:
ce:13:7e:0c:2f:5d:2c:90:83:5c:93:47:0c:88:25:fd:2e:8d:
1c:27:9f:b9:58:09:48:cd:49:d8:6b:0e:54:08:59:85:64:ef:
42:42:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:08 2026 by rpki-client