Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778776542E9C11F19308F0CADAE4EC9C.roa
File: 778776542E9C11F19308F0CADAE4EC9C.roa (raw, json)
Hash identifier: vDwH1j9EIsCAH9TIagNp4sJoxESlTZ9Q19M332zIqV4=
Subject key identifier: 3C:69:70:6D:FC:53:B1:07:DF:BF:DB:1E:A0:4E:36:47:08:01:E7:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C253
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778776542E9C11F19308F0CADAE4EC9C.roa
Signing time: Thu 02 Apr 2026 14:01:38 +0000
ROA not before: Thu 02 Apr 2026 14:01:34 +0000
ROA not after: Sun 10 May 2026 14:01:34 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
154.90.34.0/23 maxlen: 24
154.90.36.0/23 maxlen: 24
154.90.38.0/23 maxlen: 24
154.90.40.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115283 (0x1c253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 14:01:34 2026 GMT
Not After : May 10 14:01:34 2026 GMT
Subject: CN=69ce76c2-d1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:6e:33:ad:85:e0:40:c0:32:e9:f1:e9:a1:
a7:4c:b1:90:18:c8:1d:ab:85:16:3d:52:e4:fb:1e:
88:e1:98:3b:b3:5e:23:e7:d3:1d:1a:08:30:d7:9f:
2c:1d:24:ed:bb:d3:5f:47:38:8b:2a:f4:63:2e:09:
09:5c:c9:25:48:f8:4f:9b:e9:e6:3d:f7:2e:32:a2:
9a:16:3d:15:f0:e1:d4:2b:cc:5f:cc:da:ed:ef:a0:
9b:63:53:de:e1:e9:f6:04:7c:b6:ea:aa:e2:ad:9b:
69:e9:06:c4:c6:be:46:30:f7:ce:57:ac:03:67:83:
a2:9a:fc:49:42:fd:02:c6:2e:12:c5:69:fc:7e:a0:
17:7b:78:e1:6c:92:1c:e5:97:c8:09:cb:dc:bd:fc:
e1:8d:35:df:42:f4:0f:87:19:d5:d3:fd:18:36:ca:
01:76:43:a7:6a:b8:22:bc:c6:de:f6:f1:96:37:94:
56:d8:c8:7f:63:35:93:6c:99:ef:69:5c:be:68:01:
1b:b7:32:19:ef:c7:26:d5:f8:f4:04:9a:eb:fa:0c:
23:95:cb:ef:cc:6a:21:05:da:44:a7:ca:1a:5c:c0:
15:f9:32:30:41:85:7f:05:07:ed:36:6c:ba:2f:d0:
42:09:55:01:8f:54:59:14:25:97:cd:f0:eb:f4:ff:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:70:6D:FC:53:B1:07:DF:BF:DB:1E:A0:4E:36:47:08:01:E7:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778776542E9C11F19308F0CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0-154.90.41.255
154.95.72.0/22
154.95.100.0-154.95.107.255
154.95.112.0/22
154.95.120.0/23
Signature Algorithm: sha256WithRSAEncryption
50:a9:55:47:91:2f:da:81:04:b1:0d:4b:bf:e9:fe:fe:5e:60:
ee:aa:71:67:09:2d:cd:15:e2:2a:4c:7e:4c:fb:5c:99:9f:8c:
5b:a2:a6:d4:16:42:24:40:e6:53:df:c4:0e:70:3e:db:7d:4f:
a4:4d:7f:7a:39:ba:b4:19:cd:ef:e9:55:d4:31:b6:a3:09:57:
76:d9:de:66:85:20:7c:e8:b8:f6:81:d8:85:84:89:3f:71:53:
97:ab:c9:7f:de:2c:43:2c:74:0b:c3:05:43:50:1d:58:b2:c2:
86:7c:d7:04:94:ee:f6:ed:d0:3b:2b:52:7e:f4:2d:21:b2:2c:
35:95:7d:5b:4e:05:11:2b:4b:ee:0a:d5:e2:a7:c9:26:fa:c7:
a4:e5:62:66:1e:a0:ed:93:de:0a:9f:1e:ee:a7:82:37:b5:e3:
06:9a:0e:a0:9a:2f:49:fb:be:47:77:d8:0e:1d:dc:d0:ec:dd:
e8:91:c7:79:1f:2d:e6:f4:a5:48:1d:6f:3d:50:cb:e1:57:cb:
38:5b:0d:de:48:e1:92:53:75:11:04:c3:e6:79:62:62:6e:79:
a6:ec:67:26:a0:a4:f5:c3:6a:d6:c1:e4:c7:83:b7:b6:87:ec:
05:26:0c:f8:91:ae:ff:6a:6c:f3:e5:e1:af:da:9f:03:0c:b3:
ca:17:4e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:12 2026 by rpki-client