Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77A1FADA39A311F1910D81F4CE1D38B0.roa
File: 77A1FADA39A311F1910D81F4CE1D38B0.roa (raw, json)
Hash identifier: dKaTYt4AMH0ogAeEhnA891PZBbH3Va4KEVkOzJyTPgM=
Subject key identifier: 5B:41:EB:CB:90:C2:F2:02:E3:BC:17:E2:B7:ED:60:14:06:62:19:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77A1FADA39A311F1910D81F4CE1D38B0.roa
Signing time: Thu 16 Apr 2026 14:49:28 +0000
ROA not before: Thu 16 Apr 2026 14:49:22 +0000
ROA not after: Wed 29 Apr 2026 14:49:22 +0000
asID: 63099
IP address blocks: 154.222.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116144 (0x1c5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 14:49:22 2026 GMT
Not After : Apr 29 14:49:22 2026 GMT
Subject: CN=69e0f6f8-f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:c4:79:77:e4:a4:e1:d9:ff:28:7d:50:56:
fb:67:f6:d5:08:06:de:f2:3b:26:ea:ff:0f:38:49:
6f:bd:4f:db:80:84:e6:f6:01:59:56:03:0f:98:e1:
70:0d:85:ea:78:d1:35:d7:3e:fc:01:24:49:ec:22:
ce:25:b0:f2:33:e0:05:e2:44:68:e4:57:90:67:a1:
08:38:24:43:05:8c:23:43:74:f9:05:06:98:59:9c:
e2:9e:08:d0:c6:11:be:9b:bd:c8:85:ed:d2:15:19:
d2:a7:c4:81:4a:0b:36:b4:43:b1:08:32:ed:dd:cb:
40:a3:33:38:a0:61:65:32:d8:6d:89:e3:61:9d:e9:
1d:84:9e:3f:eb:62:c3:04:9b:27:c1:04:d2:15:ef:
ed:f8:b7:a1:af:e1:b2:89:6d:5e:f4:b6:d6:79:73:
02:90:96:f2:e7:20:c8:45:3b:3a:cb:88:65:36:e9:
5b:16:30:41:ac:77:b4:d3:c5:66:6b:49:14:48:e3:
f7:cb:25:ac:4c:df:17:80:1c:d6:90:ed:43:3a:54:
72:33:6d:b0:d0:bc:fb:e3:d7:3e:a7:e4:aa:6b:71:
4c:14:1b:84:c6:ac:7a:62:de:59:49:13:9b:c6:5c:
7c:64:85:9f:b9:71:48:dc:f8:69:29:d3:4d:2e:29:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:41:EB:CB:90:C2:F2:02:E3:BC:17:E2:B7:ED:60:14:06:62:19:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77A1FADA39A311F1910D81F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.84.0/23
Signature Algorithm: sha256WithRSAEncryption
88:be:09:7f:d9:32:10:40:51:a4:7a:7a:8c:e6:2b:da:bf:5c:
1a:26:f8:bc:40:30:16:fb:fe:b1:a2:55:a4:8c:c3:75:1c:28:
00:ad:b3:b2:1a:7a:ff:0e:32:02:e9:d7:8e:1a:c1:7f:05:57:
b9:0c:3c:94:f4:23:b1:d3:79:30:6c:f6:8e:bb:79:73:36:4c:
d1:b2:74:8c:8e:db:3c:2e:a3:f7:bc:c3:35:be:d6:13:46:08:
8c:c2:4a:9f:9d:e8:0b:ab:17:6b:ed:ab:f0:73:55:a9:54:63:
fe:97:41:36:c9:c4:c5:db:53:7e:75:3e:7e:d4:36:8f:de:30:
11:3b:e6:39:6f:82:23:25:36:7e:a2:b1:67:72:7b:ff:a0:ce:
fb:78:5d:eb:30:df:b7:99:8e:d0:d5:bb:be:ff:c6:19:f5:65:
61:f8:22:66:7d:49:83:3f:a2:28:18:1d:09:ec:85:06:47:0e:
f3:37:0a:1b:c8:3a:50:2f:33:64:15:55:b4:92:3f:cf:25:39:
6a:3f:c8:8a:1f:c5:1d:dc:4c:24:ca:d6:0f:39:57:52:45:98:
18:31:5e:4a:3d:9a:14:76:e0:a3:d9:29:fb:4e:78:ba:d3:e7:
ed:b9:1b:2e:0a:f2:4e:ec:fd:99:3a:e1:d4:59:9a:9d:92:d0:
3d:b8:be:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcWwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE2MTQ0OTIyWhcNMjYwNDI5MTQ0OTIyWjAYMRYw
FAYDVQQDEw02OWUwZjZmOC1mMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApejEeXfkpOHZ/yh9UFb7Z/bVCAbe8jsm6v8POElvvU/bgITm9gFZVgMP
mOFwDYXqeNE11z78ASRJ7CLOJbDyM+AF4kRo5FeQZ6EIOCRDBYwjQ3T5BQaYWZzi
ngjQxhG+m73Ihe3SFRnSp8SBSgs2tEOxCDLt3ctAozM4oGFlMthtieNhnekdhJ4/
62LDBJsnwQTSFe/t+Lehr+GyiW1e9LbWeXMCkJby5yDIRTs6y4hlNulbFjBBrHe0
08Vma0kUSOP3yyWsTN8XgBzWkO1DOlRyM22w0Lz749c+p+Sqa3FMFBuExqx6Yt5Z
SRObxlx8ZIWfuXFI3PhpKdNNLimTlwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFtB
68uQwvIC47wX4rftYBQGYhmYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83N0ExRkFEQTM5QTMxMUYxOTEwRDgxRjRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt5UMA0GCSqGSIb3DQEB
CwUAA4IBAQCIvgl/2TIQQFGkenqM5ivav1waJvi8QDAW+/6xolWkjMN1HCgArbOy
Gnr/DjIC6deOGsF/BVe5DDyU9COx03kwbPaOu3lzNkzRsnSMjts8LqP3vMM1vtYT
RgiMwkqfnegLqxdr7avwc1WpVGP+l0E2ycTF21N+dT5+1DaP3jARO+Y5b4IjJTZ+
orFncnv/oM77eF3rMN+3mY7Q1bu+/8YZ9WVh+CJmfUmDP6IoGB0J7IUGRw7zNwob
yDpQLzNkFVW0kj/PJTlqP8iKH8Ud3EwkytYPOVdSRZgYMV5KPZoUduCj2Sn7Tni6
0+ftuRsuCvJO7P2ZOuHUWZqdktA9uL69
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:45 2026 by rpki-client