Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77B16998560E11F1A2F604B1CE1D38B0.roa
File: 77B16998560E11F1A2F604B1CE1D38B0.roa (raw, json)
Hash identifier: vwE32XHPQjokUxK/4EJZSa3TULlxE2GPmpMYJUEnDok=
Subject key identifier: 1C:59:B1:15:4F:CF:A5:A4:50:23:5F:74:56:A5:5C:1D:7B:CB:CD:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77B16998560E11F1A2F604B1CE1D38B0.roa
Signing time: Fri 22 May 2026 18:45:56 +0000
ROA not before: Fri 22 May 2026 18:45:52 +0000
ROA not after: Thu 09 Jul 2026 18:45:52 +0000
asID: 63099
IP address blocks: 154.200.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118352 (0x1ce50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 18:45:52 2026 GMT
Not After : Jul 9 18:45:52 2026 GMT
Subject: CN=6a10a464-4592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:00:6c:b2:e7:c0:d9:e2:41:3a:8c:2f:92:
83:1b:74:d4:d1:0d:bc:07:1f:ee:ad:5c:98:c3:0e:
d6:e5:5c:53:34:dc:35:cf:f5:1b:59:2a:dd:8c:fe:
96:d8:f1:6e:9a:78:c9:4c:78:f4:c2:6f:24:5e:6d:
38:65:53:ad:2f:69:83:2e:0e:39:6c:e6:84:bf:24:
81:09:0b:6c:90:c7:eb:ce:03:5b:e5:67:e4:97:f7:
ce:09:92:19:46:d8:25:1a:41:81:ac:91:80:ca:b0:
b6:f7:e6:5f:c1:df:c2:74:d7:1c:03:dd:40:ea:f8:
2d:ea:80:ee:64:80:64:43:7f:34:58:bb:84:59:fd:
3f:49:31:3e:80:52:dc:97:5e:14:47:10:65:85:a2:
cc:fe:2a:dc:17:a6:44:f6:d1:21:6e:f3:a5:82:4d:
9c:9a:ca:84:d4:f2:44:b7:92:5e:20:9e:6b:91:8a:
8e:cd:fa:6e:4f:37:db:23:1c:93:b5:31:b4:4a:27:
3c:85:e5:fd:aa:5b:4c:71:84:d7:c8:ec:97:ac:57:
1f:eb:f3:e4:df:2d:d6:77:42:d7:0b:b6:14:8e:3e:
f7:3e:31:eb:8c:0c:48:14:89:38:7b:98:81:a6:d1:
2e:21:e7:c3:03:cb:b1:8b:a5:17:be:5e:f7:a7:e2:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:59:B1:15:4F:CF:A5:A4:50:23:5F:74:56:A5:5C:1D:7B:CB:CD:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77B16998560E11F1A2F604B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c9:bf:ae:03:1c:50:50:b6:e0:ef:89:46:95:0b:50:c8:39:
6f:75:b3:38:00:ab:89:89:8a:0a:63:a9:b0:0b:73:7f:c5:b6:
07:96:41:f8:1f:c4:37:22:08:31:d9:79:4a:85:22:31:57:52:
17:e9:ac:ae:a0:97:38:7c:e4:37:18:87:29:00:78:10:e7:02:
47:ec:5b:b2:96:7c:66:6b:ac:12:14:42:12:9b:eb:a8:bb:e6:
24:0e:f4:c1:f9:46:ca:0c:55:74:66:80:07:5a:36:92:a9:58:
8a:cf:e5:63:18:77:b9:0d:7d:05:ba:cc:e2:94:48:98:cd:c0:
31:be:3c:b7:b5:44:2c:e1:5c:ac:33:84:e9:a1:52:20:a2:b8:
e5:56:af:19:eb:1f:0d:64:10:07:c9:11:a1:34:8b:f6:49:7d:
2c:e1:71:84:f6:98:d1:e3:6e:ef:46:4c:25:2c:58:df:17:c3:
36:cf:84:be:22:15:f3:27:10:f9:52:dc:ab:7d:61:33:75:95:
fe:83:f5:bb:8d:99:71:4b:51:81:fd:89:99:be:5d:d0:68:f7:
53:e3:1d:84:ff:85:69:93:35:9f:e4:d8:8e:25:47:b5:07:59:
c1:fd:13:cd:cc:8a:3c:9b:13:85:85:e3:35:11:33:94:ab:92:
c3:73:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:29:35 2026 by rpki-client