Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77C2FF72117211F18225F5CADAE4EC9C.roa
File: 77C2FF72117211F18225F5CADAE4EC9C.roa (raw, json)
Hash identifier: Frm4G+e+unWMLHjIvegJjCXa/YdG82E/M+sSi1shB0E=
Subject key identifier: E1:67:8E:3F:99:F5:9B:F4:50:C1:75:61:0D:3C:D9:B5:3E:6B:12:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77C2FF72117211F18225F5CADAE4EC9C.roa
Signing time: Tue 24 Feb 2026 11:17:56 +0000
ROA not before: Tue 24 Feb 2026 11:17:52 +0000
ROA not after: Tue 31 Mar 2026 11:17:52 +0000
asID: 62240
IP address blocks: 154.195.2.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.40.0/24 maxlen: 24
154.196.41.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
154.196.43.0/24 maxlen: 24
154.196.44.0/24 maxlen: 24
154.196.45.0/24 maxlen: 24
154.196.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113486 (0x1bb4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 11:17:52 2026 GMT
Not After : Mar 31 11:17:52 2026 GMT
Subject: CN=699d88e4-735e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:93:fa:76:93:ce:39:74:5f:83:0b:1d:ef:
fe:79:e3:97:84:33:42:ce:bb:36:28:d2:bc:7b:7f:
5a:94:2e:d9:b9:4a:86:88:c4:17:43:9a:9d:be:cf:
00:56:a8:ce:f3:44:48:0d:35:d3:f9:eb:c0:2f:3d:
c4:0e:1c:61:ff:cf:14:92:f6:e3:5d:8d:fc:d4:bc:
6d:2f:8b:95:8b:30:a8:f6:3b:55:9f:c3:8d:fa:d7:
a2:62:d2:99:49:09:f7:b1:a7:70:ef:38:4e:ce:bb:
73:24:7a:87:f4:33:e3:64:cb:e1:d6:a0:09:d7:ec:
b9:d3:d7:d5:dd:05:25:d0:7c:b2:62:5f:c2:eb:0c:
93:5f:90:d9:6c:4c:0d:f2:e6:70:03:4b:ca:18:71:
b6:bc:ba:28:8a:d7:c3:15:a7:7b:4e:97:7c:8b:d7:
63:e4:d8:f2:fb:50:9f:4c:6e:ae:f2:ad:b3:ef:c0:
6d:74:3c:1b:2d:da:a3:de:c2:66:72:21:f7:14:95:
5d:62:0f:98:c7:0c:70:fb:65:9b:3a:fb:ff:74:f2:
42:a0:03:fe:39:6c:b6:c3:cc:83:b3:2c:5f:a2:d8:
68:78:bd:d9:9f:2a:91:2f:e7:34:57:b0:f3:cd:9c:
1e:07:22:72:2d:ba:ff:ad:3a:a1:6f:e8:5e:e2:b3:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:8E:3F:99:F5:9B:F4:50:C1:75:61:0D:3C:D9:B5:3E:6B:12:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77C2FF72117211F18225F5CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.2.0/24
154.196.33.0/24
154.196.36.0/24
154.196.40.0-154.196.46.255
Signature Algorithm: sha256WithRSAEncryption
32:b8:f1:25:e1:13:e5:90:2a:eb:43:a3:82:e8:1a:f0:91:5d:
2c:84:cf:da:8e:11:f2:8d:0a:bc:2b:83:ff:93:0a:46:26:fe:
d9:a2:28:13:8f:37:f6:d4:13:5a:85:00:b6:87:2c:5c:ea:e5:
74:9d:bd:ec:26:ec:84:4c:5e:cf:22:6d:1e:82:9e:9f:27:54:
6e:0f:2c:81:e9:f5:27:77:a9:58:ff:77:23:0b:37:18:49:a3:
75:69:c1:62:d6:b0:eb:19:11:1b:e1:83:b8:64:9f:79:39:d4:
87:ff:52:22:7c:eb:a3:02:36:20:3f:13:32:75:06:38:58:6a:
74:bb:aa:dd:7d:62:52:79:3d:cd:94:90:d4:36:ff:ad:b0:73:
07:30:bf:d2:a0:1c:46:af:b7:b9:5e:89:7c:ba:a9:9c:59:3c:
6c:a7:34:12:f8:77:fb:0e:d1:d0:17:88:ec:82:1c:5c:4e:37:
a0:be:84:6c:ec:91:3c:d6:b7:c1:93:76:9f:1d:2e:4b:3d:23:
3d:60:e2:15:b0:95:20:d2:b6:4e:06:0d:5f:8e:d5:a8:66:51:
35:ae:41:3b:7d:d1:96:9d:f9:9c:4d:5d:51:8c:da:d0:73:1c:
f7:78:c7:1c:81:48:42:79:4b:3a:90:63:1f:30:2b:4d:16:9e:
0f:3b:05:3c
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAbtOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI0MTExNzUyWhcNMjYwMzMxMTExNzUyWjAYMRYw
FAYDVQQDEw02OTlkODhlNC03MzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp9CT+naTzjl0X4MLHe/+eeOXhDNCzrs2KNK8e39alC7ZuUqGiMQXQ5qd
vs8AVqjO80RIDTXT+evALz3EDhxh/88UkvbjXY381LxtL4uVizCo9jtVn8ON+tei
YtKZSQn3sadw7zhOzrtzJHqH9DPjZMvh1qAJ1+y509fV3QUl0HyyYl/C6wyTX5DZ
bEwN8uZwA0vKGHG2vLooitfDFad7Tpd8i9dj5Njy+1CfTG6u8q2z78BtdDwbLdqj
3sJmciH3FJVdYg+Yxwxw+2WbOvv/dPJCoAP+OWy2w8yDsyxfothoeL3ZnyqRL+c0
V7DzzZweByJyLbr/rTqhb+he4rO8yQIDAQABo4ICvzCCArswHQYDVR0OBBYEFOFn
jj+Z9Zv0UMF1YQ082bU+axKtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83N0MyRkY3MjExNzIxMUYxODIyNUY1Q0FEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsMCAwQAmsQhAwQAmsQk
MAwDBAOaxCgDBACaxC4wDQYJKoZIhvcNAQELBQADggEBADK48SXhE+WQKutDo4Lo
GvCRXSyEz9qOEfKNCrwrg/+TCkYm/tmiKBOPN/bUE1qFALaHLFzq5XSdvewm7IRM
Xs8ibR6Cnp8nVG4PLIHp9Sd3qVj/dyMLNxhJo3VpwWLWsOsZERvhg7hkn3k51If/
UiJ866MCNiA/EzJ1BjhYanS7qt19YlJ5Pc2UkNQ2/62wcwcwv9KgHEavt7leiXy6
qZxZPGynNBL4d/sO0dAXiOyCHFxON6C+hGzskTzWt8GTdp8dLks9Iz1g4hWwlSDS
tk4GDV+O1ahmUTWuQTt90Zad+ZxNXVGM2tBzHPd4xxyBSEJ5SzqQYx8wK00Wng87
BTw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:14:37 2026 by rpki-client