Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77C5E7340E9111F1A469A797DAE4EC9C.roa
File: 77C5E7340E9111F1A469A797DAE4EC9C.roa (raw, json)
Hash identifier: NKEXX1JBze7vBa20Yae1iBO33XflItnyzGRuCiYOY5g=
Subject key identifier: 49:C1:4F:AC:D6:06:4D:62:02:F2:D5:DB:7B:CF:A8:E2:D5:9E:24:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77C5E7340E9111F1A469A797DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 19:22:17 +0000
ROA not before: Fri 20 Feb 2026 19:22:10 +0000
ROA not after: Thu 04 Jun 2026 19:22:10 +0000
asID: 18229
IP address blocks: 154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113318 (0x1baa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 19:22:10 2026 GMT
Not After : Jun 4 19:22:10 2026 GMT
Subject: CN=6998b469-688e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:d0:b8:c4:bc:2a:1a:b9:7e:07:6e:9b:4a:
d1:58:cc:37:d8:15:4d:8f:bd:31:09:8f:ba:60:f6:
2c:d3:16:6b:9f:38:54:e5:8c:18:07:93:55:33:4a:
94:a6:69:46:52:54:32:9e:d9:d8:91:3d:bd:1d:6c:
3f:3f:95:8a:9b:2a:4c:cd:cd:e1:9f:43:7c:1e:1e:
4f:2e:d7:1a:0f:1f:b3:3b:a3:a9:79:fd:49:ae:e5:
b4:4f:f4:05:f4:6d:bf:aa:f3:e1:2a:7c:81:b3:2a:
d8:e8:89:96:b5:ad:f8:44:a3:d5:67:81:4d:ec:e3:
e8:f6:c0:35:76:ee:9f:ef:01:f3:86:60:ad:aa:94:
95:37:97:df:2e:64:75:24:98:24:ca:93:08:95:17:
26:28:3a:a3:83:d1:7d:18:01:7f:85:48:3d:22:73:
ef:0f:29:7f:f8:fb:f6:06:5c:50:fc:09:ac:c1:5c:
57:d7:66:c9:af:ad:ad:c7:e3:c2:a2:2e:bc:9e:c7:
02:ca:06:f2:aa:ac:93:76:99:5e:5f:94:de:c0:98:
ab:5c:04:a1:a8:29:05:5e:dd:25:cb:f7:a4:e9:e7:
12:83:0c:d2:f8:72:96:c9:d1:9d:7c:31:52:f4:0a:
6d:10:b7:5c:f9:33:56:30:9f:60:31:56:03:17:f8:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:4F:AC:D6:06:4D:62:02:F2:D5:DB:7B:CF:A8:E2:D5:9E:24:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77C5E7340E9111F1A469A797DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.155.0-154.210.164.255
Signature Algorithm: sha256WithRSAEncryption
2d:05:f8:61:13:50:ab:56:c8:3b:55:1d:42:71:a1:c1:31:e2:
98:63:30:c3:48:b0:78:8d:ad:6f:4f:9b:7f:bb:f7:1d:67:4b:
e8:a7:0e:3a:d1:4f:84:85:bc:3a:0c:b0:2f:f0:1e:9a:95:0e:
4d:58:a1:c9:92:d0:d8:c7:83:04:5e:63:07:80:f9:3d:08:84:
26:5d:b9:4c:25:11:77:52:43:2f:c2:cf:7c:50:0f:f8:78:69:
9b:5f:38:dc:9f:96:12:cc:ff:53:d4:93:f0:80:ab:ef:f1:89:
03:7f:0a:b7:cb:12:23:ea:b8:b8:4c:70:1c:df:f0:ca:40:f3:
e8:fc:ad:98:37:06:a1:2e:77:45:79:59:f3:63:5e:7e:2e:c4:
60:d5:4f:5e:5a:8c:f6:f6:47:97:0e:41:f0:12:d1:77:e3:d1:
01:2c:9b:a6:51:47:66:5a:25:ec:80:4d:fc:66:7a:de:f6:33:
03:de:43:dc:68:0c:1c:61:b0:19:94:e3:c4:e3:a4:c6:b3:d2:
22:7c:be:74:a8:3e:ed:1b:c2:f1:ec:9c:ee:bd:85:29:7e:03:
5b:6a:0a:83:c7:34:25:ab:75:bc:5d:32:13:47:d8:07:30:08:
9f:b1:07:2c:94:66:aa:03:21:1e:61:35:6a:c4:47:31:91:59:
31:e6:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:23 2026 by rpki-client