Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E98D4A149711F1869DF899DAE4EC9C.roa
File: 77E98D4A149711F1869DF899DAE4EC9C.roa (raw, json)
Hash identifier: p6e4aTziGqy43BpBYny5QmW7Q8vOT6mfGjY0/6Ie/6o=
Subject key identifier: A6:70:E3:74:C8:DE:FC:CF:8C:32:A5:CB:A2:36:E2:7A:7C:3D:6A:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E98D4A149711F1869DF899DAE4EC9C.roa
Signing time: Sat 28 Feb 2026 11:20:21 +0000
ROA not before: Sat 28 Feb 2026 11:20:16 +0000
ROA not after: Sun 05 Apr 2026 11:20:16 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113759 (0x1bc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 11:20:16 2026 GMT
Not After : Apr 5 11:20:16 2026 GMT
Subject: CN=69a2cf75-372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:f6:e7:44:5b:9b:1d:4b:a9:b4:dd:ff:66:
4a:a1:ef:90:3a:f5:81:c3:27:91:54:2d:76:77:d5:
b9:f9:74:f2:3b:b4:05:78:4d:bd:3c:af:7c:14:4f:
1a:89:ac:06:17:24:90:23:25:74:09:d1:2b:75:f3:
1c:76:f0:2f:1f:86:27:90:41:f8:ee:24:41:61:d0:
ea:f1:a7:3a:b9:b1:30:de:47:61:7d:b3:d6:f1:2e:
5f:5b:7a:3e:a4:c5:3a:e4:d7:34:c3:82:d7:14:63:
8f:84:cb:05:21:87:ca:0d:9b:cc:4f:d1:7f:a1:55:
65:c6:71:e7:5a:8b:14:78:22:9f:05:2a:86:69:98:
96:d3:04:e1:7c:d1:ad:2a:e3:90:ae:70:9e:c9:06:
74:94:8e:e1:51:c0:f2:72:ae:46:5c:4e:9e:97:1d:
4a:ae:05:0f:91:00:91:2c:e3:d0:c1:08:80:98:38:
72:f2:fa:15:ea:33:73:55:9c:c2:26:42:c1:da:43:
9b:32:7a:3a:b3:bd:22:9d:9a:39:ab:3b:6a:49:58:
69:41:cb:eb:d7:be:84:5e:6d:88:6e:6d:90:9a:bc:
20:07:01:d6:3e:ed:9d:d6:bf:9c:c1:a8:d4:c7:76:
38:97:16:07:70:49:42:ba:9f:e7:3f:40:dc:80:f0:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:E3:74:C8:DE:FC:CF:8C:32:A5:CB:A2:36:E2:7A:7C:3D:6A:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E98D4A149711F1869DF899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ec:2a:2a:d9:f3:31:e5:41:ea:0b:94:a3:06:64:a1:f8:0a:
99:96:c7:cd:91:a5:0e:9d:83:07:8a:74:66:7b:49:23:f3:19:
ed:16:51:59:3a:b9:c8:71:a1:d4:e2:9b:4b:c9:7a:fd:44:42:
d9:78:1b:b2:41:b9:58:dc:ed:13:69:19:43:51:88:91:3c:9e:
ba:1f:f6:b5:dc:2c:fd:e1:40:b2:81:16:aa:59:e4:7c:5d:55:
64:0a:37:56:57:5e:ba:6d:6d:eb:3b:96:24:ad:18:90:e8:75:
70:98:af:b0:3b:2c:4e:1a:20:e7:a3:1c:ab:6a:ec:b5:4a:ad:
5f:12:db:66:9a:5d:bf:af:e4:61:d4:36:60:a8:fd:59:48:eb:
0a:56:3e:7b:d0:9c:e7:2e:31:c2:d4:c1:21:14:df:84:05:5c:
3e:74:58:d5:6d:3c:3c:8a:09:07:3b:aa:6c:61:e3:26:0d:5f:
42:1f:01:97:75:59:77:e6:4e:93:5a:da:60:75:10:0f:97:b2:
40:c7:41:87:7a:8b:6e:59:f0:d3:e9:53:dd:fa:c8:64:a3:67:
e2:87:55:98:6d:e8:ba:d9:ba:e3:6c:c6:78:bb:88:4f:3a:6a:
ae:2d:90:3c:f2:0f:21:57:7e:73:77:77:35:ed:2b:0e:d4:46:
e8:bc:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:30 2026 by rpki-client