Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62719CD6282F11F1BA31C59BDAE4EC9C.roa
File: 62719CD6282F11F1BA31C59BDAE4EC9C.roa (raw, json)
Hash identifier: 7Ynrxy8B4PTOITD40UTI8BjVNgELHhVf8FOcHI2qgl8=
Subject key identifier: 3D:22:9E:78:2C:60:50:B9:C3:70:FC:CD:55:74:6A:80:27:6E:D1:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62719CD6282F11F1BA31C59BDAE4EC9C.roa
Signing time: Wed 25 Mar 2026 09:45:41 +0000
ROA not before: Wed 25 Mar 2026 09:45:36 +0000
ROA not after: Tue 12 Jan 2027 09:45:36 +0000
asID: 213736
IP address blocks: 154.85.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114926 (0x1c0ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 25 09:45:36 2026 GMT
Not After : Jan 12 09:45:36 2027 GMT
Subject: CN=69c3aec5-bf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:5a:d6:b2:d0:df:62:01:25:9f:ed:46:07:
4f:8a:0f:c3:19:17:21:f0:db:f6:96:75:17:6e:6b:
e2:2c:e7:dc:74:cd:67:f8:ae:5b:15:3e:ed:49:bd:
20:e8:1c:eb:cc:74:ff:6d:f2:0d:47:62:57:b2:f0:
37:46:ca:d8:bb:7e:b9:63:d6:1c:c9:de:65:c8:95:
3b:6a:36:55:52:5d:3e:5a:94:6d:7e:e4:04:d8:11:
73:e3:46:c8:da:61:7a:9d:8d:42:9d:2e:89:ad:e3:
4d:d9:87:49:e8:e3:87:1c:15:59:f1:b3:8a:0d:6f:
25:34:67:1b:c6:1b:26:f3:65:11:34:5a:24:d0:dd:
28:e6:2f:89:0c:5b:ac:9d:79:a8:ba:de:ff:a1:46:
7f:65:bf:9d:25:39:a2:3b:71:18:11:18:63:38:4b:
22:1c:d5:71:dd:3d:22:45:06:45:48:c5:7a:dc:4f:
85:4b:39:8d:0f:46:f4:0a:ca:1d:d1:13:ab:da:ce:
5b:29:ec:3c:c8:c5:89:07:26:68:f3:01:43:a0:6a:
0c:50:79:de:1d:5a:b8:53:f1:a6:1a:56:f2:87:52:
e1:89:41:ea:33:65:97:57:c1:79:7e:1c:f9:ec:16:
ce:20:10:ec:52:bc:1a:c4:7e:a1:2c:d3:81:9d:38:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:9E:78:2C:60:50:B9:C3:70:FC:CD:55:74:6A:80:27:6E:D1:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62719CD6282F11F1BA31C59BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.71.0/24
Signature Algorithm: sha256WithRSAEncryption
96:10:d6:ed:c5:c3:35:66:c1:1d:df:f5:50:32:7e:d0:e7:62:
44:9b:bf:06:86:bb:be:5a:12:be:13:1e:4c:f7:4a:62:84:48:
03:12:ab:77:35:7f:18:b6:0c:d6:c1:ef:b5:cc:12:52:11:58:
34:2f:5d:74:30:93:b8:bd:6a:ca:da:8d:c2:9a:ac:97:1a:db:
4c:04:9e:ed:c6:e4:04:67:fa:ea:2a:26:38:8f:2c:74:0d:78:
30:02:55:34:cc:9b:c6:03:e9:d5:69:a8:aa:29:0e:e7:95:27:
5e:67:ba:80:ec:0d:0d:36:3a:7c:3c:17:36:17:f9:24:a6:d7:
8b:b6:5d:27:a5:c6:04:09:27:23:18:ad:8f:88:08:ec:74:63:
a2:6d:94:d4:90:78:c0:19:c1:0b:b8:14:17:78:14:c9:23:0a:
1e:54:24:04:cc:14:4d:11:0b:dd:ab:a8:93:f4:42:a4:34:6b:
cb:b6:30:4a:8f:d5:09:6c:67:64:f9:5e:a9:b5:24:56:3f:d0:
f8:d2:26:8a:e7:91:24:bf:1f:ff:f6:ef:02:63:4e:35:e1:37:
69:96:4c:77:b0:b9:e8:21:07:57:72:dd:03:6a:a6:c0:51:03:
73:f8:59:af:4e:53:17:c7:2c:d9:09:e2:41:5e:dd:36:c6:cf:
4b:53:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:51 2026 by rpki-client