Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CA26A24D0B11F180DE64E1CE1D38B0.roa
File: 62CA26A24D0B11F180DE64E1CE1D38B0.roa (raw, json)
Hash identifier: nZ09IplY0aE1kWZk1D1bCWztgOILgqXTtLz/gdH9xFM=
Subject key identifier: 67:23:C7:8B:31:59:61:87:79:88:F5:CF:5F:FC:C7:60:47:3C:D3:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CA26A24D0B11F180DE64E1CE1D38B0.roa
Signing time: Mon 11 May 2026 07:31:12 +0000
ROA not before: Mon 11 May 2026 07:31:08 +0000
ROA not after: Sun 21 Jun 2026 07:31:08 +0000
asID: 2914
IP address blocks: 154.92.176.0/24 maxlen: 24
154.92.184.0/24 maxlen: 24
154.92.186.0/24 maxlen: 24
154.92.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117511 (0x1cb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:31:08 2026 GMT
Not After : Jun 21 07:31:08 2026 GMT
Subject: CN=6a0185c0-d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:43:3e:c7:90:2f:58:bc:76:22:6b:2b:08:
9d:bc:97:c5:5a:e2:52:df:e0:f8:84:d9:6d:82:62:
c3:b5:4d:66:a0:be:b9:8a:02:8c:87:d0:0d:07:db:
cb:25:06:14:d0:bd:6f:47:00:af:5b:dd:7a:84:6e:
4f:ab:e2:9a:90:b0:13:1c:49:e0:4b:76:73:13:02:
39:66:3a:4c:c5:a9:63:df:cb:cb:0f:05:f3:1d:2f:
5c:51:40:65:02:41:36:7b:09:5a:20:75:11:d9:2e:
56:7d:e9:91:9f:09:e6:b1:ba:b0:e9:6a:09:2e:30:
74:c9:2e:e5:3a:f8:cb:3b:d3:c0:2d:62:93:41:01:
1a:cb:b3:02:37:b7:6e:ff:75:4b:ab:54:45:aa:6c:
bf:ec:95:97:c0:ca:0c:40:17:07:57:e7:08:64:ee:
fe:04:f9:01:80:ee:96:7a:04:3c:7a:0a:26:d7:eb:
e4:20:21:bd:95:6c:55:12:3d:a8:04:08:b5:45:e1:
ff:d4:89:ae:ed:5a:8a:ca:82:74:42:8e:cc:85:54:
a3:fa:b8:86:0e:a7:95:e8:1b:61:f1:a4:1c:d2:ee:
d9:5c:cb:78:5d:6e:cd:1e:9e:66:ff:35:4f:6e:5d:
be:3f:15:bb:e3:b3:f5:f4:0f:89:01:b4:ad:a0:a9:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:C7:8B:31:59:61:87:79:88:F5:CF:5F:FC:C7:60:47:3C:D3:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CA26A24D0B11F180DE64E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/24
154.92.184.0/24
154.92.186.0/24
154.92.190.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:73:1d:c7:3c:6f:a3:e3:88:3c:ff:e1:82:5b:f2:c3:fb:b7:
e3:99:2b:f6:03:1f:2e:12:96:07:a3:0f:e8:5f:f0:92:b5:36:
28:e0:36:a3:56:39:84:c3:3f:d0:f3:1c:1d:57:13:29:0b:b4:
a1:ba:23:cb:b9:93:5c:1c:10:f4:45:a1:98:6f:5d:30:7b:6d:
dd:d2:48:a3:68:e2:1f:48:8e:7b:f8:66:24:b2:0f:14:8a:c4:
78:e9:e7:f8:68:6f:b1:42:f3:d9:86:98:a9:39:18:f4:71:c6:
76:19:69:f8:05:dd:82:ec:31:7c:39:00:2f:ca:01:78:19:26:
7e:a1:ff:56:9f:59:26:b2:9d:31:06:77:c1:04:e1:8b:b1:87:
c7:b0:21:e4:74:66:16:c8:54:cc:bf:08:de:c6:2e:ab:75:06:
f0:46:38:bb:9e:bd:b8:4d:c1:73:ad:af:a3:3f:8d:50:d7:35:
d4:2e:f2:32:5b:7c:78:0a:08:9e:11:50:2c:75:b4:c8:da:42:
97:a5:d4:80:33:cb:ed:28:07:d4:56:60:29:bb:23:8b:58:78:
d2:05:40:5f:15:6b:43:09:da:88:fc:46:2a:08:81:90:a2:ac:
99:95:a2:32:77:28:f5:d3:6a:12:00:e3:c0:7c:3b:d0:fa:7b:
de:78:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:36:53 2026 by rpki-client