Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C62B1C88756A11F1B8CB311ACF1D38B0.roa
File: C62B1C88756A11F1B8CB311ACF1D38B0.roa (raw, json)
Hash identifier: upSPMjietr5zW2NhWas5oBMM7rQnUPzGGyNf/+pUQ70=
Subject key identifier: 3D:9A:FF:80:0F:1E:E4:F0:84:64:B8:C4:76:D6:BF:6F:05:E5:A5:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D64C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C62B1C88756A11F1B8CB311ACF1D38B0.roa
Signing time: Wed 01 Jul 2026 16:34:48 +0000
ROA not before: Wed 01 Jul 2026 16:34:43 +0000
ROA not after: Sat 01 Aug 2026 16:34:43 +0000
asID: 32043
IP address blocks: 154.200.2.0/23 maxlen: 24
154.200.4.0/23 maxlen: 24
154.200.6.0/23 maxlen: 24
154.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120396 (0x1d64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 16:34:43 2026 GMT
Not After : Aug 1 16:34:43 2026 GMT
Subject: CN=6a4541a8-818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:a1:6e:27:27:f0:2b:49:4d:f2:97:cf:3f:
45:28:db:4d:1a:b4:7e:3b:ed:c2:a7:16:65:21:19:
ac:8f:a3:fb:25:8a:dd:49:53:68:63:78:58:39:82:
97:37:47:f0:1b:1f:7b:69:25:65:90:94:1d:46:d9:
0b:9f:98:1b:59:fa:73:f5:fd:86:6a:a0:ff:b5:93:
50:a7:1f:c2:e1:57:1b:56:7a:ed:e9:bc:f5:9c:f7:
1b:75:55:e9:e6:ea:77:df:d7:72:bf:62:de:c9:15:
c0:31:9d:d4:27:b7:b1:a8:07:1d:35:f2:ee:62:de:
38:eb:5d:05:24:74:28:60:02:a4:8f:4b:fa:93:53:
f6:b2:fa:3b:2e:48:32:73:8f:16:eb:a6:d7:07:e7:
4d:14:42:d5:f3:83:b5:ce:cd:53:3e:a7:73:7b:c6:
b8:4a:f1:5f:87:90:e9:7b:dd:b7:bd:d8:34:35:b8:
72:53:e7:4e:3d:67:09:1e:d2:e8:ef:65:09:77:8e:
6a:50:40:ae:16:84:f1:81:49:00:3c:57:05:32:bf:
4a:d4:c5:41:8b:24:f6:c1:d3:a8:b6:7f:3b:dc:2e:
28:b1:58:bf:8f:a7:37:a1:99:fc:e4:93:3e:d0:61:
61:7e:af:b5:14:03:60:42:b5:ac:12:2f:95:0b:fb:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9A:FF:80:0F:1E:E4:F0:84:64:B8:C4:76:D6:BF:6F:05:E5:A5:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C62B1C88756A11F1B8CB311ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.2.0-154.200.7.255
154.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ae:36:ac:ff:72:ba:57:ae:b1:ea:12:13:64:8b:32:86:95:
3b:f0:01:44:9b:5e:cb:68:4e:8c:56:8c:f0:84:46:65:0e:5d:
c1:a1:f6:2c:1a:42:ef:cf:21:37:ee:86:70:f8:cb:9e:02:7b:
40:7d:bf:8d:32:7c:80:f2:30:2b:00:15:dc:f8:4c:c3:07:27:
f5:a8:1f:62:b9:df:c1:1a:60:92:eb:89:90:92:de:09:36:68:
14:9a:3d:99:b2:3c:97:f3:23:51:49:8a:b5:ea:cb:bb:86:b6:
9c:db:90:c1:b2:22:35:63:3c:6e:8c:c0:9e:5b:a6:80:cb:2e:
e0:a6:63:5b:67:2b:d1:c2:49:bd:ad:e1:15:7b:95:a3:0e:75:
39:50:77:d6:eb:15:e5:cb:d8:02:e5:8b:03:a6:88:c2:b1:34:
d4:cc:77:cb:cc:47:4e:e6:ce:1f:12:25:d0:97:8b:55:00:dc:
d1:1f:7d:11:a2:0b:b1:a4:61:50:8b:a3:08:a7:01:2a:e5:6c:
ec:cc:9c:83:41:f0:99:23:0d:b0:fd:55:93:a4:10:e9:e3:d3:
69:ad:f8:df:3f:91:ea:71:9c:ca:43:64:d9:73:9d:fc:2c:58:
d3:2f:83:1d:d5:f9:41:1a:ba:e3:eb:c6:1a:da:9d:89:c8:fb:
c1:c4:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:33:18 2026 by rpki-client