Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/062FB984194E11F1BFC82493DAE4EC9C.roa
File: 062FB984194E11F1BFC82493DAE4EC9C.roa (raw, json)
Hash identifier: 4C4yfxbi8i+jf+CCVgkCh9kNCQIAlOK7AjLUO6qoB18=
Subject key identifier: 65:96:1F:E2:86:9E:02:AC:7C:38:B2:36:31:54:FB:81:44:DF:F6:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/062FB984194E11F1BFC82493DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 11:17:13 +0000
ROA not before: Fri 06 Mar 2026 11:17:08 +0000
ROA not after: Sun 05 Apr 2026 11:17:08 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114181 (0x1be05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 11:17:08 2026 GMT
Not After : Apr 5 11:17:08 2026 GMT
Subject: CN=69aab7b9-cb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:d2:22:c9:4d:06:53:31:77:36:dd:91:20:
9b:84:cb:91:2b:c9:30:0a:58:61:1e:f2:aa:53:7c:
cc:f4:9a:1a:05:69:9e:fb:39:b5:21:9e:4e:51:08:
18:51:c6:e9:aa:79:e4:b5:0a:3e:e0:30:d2:3c:f9:
35:ab:26:05:36:bc:5a:64:31:e5:8d:63:09:5c:65:
57:e7:b3:1a:de:bf:5d:0e:99:d0:bd:0f:d1:10:90:
da:9b:cf:47:b0:ef:cf:ca:5e:d1:81:d9:9f:1c:1b:
26:ca:77:8a:8c:f8:b7:41:72:94:62:a3:41:3b:9c:
1b:1f:4b:87:e7:bb:5e:e4:cb:d7:ad:10:4b:f2:6f:
15:9e:8b:46:63:17:04:7a:d1:ab:ea:40:68:ce:ae:
8d:c5:f7:69:ad:c3:59:68:5c:a0:2f:16:4d:51:c3:
74:3c:65:b0:66:07:fd:9b:39:8f:67:c3:f4:e7:0a:
f0:8a:b6:2d:de:27:8d:42:82:1a:f1:4e:94:e3:72:
28:3b:98:57:10:8f:d0:7d:25:8a:7c:44:b4:e5:75:
0c:e9:9d:16:14:54:b6:e8:bf:23:ec:3f:b7:ee:5f:
d3:90:80:0f:83:d9:e8:e5:41:eb:9b:f7:86:6d:c6:
d0:c2:29:4a:c3:c0:be:e1:ad:81:3e:45:da:df:dc:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:96:1F:E2:86:9E:02:AC:7C:38:B2:36:31:54:FB:81:44:DF:F6:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/062FB984194E11F1BFC82493DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:6b:35:71:0f:b6:64:d1:00:a5:5f:12:0d:f2:35:51:20:d8:
d6:37:4b:81:e7:97:6c:09:43:b8:62:cc:20:3c:0e:c7:9b:02:
ff:37:17:6a:3f:58:bd:c3:6b:21:3e:0f:93:58:0a:bf:4e:aa:
54:bf:62:43:99:d8:cc:a6:15:63:cf:2f:90:b7:4f:41:f9:27:
7b:43:dc:52:3d:ef:6f:80:1b:4a:95:27:5a:48:c2:06:12:47:
2e:41:e1:b9:33:56:10:04:fe:ee:83:17:9c:f7:98:cb:b2:ed:
8c:8a:85:24:ec:35:0f:45:e7:7c:de:a5:4d:3f:dc:c2:1d:22:
f1:f6:ef:4a:70:5d:e8:de:ea:27:c4:fb:c4:dd:d5:a3:76:c6:
31:dc:ad:1d:51:2b:0f:12:10:e7:95:73:dd:cd:01:f8:88:9a:
cc:f5:1f:cc:88:5e:44:b2:0a:92:9f:77:6a:19:21:f8:b3:9f:
47:d9:f0:c4:aa:8b:e9:e6:74:90:03:58:7b:f4:86:4b:52:5d:
00:fc:9b:b2:28:e8:bf:38:a7:b4:26:50:84:71:0e:05:9f:8e:
8f:17:11:66:55:68:40:ec:fd:27:26:1f:bc:64:3d:d9:5b:9b:
7a:90:27:3d:d6:f0:85:ee:42:7d:86:6e:a2:60:0d:19:1e:34:
b0:57:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 13:50:10 2026 by rpki-client