Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/628DF500537911F1B68ED8F1CE1D38B0.roa
File: 628DF500537911F1B68ED8F1CE1D38B0.roa (raw, json)
Hash identifier: E8mvCX00l88mjky+5C4znmUuzWboUN6aALG/laDjNPU=
Subject key identifier: F8:EB:03:DB:52:3E:0A:06:C0:AC:EF:13:88:C4:0A:A7:14:0D:52:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/628DF500537911F1B68ED8F1CE1D38B0.roa
Signing time: Tue 19 May 2026 11:53:44 +0000
ROA not before: Tue 19 May 2026 11:53:39 +0000
ROA not after: Tue 09 Jun 2026 11:53:39 +0000
asID: 197574
IP address blocks: 154.86.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117898 (0x1cc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 11:53:39 2026 GMT
Not After : Jun 9 11:53:39 2026 GMT
Subject: CN=6a0c4f48-abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:08:9b:10:19:f3:66:28:aa:55:24:9e:9b:
eb:19:04:3e:47:4f:62:cd:37:55:d0:c8:01:82:5f:
55:0a:df:d1:b0:09:d3:62:d2:f5:4f:ed:87:2c:46:
e5:77:1d:ab:e9:d7:52:62:61:1e:13:24:7f:46:cc:
30:6d:23:db:8e:b6:6b:e7:24:44:13:f7:46:1a:07:
c8:23:39:65:0f:86:a8:b4:17:fe:02:c1:41:d0:7e:
04:53:be:2a:10:fc:9e:b2:6c:da:bd:97:4d:e4:67:
2a:72:c8:b0:f0:1e:f6:2e:66:12:d3:fa:92:2a:f5:
54:c7:50:58:78:4c:18:9b:4b:eb:82:8c:b6:22:74:
5e:bf:c9:30:74:f9:6e:b4:d5:7a:ec:45:86:32:43:
ff:26:ff:76:d2:ef:10:97:06:95:ed:e3:3d:66:c6:
d7:1b:96:74:9e:56:d2:32:3a:64:48:d4:0c:37:89:
4b:f6:27:ad:f2:87:9e:7d:2a:7a:9b:ed:4e:66:56:
9e:c7:0b:36:1b:b0:1e:e5:f2:6d:8d:38:72:39:86:
96:27:47:c7:c3:0c:3d:62:51:e6:eb:46:92:29:f4:
fc:ed:e3:f3:3e:b6:48:ec:a4:ca:7a:41:8d:cb:d5:
0c:62:7f:bd:71:04:3d:45:60:ec:ca:d2:4a:76:95:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EB:03:DB:52:3E:0A:06:C0:AC:EF:13:88:C4:0A:A7:14:0D:52:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/628DF500537911F1B68ED8F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.119.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3d:8b:59:4a:27:dc:54:ea:16:79:95:b8:e0:b2:ce:49:2b:
c8:45:5e:fe:b5:7a:8c:26:33:56:3b:9f:97:7e:a2:6b:87:58:
b0:4e:8c:83:95:62:90:1c:93:94:c1:d1:59:12:86:99:8b:35:
98:37:5c:c1:a7:f3:ac:43:bc:cd:bf:db:d5:09:76:31:b1:28:
1c:1d:4c:db:de:42:27:6c:96:6d:01:b9:b1:5c:76:cb:49:f5:
88:ee:9f:e9:20:3c:5a:a7:8c:79:83:42:ed:c2:3c:fa:63:ce:
a0:4d:98:b9:f9:25:d8:53:26:18:07:31:5e:c3:94:9c:3a:97:
7b:36:85:c7:28:d6:d7:a5:d8:18:ab:e2:8c:7b:cf:55:eb:d3:
d9:10:2e:56:db:30:a2:d9:7f:dd:62:56:b4:47:dc:c1:7c:c9:
d0:ab:2d:77:48:f1:da:cb:fd:b4:57:02:3a:19:94:66:69:75:
74:0e:4d:1b:c7:9c:c0:02:48:70:8e:f5:38:bf:84:d5:ab:b7:
02:a1:d2:67:fd:fb:b4:3e:a4:20:47:d4:99:a0:42:f4:74:5d:
76:99:e4:3d:58:c4:3f:44:ce:a6:97:13:ba:58:46:85:a5:fe:
8e:5b:71:1c:97:e7:e1:05:a2:d7:cd:55:67:a2:25:fd:e0:b3:
c8:b6:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:59 2026 by rpki-client