Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62977072898D11F1AF7141B8CE1D38B0.roa
File: 62977072898D11F1AF7141B8CE1D38B0.roa (raw, json)
Hash identifier: q78A1hrsmTr5HmNYKSgg9dkSDJhdNPtcXUtLhPyDrrY=
Subject key identifier: D4:7C:47:DF:1F:20:C0:72:D9:BC:BE:1E:D5:62:4D:4E:CF:13:40:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62977072898D11F1AF7141B8CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:32:56 +0000
ROA not before: Mon 27 Jul 2026 07:32:52 +0000
ROA not after: Thu 06 Aug 2026 07:32:52 +0000
asID: 4760
IP address blocks: 154.88.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Jul 2026 08:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121685 (0x1db55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:32:52 2026 GMT
Not After : Aug 6 07:32:52 2026 GMT
Subject: CN=6a6709a8-2c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:12:4d:26:1e:69:3a:30:d5:71:69:6b:ff:
33:1b:5e:5d:a3:7e:bd:51:68:22:d4:b8:ae:0a:c3:
a9:8e:6e:5f:28:e6:58:c2:b8:ed:95:05:00:ca:c9:
40:31:ef:c0:8f:9a:5e:f7:5a:12:a0:31:61:48:da:
96:59:d4:fd:5e:a2:be:68:d1:5e:ae:7a:90:a8:bc:
2a:f2:5f:e3:99:02:98:2b:f1:bd:d7:1c:6a:a6:25:
29:5b:c3:fb:82:f7:32:d7:e1:7f:59:89:92:b5:b2:
cf:5d:e3:48:32:b9:a1:d2:48:ac:15:70:79:d9:f3:
d5:d9:3f:ef:e7:ac:7b:62:27:d2:ed:44:46:eb:f5:
63:ae:40:93:8a:70:6e:cb:8f:48:c6:de:6d:fc:12:
3d:ab:4e:7b:d4:19:e8:c8:b6:23:f6:df:35:0a:ce:
9c:44:c8:d4:4e:a8:26:93:41:41:56:62:c2:4d:95:
79:e0:dd:11:bc:5e:53:ea:58:d1:c3:d7:d4:10:dc:
30:12:2d:3d:e6:2b:a5:53:86:15:ec:2c:8e:75:e9:
0f:96:f7:e6:98:48:5f:50:34:0e:bd:d4:3a:23:e2:
1e:0a:7b:92:85:6a:99:00:da:2d:44:3d:c1:63:9d:
25:3a:51:7b:fe:45:a5:9d:ff:6e:79:76:01:9c:7f:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:47:DF:1F:20:C0:72:D9:BC:BE:1E:D5:62:4D:4E:CF:13:40:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62977072898D11F1AF7141B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.80.0/20
Signature Algorithm: sha256WithRSAEncryption
07:18:27:de:f5:87:e2:5f:5f:cb:21:ce:a1:22:33:89:7d:78:
88:d9:5f:cb:55:41:0c:c9:4d:29:99:a6:47:f9:59:11:ef:0b:
4b:28:66:af:67:db:f2:91:ff:96:bf:0a:f1:99:72:6d:97:60:
9e:3e:a5:d9:de:d8:86:c5:3b:f6:a8:4d:5d:d1:11:e1:09:62:
aa:23:9e:36:0a:d5:53:9a:ed:ac:66:e6:73:25:27:49:ac:10:
29:d9:04:2a:37:69:79:5f:11:04:84:fe:60:d9:23:36:4c:c7:
76:2a:7c:1c:10:eb:5b:42:6f:f6:5f:cc:a2:3d:70:57:0f:bd:
92:23:ee:e1:c0:52:d9:f3:b8:13:8d:eb:aa:82:71:41:d8:a5:
d5:84:3d:7e:a5:10:fe:bd:af:0d:31:de:d9:10:0e:59:80:d6:
8e:af:0f:ae:97:98:64:79:c4:22:9e:a3:86:77:0f:97:37:48:
c2:81:6a:b0:79:d2:6d:26:2d:43:23:ed:b6:2f:2f:3f:ba:63:
d0:86:8d:f0:13:7d:4f:e6:37:bf:ea:52:dc:eb:b4:ac:33:a9:
8a:cf:5b:7f:e3:fc:09:89:69:7d:f5:5e:71:f6:43:36:c7:46:
b7:d6:0f:6a:4b:48:e4:51:24:a3:eb:71:3f:dc:ab:3a:a5:88:
64:b6:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:11:30 2026 by rpki-client