Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CBC2CE491D11F18E04C6F8CE1D38B0.roa
File: 62CBC2CE491D11F18E04C6F8CE1D38B0.roa (raw, json)
Hash identifier: wS6AWrcQdcD9l27fdcAM5YhX8cTUUeujMmtycoDQCfg=
Subject key identifier: 8A:ED:B1:F7:F9:11:96:89:B3:27:E0:01:AA:36:66:DC:70:BD:6B:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C979
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CBC2CE491D11F18E04C6F8CE1D38B0.roa
Signing time: Wed 06 May 2026 07:29:59 +0000
ROA not before: Wed 06 May 2026 07:29:54 +0000
ROA not after: Mon 01 Jun 2026 07:29:54 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117113 (0x1c979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:29:54 2026 GMT
Not After : Jun 1 07:29:54 2026 GMT
Subject: CN=69faedf7-adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:0c:1f:8c:39:b8:6f:6b:a4:4f:9b:9d:c2:
72:28:9b:2a:4e:2e:6a:23:02:d7:a0:ba:86:1d:c2:
18:0b:1a:c1:4b:cf:f3:da:22:96:b5:a1:af:bc:ea:
bd:77:f9:29:98:a7:34:c7:ca:95:0a:88:bf:16:8f:
87:7b:5d:2c:0e:17:a2:d1:12:41:7e:3b:8d:b8:05:
85:17:19:91:9d:62:64:7b:ab:df:fe:74:0b:14:a7:
3f:9d:48:c9:e0:3b:0b:12:d9:23:1c:31:8f:4f:9d:
21:24:7e:aa:65:40:55:92:56:cf:ea:78:65:54:2a:
e4:77:eb:88:a1:8a:1d:e0:dd:c6:4a:b8:ac:22:b7:
dd:f8:9b:e5:dc:ef:c4:92:15:21:eb:7e:32:ff:c3:
99:f7:8d:8d:65:99:2a:cc:ec:69:59:8d:c2:da:55:
dd:cd:be:9f:d4:85:81:b7:eb:6f:b4:e0:86:ed:ed:
f1:b5:91:4c:71:42:b7:5a:3a:34:13:68:93:08:5e:
11:c0:82:93:a0:1a:d2:da:ee:0a:9b:d3:76:94:71:
80:b2:0c:65:59:32:ce:7f:2a:09:a5:e5:d0:39:27:
22:15:c4:39:32:52:f9:97:5d:a7:fe:ae:59:41:8e:
14:c8:35:75:f5:c5:2d:71:2c:8d:5b:0f:53:16:66:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:B1:F7:F9:11:96:89:B3:27:E0:01:AA:36:66:DC:70:BD:6B:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CBC2CE491D11F18E04C6F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:62:42:09:5f:32:db:12:64:e6:27:5e:c3:c4:7b:e0:10:01:
55:59:bb:db:97:ca:94:e5:5c:24:c7:e8:ed:65:de:ec:a3:18:
2d:7f:e3:9a:f0:09:5a:67:ed:e5:1f:3a:be:22:5b:90:4b:b9:
28:14:52:5a:46:96:a0:08:5b:46:69:ba:18:0a:d7:be:87:96:
3b:70:e6:d4:c9:32:25:ee:87:40:e9:b8:cb:a3:a8:dc:56:2b:
82:8d:e3:12:93:4f:71:73:c9:9e:eb:b9:54:4f:9a:ea:aa:b1:
03:55:34:1a:2d:51:b1:22:77:41:de:63:f7:ee:a4:64:32:30:
17:5d:e2:3a:92:3a:13:ee:e4:11:d6:e1:da:10:33:f1:fd:b3:
bb:c2:74:0f:f9:f5:60:18:05:f1:39:b2:91:6c:af:3a:0c:b7:
34:0b:9c:d4:05:74:ae:a1:49:e9:34:4a:07:93:30:91:12:f8:
94:80:65:f2:d7:ec:82:77:c5:ee:b7:ce:0b:b3:5d:08:bf:c2:
72:8d:6b:2f:c6:5e:c6:78:6e:32:46:90:98:62:31:bb:7b:fc:
59:93:2b:31:b9:c4:ed:63:b8:21:bb:b2:9f:e7:04:2b:16:17:
9e:0d:5d:b4:79:73:26:f4:44:12:f9:ca:82:49:5c:de:7a:5a:
96:9d:5d:b2
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcl5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA2MDcyOTU0WhcNMjYwNjAxMDcyOTU0WjAYMRYw
FAYDVQQDEw02OWZhZWRmNy1hZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2VgMH4w5uG9rpE+bncJyKJsqTi5qIwLXoLqGHcIYCxrBS8/z2iKWtaGv
vOq9d/kpmKc0x8qVCoi/Fo+He10sDhei0RJBfjuNuAWFFxmRnWJke6vf/nQLFKc/
nUjJ4DsLEtkjHDGPT50hJH6qZUBVklbP6nhlVCrkd+uIoYod4N3GSrisIrfd+Jvl
3O/EkhUh634y/8OZ942NZZkqzOxpWY3C2lXdzb6f1IWBt+tvtOCG7e3xtZFMcUK3
Wjo0E2iTCF4RwIKToBrS2u4Km9N2lHGAsgxlWTLOfyoJpeXQOSciFcQ5MlL5l12n
/q5ZQY4UyDV19cUtcSyNWw9TFmamowIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIrt
sff5EZaJsyfgAao2ZtxwvWtqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MkNCQzJDRTQ5MUQxMUYxOEUwNEM2RjhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGmtjAAwQGmtrAMA0GCSqG
SIb3DQEBCwUAA4IBAQCbYkIJXzLbEmTmJ17DxHvgEAFVWbvbl8qU5Vwkx+jtZd7s
oxgtf+Oa8AlaZ+3lHzq+IluQS7koFFJaRpagCFtGaboYCte+h5Y7cObUyTIl7odA
6bjLo6jcViuCjeMSk09xc8me67lUT5rqqrEDVTQaLVGxIndB3mP37qRkMjAXXeI6
kjoT7uQR1uHaEDPx/bO7wnQP+fVgGAXxObKRbK86DLc0C5zUBXSuoUnpNEoHkzCR
EviUgGXy1+yCd8Xut84Ls10Iv8JyjWsvxl7GeG4yRpCYYjG7e/xZkysxucTtY7gh
u7Kf5wQrFheeDV20eXMm9EQS+cqCSVzeelqWnV2y
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:25 2026 by rpki-client