Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE62DC36553911F1A5DD331DCF1D38B0.roa
File: AE62DC36553911F1A5DD331DCF1D38B0.roa (raw, json)
Hash identifier: s1m4BV8vvdfxnECPbsiR0lodmgU8mjCMFymov8gXimE=
Subject key identifier: 2A:B5:E6:94:60:A2:3D:86:C0:D9:85:3E:EE:FD:BA:5B:08:BB:3B:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE62DC36553911F1A5DD331DCF1D38B0.roa
Signing time: Thu 21 May 2026 17:22:45 +0000
ROA not before: Thu 21 May 2026 17:22:41 +0000
ROA not after: Wed 01 Jul 2026 17:22:41 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118171 (0x1cd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 17:22:41 2026 GMT
Not After : Jul 1 17:22:41 2026 GMT
Subject: CN=6a0f3f65-bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:7e:52:aa:03:79:41:a8:b0:e0:cd:d1:ca:
81:ac:30:6f:49:d3:a1:82:07:ad:91:41:0a:e7:59:
38:62:da:c2:11:7a:e7:d7:6d:c3:ba:db:a4:f0:93:
12:f2:65:7a:af:7a:29:7a:bc:9e:1d:04:0e:2f:d1:
1e:49:1b:63:ae:54:68:f6:68:bc:3a:27:73:75:23:
1b:9b:b5:56:f0:a0:17:34:b5:0c:9e:4a:8a:50:f0:
b8:16:b4:f7:84:90:23:b2:8c:2e:00:95:a3:84:72:
c3:a2:3c:ab:a4:c2:c3:e8:93:22:83:bf:77:f5:71:
d8:10:b0:33:d9:c1:f9:c0:4c:1b:e1:27:ca:53:e4:
2b:bf:ec:14:e1:b0:d4:6e:8f:a2:ba:93:56:cf:14:
92:8a:9b:3f:3f:3f:c0:78:5f:94:78:1e:50:4d:e2:
c2:c9:11:ef:7f:df:9e:56:3a:8d:0a:1e:fc:f9:58:
e8:5c:6b:5e:2a:61:21:29:2c:ab:5d:44:c4:d9:1e:
b8:f0:8f:3a:43:27:d1:34:e9:b9:c0:10:f4:b9:c6:
8f:ca:05:4f:19:c5:ce:06:bb:7e:d1:63:f9:f2:a2:
8b:1a:49:64:47:21:f9:55:74:a9:03:26:91:46:9c:
67:3b:03:f2:fe:03:a6:48:dd:37:f3:fe:c9:40:59:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B5:E6:94:60:A2:3D:86:C0:D9:85:3E:EE:FD:BA:5B:08:BB:3B:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE62DC36553911F1A5DD331DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
154.92.200.0-154.92.204.255
154.92.215.0-154.92.223.255
Signature Algorithm: sha256WithRSAEncryption
65:2f:9b:f9:6b:e9:ff:04:17:69:d2:db:64:b2:0f:8f:52:c7:
57:90:36:c3:86:54:45:02:4f:1e:75:98:9f:a8:0c:2f:93:ee:
d7:30:ca:6e:69:64:61:1f:58:4f:a8:5e:eb:66:ec:b8:65:ea:
7a:25:8c:a6:57:bd:81:15:00:c5:23:99:4a:a1:5a:01:ca:85:
33:78:50:dc:a6:d0:3f:c5:70:e4:07:cb:db:b8:5d:23:dd:b2:
3b:c1:2a:f3:b1:fa:08:cb:87:5c:d0:59:7f:e8:60:36:8d:4f:
5b:5c:2f:92:d4:61:04:b8:2d:32:9f:3f:f5:1f:3c:11:54:1b:
d1:b9:69:07:c1:01:ba:25:82:8d:a2:49:96:a3:21:49:cc:27:
cf:20:15:cd:5f:ec:14:93:aa:7d:2d:f3:1a:0c:6d:75:04:6b:
dd:b9:63:cf:1a:02:e0:06:d4:fa:45:f9:b7:1f:3c:96:2a:52:
b5:7a:20:9c:27:7e:49:ba:f2:f8:17:ad:d3:e3:df:d1:32:46:
4a:73:fd:72:19:90:01:d0:98:a3:74:7a:d0:b3:41:5f:5e:bf:
61:29:0a:62:c5:06:16:63:68:a2:69:34:49:3c:e0:1d:db:65:
12:bb:bb:f8:a4:21:bd:8f:fa:95:5c:45:93:84:71:8d:0e:65:
93:9e:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:56 2026 by rpki-client