Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76F64528528A11F19B6710CDCE1D38B0.roa
File: 76F64528528A11F19B6710CDCE1D38B0.roa (raw, json)
Hash identifier: 4V3y6VuVriSUkrcl6Wp7tNr8V9bHvBxksCJAdSpWVgY=
Subject key identifier: 62:79:B3:EB:CC:F7:C9:52:87:27:05:F8:71:37:38:65:DC:7E:CA:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76F64528528A11F19B6710CDCE1D38B0.roa
Signing time: Mon 18 May 2026 07:23:28 +0000
ROA not before: Mon 18 May 2026 07:23:23 +0000
ROA not after: Sat 08 Aug 2026 07:23:23 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117831 (0x1cc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 18 07:23:23 2026 GMT
Not After : Aug 8 07:23:23 2026 GMT
Subject: CN=6a0abe70-1e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:31:c0:38:a8:30:5b:81:f4:9c:07:58:37:
b8:3b:5a:ba:20:cd:bd:58:52:7a:bf:b9:f2:47:ba:
b2:b8:00:24:17:19:8e:65:0a:42:6d:44:cc:56:8d:
87:8c:67:17:b0:6e:ba:1c:ce:5e:4b:dd:d0:3f:52:
75:6e:cb:7f:fb:aa:57:15:8f:5c:74:20:b8:a3:c5:
e0:b1:7e:51:8f:86:05:5c:5a:82:9f:64:43:65:07:
d0:fc:87:0f:e3:e5:16:01:1b:40:cd:e5:88:91:6b:
75:bb:13:df:d7:91:62:81:08:cb:1e:32:e3:20:de:
e0:b3:c6:c0:2d:04:0f:9b:33:89:3e:91:ba:fb:6b:
a7:06:e7:26:a0:02:de:cf:5e:ad:0a:00:a8:da:e4:
1f:18:93:44:00:2a:cd:41:ba:00:65:ab:b8:21:14:
e6:ac:d5:e4:86:21:1e:f7:2c:df:a9:a0:41:3e:7b:
17:c1:2d:bf:3e:47:d5:ed:bb:8c:7a:da:ab:f6:b2:
f9:06:b3:94:de:50:3a:3f:82:43:7a:e2:b2:50:b8:
ce:5c:56:7a:ae:46:ce:ce:59:82:55:46:73:1c:95:
19:eb:3e:ca:e3:5a:d3:aa:2c:40:e9:e9:8e:fd:59:
c0:aa:f5:10:d1:17:91:aa:52:75:f4:7e:8f:e3:c9:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:B3:EB:CC:F7:C9:52:87:27:05:F8:71:37:38:65:DC:7E:CA:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76F64528528A11F19B6710CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
59:46:d5:5b:fa:90:4e:ff:7b:23:15:fc:be:f5:80:29:e5:af:
2f:3b:ef:06:ea:c9:58:ba:8e:08:76:2e:60:50:74:90:c4:d9:
e8:31:e3:94:3c:2c:fc:f0:02:4d:1c:52:2c:e3:73:1f:7f:e9:
22:1c:31:ec:79:a1:65:79:f5:66:6a:36:32:78:05:3e:4b:56:
7a:95:7b:a1:d2:0e:e2:ea:6e:d1:0d:ae:76:20:dc:62:3e:cc:
90:4d:0e:ca:57:9b:cb:ca:5a:33:86:c6:5b:52:bc:70:99:35:
92:6a:eb:a3:93:86:cd:5b:d4:97:31:72:9d:45:23:2d:b8:5a:
08:31:56:bc:76:e7:6c:1d:32:73:0f:40:81:b4:38:67:1f:cb:
02:0d:a0:04:db:d6:cb:21:05:9c:15:0a:1a:ad:8a:8d:12:7a:
82:92:7b:f5:c2:a8:f7:fd:f0:0c:f3:2d:df:ca:29:88:31:42:
a7:50:69:84:28:91:c9:fb:85:6d:99:58:a3:7c:16:00:01:1a:
d0:70:13:90:20:97:9c:32:4d:ce:98:be:96:7f:cd:d6:ba:e1:
e5:3b:d9:52:1a:1d:71:5c:ac:a0:5d:50:cf:23:56:94:b9:66:
6a:bc:38:7f:94:a8:20:60:5d:59:f5:36:7a:7d:1c:00:d5:38:
56:0e:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:28 2026 by rpki-client