Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37137E5E6E5E11F1B4C8A4BECE1D38B0.roa
File: 37137E5E6E5E11F1B4C8A4BECE1D38B0.roa (raw, json)
Hash identifier: /ocoTOrP8RkbANxJJutJZIPgFwsxsbZKu93stSLh6CA=
Subject key identifier: E1:DA:C4:52:22:B8:1D:60:B9:DF:CC:00:2D:02:58:17:B6:F1:E0:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D45F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37137E5E6E5E11F1B4C8A4BECE1D38B0.roa
Signing time: Mon 22 Jun 2026 17:17:16 +0000
ROA not before: Mon 22 Jun 2026 17:17:11 +0000
ROA not after: Tue 28 Jul 2026 17:17:11 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119903 (0x1d45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 17:17:11 2026 GMT
Not After : Jul 28 17:17:11 2026 GMT
Subject: CN=6a396e1c-2671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:1c:66:19:95:eb:13:bb:e0:e3:a0:b9:cb:
96:bf:75:e3:50:c9:0a:4e:9a:97:a9:d9:82:b0:4d:
ee:6c:dc:bc:8b:60:9d:c0:b9:cf:96:47:91:c8:99:
f7:de:08:bf:a8:fe:85:f5:3c:d5:36:5e:0b:5c:71:
22:19:01:23:d7:17:3a:a2:9d:14:33:00:be:31:3c:
de:0d:60:2c:d8:da:27:34:07:a5:87:db:d5:83:2e:
a9:97:3c:8e:79:ba:27:b1:27:94:24:fe:1c:41:d0:
39:ed:02:54:d3:39:52:d6:c1:d2:1d:d1:e6:61:40:
a4:72:de:90:59:e3:88:d2:3b:e7:d3:3a:88:c2:79:
45:61:24:f5:5a:62:d8:0f:87:fd:10:b1:13:75:ff:
02:0d:89:91:4a:67:40:21:5e:86:82:da:79:38:20:
5a:a0:f6:42:f2:c9:1a:9c:e7:6e:70:cf:af:94:f0:
47:d5:6e:99:51:ed:3b:c6:04:65:26:9d:40:cc:64:
a3:68:ed:b2:b5:5b:55:f4:e7:6d:f4:2b:e4:df:a9:
96:32:38:fe:fa:0d:7a:6f:38:77:9b:e7:ac:d4:bf:
b2:67:76:5c:f8:6a:cc:3d:d3:30:79:54:7f:15:34:
9e:0c:00:df:c0:5a:52:a2:1c:6c:c4:7d:04:bd:b1:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:C4:52:22:B8:1D:60:B9:DF:CC:00:2D:02:58:17:B6:F1:E0:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37137E5E6E5E11F1B4C8A4BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
03:8b:c3:c7:c0:db:32:64:a9:40:98:cc:60:40:65:a6:73:25:
98:af:9f:d9:20:f6:58:53:91:7e:07:9f:27:41:44:04:38:56:
50:ca:82:06:c2:30:65:59:70:95:59:3e:52:0b:7c:87:16:d9:
06:de:37:e8:47:58:6a:6c:69:a9:f8:4d:cf:7b:7b:2d:c3:1a:
b8:d6:b4:a5:f7:5b:78:ad:5c:0c:3a:fc:61:00:c4:09:7d:f3:
05:86:48:fe:16:e0:2e:d8:0e:aa:30:08:55:2a:88:74:0a:47:
3d:c2:89:31:62:6e:43:9b:f2:9b:e2:8d:49:4e:cd:4d:d4:cc:
03:f4:f2:39:b4:53:01:3f:cb:b2:9a:41:ea:5e:a5:77:2f:27:
8f:87:45:e3:06:cc:a7:7d:6d:7e:68:ff:22:0d:78:90:86:3d:
67:d0:f4:62:f8:d2:27:51:76:82:4b:f5:99:db:fe:f3:58:77:
f8:28:6d:c9:47:bf:0e:f4:cd:7a:a9:58:b8:b9:dd:33:29:26:
49:62:95:fa:42:1b:fd:8e:ca:2f:9b:b9:87:3b:f8:94:cd:63:
d5:8a:77:71:62:cb:de:57:81:01:b0:2b:de:fd:cd:c4:2b:7b:
3b:29:a1:e2:16:75:a5:44:6c:e1:a5:ed:d3:4c:02:f9:17:fd:
cb:71:cd:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdRfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIyMTcxNzExWhcNMjYwNzI4MTcxNzExWjAYMRYw
FAYDVQQDEw02YTM5NmUxYy0yNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyi0cZhmV6xO74OOgucuWv3XjUMkKTpqXqdmCsE3ubNy8i2CdwLnPlkeR
yJn33gi/qP6F9TzVNl4LXHEiGQEj1xc6op0UMwC+MTzeDWAs2NonNAelh9vVgy6p
lzyOebonsSeUJP4cQdA57QJU0zlS1sHSHdHmYUCkct6QWeOI0jvn0zqIwnlFYST1
WmLYD4f9ELETdf8CDYmRSmdAIV6Ggtp5OCBaoPZC8skanOducM+vlPBH1W6ZUe07
xgRlJp1AzGSjaO2ytVtV9Odt9Cvk36mWMjj++g16bzh3m+es1L+yZ3Zc+GrMPdMw
eVR/FTSeDADfwFpSohxsxH0EvbFIbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOHa
xFIiuB1gud/MAC0CWBe28eDFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNzEzN0U1RTZFNUUxMUYxQjRDOEE0QkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlwMMA0GCSqGSIb3DQEB
CwUAA4IBAQADi8PHwNsyZKlAmMxgQGWmcyWYr5/ZIPZYU5F+B58nQUQEOFZQyoIG
wjBlWXCVWT5SC3yHFtkG3jfoR1hqbGmp+E3Pe3stwxq41rSl91t4rVwMOvxhAMQJ
ffMFhkj+FuAu2A6qMAhVKoh0Ckc9wokxYm5Dm/Kb4o1JTs1N1MwD9PI5tFMBP8uy
mkHqXqV3LyePh0XjBsynfW1+aP8iDXiQhj1n0PRi+NInUXaCS/WZ2/7zWHf4KG3J
R78O9M16qVi4ud0zKSZJYpX6Qhv9jsovm7mHO/iUzWPVindxYsveV4EBsCve/c3E
K3s7KaHiFnWlRGzhpe3TTAL5F/3Lcc2v
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:00 2026 by rpki-client