Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C1C34A2F5411F1A0A83F81DAE4EC9C.roa
File: 37C1C34A2F5411F1A0A83F81DAE4EC9C.roa (raw, json)
Hash identifier: UzFLxK8xLuNf40XqP9dwKB2KhVmO1b5UXbWRPO7osBU=
Subject key identifier: CF:1F:05:CD:58:6C:F5:9F:4D:9B:50:FD:8B:52:13:19:70:4B:45:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C1C34A2F5411F1A0A83F81DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 11:56:59 +0000
ROA not before: Fri 03 Apr 2026 11:55:20 +0000
ROA not after: Fri 17 Apr 2026 11:55:20 +0000
asID: 213169
IP address blocks: 154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 Apr 2026 11:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115380 (0x1c2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 11:55:20 2026 GMT
Not After : Apr 17 11:55:20 2026 GMT
Subject: CN=69cfab0b-2a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:82:ce:70:ab:48:c0:75:de:cf:11:ce:a6:
55:f6:2f:16:f2:01:da:ec:84:9f:7e:a1:14:d0:a1:
db:a7:ee:1a:75:2a:c1:82:78:9f:da:97:30:4f:68:
0a:f0:78:c2:71:ec:dd:ec:72:64:36:77:24:03:10:
d8:4e:09:50:19:62:05:57:61:0a:de:1d:15:c4:c9:
d7:c1:4d:37:89:ca:54:09:11:c8:c4:7b:3b:28:18:
a5:f1:64:1e:ec:42:d8:4a:a4:61:ae:38:eb:c1:58:
c0:e7:d8:0f:06:4f:a6:39:9b:e5:76:2f:8a:99:d2:
f9:25:30:f8:fb:0c:08:a4:c6:2a:7d:89:3b:d3:f8:
87:dc:fb:f5:57:44:b6:f3:9b:09:55:a3:82:79:30:
67:41:44:d7:a8:cf:0b:fb:5f:47:13:94:a3:8d:e1:
58:e1:3b:2e:35:54:38:f3:29:1f:d8:7c:ca:22:11:
a8:7f:b6:b3:c6:9c:00:ef:f3:c1:3c:ec:2e:a8:51:
93:c7:fd:a4:ed:ba:1b:9d:82:c6:07:bf:c1:10:e1:
3a:46:e6:da:9a:f9:8c:13:7f:e4:bb:66:e0:97:a3:
bc:26:a5:1c:da:62:09:13:0f:f6:f4:aa:52:a6:87:
98:8e:50:b3:39:7f:47:de:79:18:16:98:73:59:a7:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:05:CD:58:6C:F5:9F:4D:9B:50:FD:8B:52:13:19:70:4B:45:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C1C34A2F5411F1A0A83F81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.91.0-154.83.95.255
Signature Algorithm: sha256WithRSAEncryption
a0:d2:ca:0b:d2:c6:e1:db:c6:79:a3:2a:8f:14:83:95:41:e5:
bf:68:91:45:2d:2b:de:38:5c:6f:66:c5:eb:06:20:84:7f:e9:
0e:bf:e0:6f:c9:ae:98:e5:32:a4:2d:18:4a:c1:a1:37:65:cd:
4f:71:04:80:e7:4a:2a:8b:3b:c5:de:51:4b:81:f2:64:87:b7:
c1:15:86:b1:5b:9b:24:1f:bf:05:91:99:2a:b3:72:5d:1b:63:
78:46:5c:a4:b3:11:d9:08:68:26:9f:e7:1b:7b:d0:24:e9:ec:
26:31:b0:f5:03:40:49:96:a1:dd:37:72:d0:50:f7:7e:c8:d2:
47:af:b3:ed:1e:42:90:90:04:0c:d8:17:b8:1a:a2:b4:64:cb:
ee:2a:38:17:44:09:d2:b4:61:fc:1b:54:50:9d:2d:f3:f8:3e:
84:94:d8:e7:af:c6:66:63:a5:11:52:6f:28:0c:49:bf:52:f9:
2e:b7:e0:f1:de:d0:8d:58:8b:54:78:ac:6e:f4:df:b9:ae:f3:
86:31:b9:cb:fc:8c:48:28:51:b3:c3:b6:98:b2:eb:09:d6:52:
90:b6:d7:da:55:ae:2b:88:b8:3b:25:48:09:8c:d6:71:5e:42:
dd:c1:15:b1:00:f5:a4:ee:76:65:9d:47:1f:3f:37:ac:c6:57:
93:52:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:14:37 2026 by rpki-client