Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D6FD1E69A111F1BDFCBAAECE1D38B0.roa
File: 37D6FD1E69A111F1BDFCBAAECE1D38B0.roa (raw, json)
Hash identifier: 7T29oFfZqvUBR8pjGhh06C9VqK62c5w3l+sl1nfZa9M=
Subject key identifier: BA:FE:85:3E:BC:A9:A6:F5:A0:06:52:1D:B8:A9:38:E3:08:F5:06:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D369
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D6FD1E69A111F1BDFCBAAECE1D38B0.roa
Signing time: Tue 16 Jun 2026 16:34:18 +0000
ROA not before: Tue 16 Jun 2026 16:34:13 +0000
ROA not after: Mon 03 Aug 2026 16:34:13 +0000
asID: 59642
IP address blocks: 154.83.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119657 (0x1d369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 16:34:13 2026 GMT
Not After : Aug 3 16:34:13 2026 GMT
Subject: CN=6a317b09-6cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:02:91:f9:53:47:a4:b8:04:7d:11:27:b5:
fc:ad:0a:9c:bc:52:12:e0:49:79:d7:1e:a8:9b:5b:
9a:b1:86:e1:cf:82:75:ee:1e:cd:fd:8d:03:53:d0:
63:26:87:eb:ae:fd:99:be:96:59:61:c3:2a:0e:ab:
04:31:b9:54:d6:63:43:c1:be:ab:97:76:5a:7d:24:
ef:ad:ef:71:a5:2e:85:ee:54:f6:72:f3:32:61:e7:
50:59:57:b1:c0:aa:f0:f6:09:5a:a5:73:f4:d6:93:
c2:87:05:bc:43:d1:7d:f5:9b:63:23:81:70:0e:cf:
3e:ba:2b:68:0a:e3:0a:f8:1d:ef:0d:87:31:d2:5e:
5d:ac:64:85:4b:8c:92:38:30:06:72:8f:a7:54:a9:
64:e6:cb:8e:ad:68:40:e1:76:f2:13:39:57:de:d2:
00:66:3a:52:9f:09:4e:3b:03:02:e9:9b:9d:ab:74:
7e:0e:fb:6a:5b:c8:26:9b:3c:94:6b:df:d4:3b:65:
4e:53:3a:49:fb:ed:25:20:80:01:84:19:b6:dd:bc:
0c:38:cd:bd:71:5a:a3:43:f3:f3:a8:5c:84:43:43:
93:eb:02:21:c9:56:d9:a4:a0:71:ac:cb:7c:a8:89:
9b:73:87:05:16:26:18:27:6f:c3:70:95:83:23:c5:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:85:3E:BC:A9:A6:F5:A0:06:52:1D:B8:A9:38:E3:08:F5:06:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D6FD1E69A111F1BDFCBAAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.159.0/24
Signature Algorithm: sha256WithRSAEncryption
31:77:4d:cb:f7:c0:ff:ef:dc:9b:3b:09:ac:05:62:45:f4:c0:
9c:a5:ca:0b:7c:5e:cc:2d:ee:fd:87:9f:32:ad:42:39:36:a0:
5c:18:d9:52:1e:e1:eb:b6:11:bf:9c:63:02:6d:f6:57:00:61:
36:6c:0d:a2:5b:d9:f6:e5:f6:1d:85:80:75:74:89:90:d4:dd:
63:84:f2:b2:3c:62:55:3b:e6:54:b7:f6:cc:16:8d:4e:40:0e:
c3:d8:79:3c:4a:de:7d:61:66:e0:8f:8c:e4:d8:e0:ed:3f:dd:
bc:62:12:a8:3e:e0:e4:70:5c:23:e0:43:88:c1:28:ec:a9:bf:
44:34:93:2c:7a:80:bb:98:d0:ca:4a:4c:0d:a0:f5:8c:6f:23:
9e:e5:60:0e:cb:4c:be:16:b5:6a:76:72:9a:5c:6d:cd:37:fa:
50:57:0a:c6:01:60:2d:4e:86:47:10:91:2b:98:4a:65:ee:1a:
79:c0:29:60:c4:51:f1:e2:e3:ef:b8:76:f1:10:fd:d2:db:82:
1c:1c:8b:2c:c9:a0:26:9e:43:c8:60:4d:9c:3e:d1:a8:ee:26:
89:7b:80:dc:09:87:c3:6e:6c:b9:e9:25:76:25:05:dd:b7:89:
a7:e3:61:f2:0c:36:5c:83:a1:39:7d:9e:f5:8c:69:60:dd:0a:
97:38:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:35 2026 by rpki-client