Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37970FD212E011F1BE867995DAE4EC9C.roa
File: 37970FD212E011F1BE867995DAE4EC9C.roa (raw, json)
Hash identifier: bjpTTJTKlZX2HrD5Y535k7k2Hrg0aOpWJMMuUyII00A=
Subject key identifier: 02:FD:55:D4:08:51:B9:44:F2:AE:70:4C:ED:A3:22:7C:8B:49:EE:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37970FD212E011F1BE867995DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:56:04 +0000
ROA not before: Thu 26 Feb 2026 06:56:00 +0000
ROA not after: Wed 01 Apr 2026 06:56:00 +0000
asID: 20001
IP address blocks: 154.94.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113631 (0x1bbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:56:00 2026 GMT
Not After : Apr 1 06:56:00 2026 GMT
Subject: CN=699fee84-ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:b9:a9:aa:35:2f:3c:60:0f:0b:16:91:e2:
bf:e2:e4:c0:bd:7e:de:a0:03:1a:b3:5b:1b:ce:ec:
3c:af:6d:b0:f6:d4:9e:be:aa:71:04:91:0c:16:af:
a1:bc:1c:3d:90:04:eb:64:00:85:97:2b:04:43:9e:
e4:d7:b5:cc:ef:08:31:d6:91:7e:16:57:9f:b6:bf:
7c:fc:33:8e:5c:85:ea:9b:ef:16:b2:e7:8e:aa:c3:
7a:43:cc:75:74:41:b5:45:b8:04:a0:41:e2:25:03:
f4:50:51:09:f1:74:3d:68:32:70:80:74:ef:b3:2b:
a2:88:55:3c:20:1f:ec:d8:7e:ba:ce:d1:02:75:f5:
c2:c7:e6:a1:9d:25:0f:f4:00:73:44:53:70:ec:c6:
59:a7:f0:3b:7b:ae:33:b1:2b:1a:e4:65:23:9d:d6:
dd:60:05:99:65:d0:9c:88:0d:92:bf:21:c8:a6:be:
04:26:a7:92:15:ad:de:ac:f4:97:52:d3:d2:e2:75:
dd:43:5e:19:3e:7c:e3:ff:3b:4c:1c:64:63:97:4f:
68:67:75:97:9c:0a:95:68:d4:b2:78:76:fd:7e:82:
05:f2:e9:6e:6b:3e:bd:35:d2:ff:36:2f:61:b5:71:
ef:28:88:0c:87:1e:a7:f5:5f:d7:7a:7c:6f:f1:4c:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:55:D4:08:51:B9:44:F2:AE:70:4C:ED:A3:22:7C:8B:49:EE:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37970FD212E011F1BE867995DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.128.0/18
Signature Algorithm: sha256WithRSAEncryption
50:66:84:69:30:49:b5:66:df:b0:e1:e2:62:c9:ce:4b:15:eb:
c4:eb:10:5f:de:70:9b:54:97:9f:72:c9:b1:37:2f:fb:23:ca:
8c:13:6e:87:0e:48:71:a6:30:5d:96:66:78:d0:69:ea:86:17:
b5:3c:da:04:31:70:75:73:84:6f:1d:8f:5b:d4:fe:3f:41:ca:
39:ea:f9:62:13:ff:93:f0:41:93:b7:e2:cc:00:58:48:14:ca:
ca:b8:1a:67:ee:b5:02:a0:25:66:46:d3:cb:31:ed:0c:9a:0f:
05:af:75:b6:79:75:76:e2:6d:ca:04:6d:11:37:81:e6:a5:5b:
be:28:a6:8e:45:25:29:11:d1:23:71:66:b9:47:37:32:84:40:
c4:23:68:6e:a6:eb:95:60:08:0b:57:da:9a:69:09:36:be:01:
7e:63:66:44:dc:9e:a9:86:e3:be:3a:3a:44:e0:70:ee:85:96:
cd:64:da:a7:dc:3a:0c:9a:ad:46:29:0e:07:3b:91:4a:39:d6:
fb:26:49:f2:4c:2c:7b:69:18:ff:13:78:18:55:ac:ca:87:64:
ca:19:23:46:34:3f:e8:69:c4:8a:40:c6:e8:29:10:52:1a:b6:
26:45:33:5f:f6:06:60:05:69:0d:07:28:a1:2e:b4:7e:ed:bb:
6f:9f:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:30 2026 by rpki-client