Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37E07D54618511F1998F46F2CE1D38B0.roa
File: 37E07D54618511F1998F46F2CE1D38B0.roa (raw, json)
Hash identifier: d0PeSurylI6NWWz06N+z9ohc/YQSYKc1QvSWGPYnk28=
Subject key identifier: 05:DF:5C:E7:AB:71:F9:9B:40:BB:BB:D2:E6:7D:91:94:41:67:22:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37E07D54618511F1998F46F2CE1D38B0.roa
Signing time: Sat 06 Jun 2026 08:53:42 +0000
ROA not before: Sat 06 Jun 2026 08:53:38 +0000
ROA not after: Sun 12 Jul 2026 08:53:38 +0000
asID: 20457
IP address blocks: 154.85.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119289 (0x1d1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 08:53:38 2026 GMT
Not After : Jul 12 08:53:38 2026 GMT
Subject: CN=6a23e016-7c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:c2:18:23:80:d1:0a:22:00:a2:8f:b0:d3:
a2:99:e2:8a:47:94:3c:dc:be:a1:71:76:2c:61:3d:
df:8e:0a:08:43:24:12:0a:13:7e:9e:50:87:3a:fd:
7d:3b:9a:4c:63:88:cc:b8:09:5e:da:9e:d3:a1:7f:
d0:52:a1:a0:24:4a:c5:28:71:8c:1b:99:dd:fd:2b:
41:31:f5:43:c9:e1:93:40:81:46:bd:3b:6f:c3:0b:
fb:bc:e5:b4:7a:24:14:36:70:c6:18:82:6b:30:28:
d4:65:92:16:8a:94:ae:12:07:88:31:50:d4:d4:d9:
65:d9:41:67:41:88:f3:61:20:77:92:b9:2c:99:9b:
69:f8:05:df:56:b9:0c:39:85:95:02:b5:6d:04:09:
43:6a:93:dd:e8:eb:05:44:07:ad:6c:c8:d8:8f:70:
12:b6:00:44:0a:66:d2:9d:99:5c:c5:71:bd:6c:ec:
17:f6:cf:e5:fb:e7:ad:e3:72:f2:56:17:57:ae:d5:
a5:fc:8a:4c:4c:99:69:e0:b9:ed:f6:ce:d6:28:5b:
21:f1:bf:44:d5:3a:38:8f:2e:6c:b2:63:9c:f5:d7:
50:df:ae:f7:19:42:ad:f6:84:80:e9:8e:f7:95:dc:
97:48:90:0c:db:e6:10:84:ae:09:6e:8a:c5:9e:31:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DF:5C:E7:AB:71:F9:9B:40:BB:BB:D2:E6:7D:91:94:41:67:22:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37E07D54618511F1998F46F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:92:39:ff:fa:93:9a:e8:43:7b:3e:2a:82:08:e4:3c:e3:f5:
40:e7:7c:23:8e:d6:7d:58:04:8a:6d:11:39:27:59:53:18:37:
d4:9f:ef:56:30:02:77:f3:70:ec:60:c1:dd:62:0d:4c:24:09:
f0:90:d1:88:78:62:ea:36:a5:70:32:4c:8e:d9:74:b1:0a:9c:
e7:e5:88:08:5b:57:f7:8b:61:df:f5:99:48:3a:2e:e7:1a:bf:
cf:37:ec:64:10:84:22:b8:18:fd:b1:8a:be:94:cc:18:19:10:
bb:4b:fd:54:46:6b:94:81:46:6e:95:5b:15:b9:5d:a1:d9:56:
9e:f0:cc:57:fb:24:72:c5:6b:92:fb:fa:50:ab:49:67:1d:db:
5f:ae:68:5f:bf:2e:e5:ab:4e:6e:67:58:3a:04:f3:af:12:d2:
f5:09:c8:40:8d:cb:a2:d6:28:e5:e7:4e:42:1d:bb:cb:af:8f:
7b:04:b0:ee:a2:3a:73:02:f6:8d:1b:2b:f6:65:48:96:98:5d:
28:f3:4e:b9:41:31:04:0d:50:33:5d:dd:37:4c:56:9a:80:c9:
35:34:f7:1b:39:c3:0c:b1:fc:ea:35:33:53:26:8a:aa:02:fa:
53:77:11:4b:ac:95:bd:46:7b:5d:31:8e:23:c0:3b:cc:55:5f:
39:e9:a8:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdH5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDg1MzM4WhcNMjYwNzEyMDg1MzM4WjAYMRYw
FAYDVQQDEw02YTIzZTAxNi03YzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw8nCGCOA0QoiAKKPsNOimeKKR5Q83L6hcXYsYT3fjgoIQyQSChN+nlCH
Ov19O5pMY4jMuAle2p7ToX/QUqGgJErFKHGMG5nd/StBMfVDyeGTQIFGvTtvwwv7
vOW0eiQUNnDGGIJrMCjUZZIWipSuEgeIMVDU1Nll2UFnQYjzYSB3krksmZtp+AXf
VrkMOYWVArVtBAlDapPd6OsFRAetbMjYj3AStgBECmbSnZlcxXG9bOwX9s/l++et
43LyVhdXrtWl/IpMTJlp4Lnt9s7WKFsh8b9E1To4jy5ssmOc9ddQ3673GUKt9oSA
6Y73ldyXSJAM2+YQhK4JborFnjEVZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAXf
XOercfmbQLu70uZ9kZRBZyI+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zN0UwN0Q1NDYxODUxMUYxOTk4RjQ2RjJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlUYMA0GCSqGSIb3DQEB
CwUAA4IBAQAakjn/+pOa6EN7PiqCCOQ84/VA53wjjtZ9WASKbRE5J1lTGDfUn+9W
MAJ383DsYMHdYg1MJAnwkNGIeGLqNqVwMkyO2XSxCpzn5YgIW1f3i2Hf9ZlIOi7n
Gr/PN+xkEIQiuBj9sYq+lMwYGRC7S/1URmuUgUZulVsVuV2h2Vae8MxX+yRyxWuS
+/pQq0lnHdtfrmhfvy7lq05uZ1g6BPOvEtL1CchAjcui1ijl505CHbvLr497BLDu
ojpzAvaNGyv2ZUiWmF0o8065QTEEDVAzXd03TFaagMk1NPcbOcMMsfzqNTNTJoqq
AvpTdxFLrJW9RntdMY4jwDvMVV856agH
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:37 2026 by rpki-client