Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37E434E00BDF11F1A5F3468CDAE4EC9C.roa
File: 37E434E00BDF11F1A5F3468CDAE4EC9C.roa (raw, json)
Hash identifier: AT72n0ZeRc4V3AgVoRaXjcBLQwDI5z3qdn/MdmFqkus=
Subject key identifier: 6D:C7:46:09:95:64:C2:37:E4:32:43:AE:D8:9E:33:8D:38:BB:75:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37E434E00BDF11F1A5F3468CDAE4EC9C.roa
Signing time: Tue 17 Feb 2026 09:01:17 +0000
ROA not before: Tue 17 Feb 2026 09:01:12 +0000
ROA not after: Thu 02 Apr 2026 09:01:12 +0000
asID: 48678
IP address blocks: 154.82.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113155 (0x1ba03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 09:01:12 2026 GMT
Not After : Apr 2 09:01:12 2026 GMT
Subject: CN=69942e5d-1624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ed:12:17:3e:93:d8:f7:98:a9:f2:7f:f9:6b:
8e:74:37:7e:5b:26:ea:07:d2:87:ea:dd:12:3b:4f:
f1:88:42:4b:36:f2:da:cc:01:e6:74:d2:39:22:cc:
37:1a:c9:4e:7c:c1:ac:8c:f8:5f:92:d4:b9:ea:72:
fb:d8:6d:50:24:a4:7b:96:91:81:80:db:a6:63:99:
a3:bf:98:b1:a4:8a:b8:0a:91:0a:f8:e2:e6:4a:74:
a3:e7:00:12:2b:6e:63:05:73:44:f9:5c:9e:fb:cc:
48:23:a1:b2:d6:71:6d:3e:82:53:ff:e5:1b:a5:ba:
6f:b3:aa:7d:0e:0c:64:e4:06:3f:ee:71:57:77:36:
98:3f:fb:f5:10:de:f3:f4:94:e6:c0:02:9e:b2:aa:
2f:ce:43:63:5e:76:26:2b:99:ec:12:2c:cb:a3:0e:
7e:da:4c:d7:5c:34:47:ef:93:70:f0:ea:1d:21:4f:
f5:60:09:02:a0:ec:e4:55:f4:92:36:17:a1:76:c3:
81:b5:a9:87:5b:8d:9a:05:04:23:88:b6:e0:73:34:
64:8e:cc:bc:8d:81:cc:1e:47:e6:ac:08:a1:ed:7c:
10:0e:6f:ef:f2:ff:c3:6a:b1:8f:20:61:bb:f9:eb:
5d:03:20:fc:41:aa:fb:8d:52:07:7c:86:eb:0c:05:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:46:09:95:64:C2:37:E4:32:43:AE:D8:9E:33:8D:38:BB:75:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37E434E00BDF11F1A5F3468CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:44:43:81:ba:a4:a2:f5:48:ba:c4:eb:bb:5e:77:d4:de:f9:
ed:3b:e6:f8:e2:68:5a:b4:b1:2c:b8:1d:f4:ee:10:69:d7:18:
58:a7:c4:9c:a9:04:d3:91:5a:41:7b:3d:c5:60:d6:ee:22:58:
2d:5f:91:b5:ae:6a:a3:c0:32:cb:92:1d:14:12:f4:29:bb:15:
ff:63:0a:38:62:7e:0f:21:b4:2a:53:2c:15:d8:4d:19:7e:d1:
9d:e6:05:f5:4b:ba:7a:dc:28:5d:eb:5d:5d:91:34:50:c0:ba:
e1:96:37:69:4a:4c:da:b2:5d:b1:a7:cc:79:1b:48:cc:7b:92:
5c:d1:46:f6:e3:8a:bd:ce:8f:3e:dc:97:1e:4b:38:01:72:d1:
57:99:22:15:2e:ad:2f:56:08:b6:df:f1:98:fd:f5:a1:44:97:
e0:e1:ef:62:88:61:61:f6:58:b4:de:49:82:a6:ba:3a:1a:3e:
fe:9c:f2:21:99:f3:c5:75:6d:07:e6:ff:e6:02:d7:cc:8b:63:
e7:3b:86:b1:ce:9b:79:26:d1:92:6d:37:60:b9:59:ed:f2:5a:
5e:b2:72:a7:78:32:73:d3:22:27:82:14:1b:63:8b:62:4e:b7:
d8:8b:6c:a4:55:b5:f1:0b:90:b4:60:33:28:74:8e:25:c7:c4:
2e:52:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:09 2026 by rpki-client