Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3837E268880611F189CD71E6CE1D38B0.roa
File: 3837E268880611F189CD71E6CE1D38B0.roa (raw, json)
Hash identifier: mkVuw0e42aoF2n4GTqUTy0tsO+k5X29uOZ8N97ojleA=
Subject key identifier: D6:11:8B:16:63:1F:E2:39:D0:EC:17:B0:F0:D1:11:F1:B2:D4:CC:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3837E268880611F189CD71E6CE1D38B0.roa
Signing time: Sat 25 Jul 2026 08:52:52 +0000
ROA not before: Sat 25 Jul 2026 08:52:48 +0000
ROA not after: Sun 30 Aug 2026 08:52:48 +0000
asID: 328608
IP address blocks: 154.91.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121661 (0x1db3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:52:48 2026 GMT
Not After : Aug 30 08:52:48 2026 GMT
Subject: CN=6a647964-b4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:3c:8a:b0:53:71:4f:55:9e:a9:32:5a:4b:
c7:43:55:26:2e:60:5f:be:09:99:92:1d:98:57:ad:
d2:37:b5:e7:7a:bf:68:a7:a4:20:28:6d:03:29:b9:
64:80:08:6c:b7:c5:da:97:7b:63:f1:3b:4b:f1:c8:
5a:ff:fd:be:2b:18:c6:18:0b:aa:a5:35:7f:b5:6d:
03:d7:ad:94:5e:11:68:9a:09:f5:e7:51:91:f3:77:
23:8a:5c:7f:25:9b:c7:ca:f9:00:f8:3e:8d:da:5c:
45:56:c0:53:99:1d:1c:9e:fc:60:3a:b5:6f:5a:32:
d2:ea:11:eb:4f:8b:0c:e2:88:c6:b1:be:ca:bf:0c:
bb:da:8b:6c:80:77:17:af:ed:21:1b:c6:9d:07:38:
f6:54:b2:77:c4:9e:bc:34:27:82:44:70:84:2e:61:
31:9e:f2:aa:bf:30:c3:68:53:bf:8e:2c:77:a7:28:
3e:62:f8:29:da:a8:9d:96:8e:1f:b4:87:37:93:d1:
dd:6f:80:9b:bb:c0:98:d5:fe:98:c1:91:b7:e4:5f:
92:68:a6:2b:0b:0e:d8:c1:00:da:19:9f:f7:d9:f9:
5f:bd:aa:0f:56:d1:df:6b:38:7c:02:7a:05:8e:73:
4e:b4:09:25:f1:60:d7:46:11:f3:2c:06:24:85:62:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:8B:16:63:1F:E2:39:D0:EC:17:B0:F0:D1:11:F1:B2:D4:CC:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3837E268880611F189CD71E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:09:f2:38:f7:6d:56:c4:15:6c:30:55:58:d6:2e:4a:38:3e:
03:10:6f:0a:e8:e1:02:7b:5d:ae:1a:51:e2:99:b8:30:dd:d5:
70:31:85:18:29:c7:85:29:13:f1:e5:8b:7d:a6:47:e4:e3:10:
1d:83:b9:6c:13:64:36:12:ef:69:42:3e:bc:ab:48:e2:9b:df:
08:5d:7a:34:7a:1d:48:d4:7b:f0:c4:45:da:76:47:ce:fd:b4:
8b:ab:a4:a0:95:be:06:ff:7c:45:44:2b:f6:7a:f3:0c:89:dc:
ae:1f:f9:f1:78:30:5c:ab:3f:02:8a:8f:84:b5:7a:0f:aa:14:
ec:bc:57:36:e1:bd:15:1b:23:d0:fa:f8:1c:3d:07:29:6c:91:
fe:6d:89:7a:2d:a6:f9:12:ad:9a:a4:bd:2a:e4:d3:7f:d2:b9:
ad:94:45:6a:94:b4:d4:4e:d9:50:7a:f0:d4:84:ca:ef:81:df:
ef:54:5c:4c:dd:71:8b:8f:79:79:f2:bb:8c:45:3f:98:96:58:
25:9b:79:88:dd:30:13:39:44:dc:c1:92:df:62:62:62:65:a6:
a5:5e:0b:80:e2:a0:ed:73:95:7d:88:4e:39:36:d1:13:17:5c:
da:52:23:45:22:91:99:1c:56:47:06:2b:d9:ae:04:de:4d:16:
24:a3:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:51 2026 by rpki-client