Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/37D582044ADE11F190B224A0CE1D38B0.roa
File:                     37D582044ADE11F190B224A0CE1D38B0.roa (raw, json)
Hash identifier:          rt+EoAGSbEwDAs9hOicWdl8dE9Q1e9YUz+wkRIrAsjU=
Subject key identifier:   26:34:F0:36:D7:B8:35:6F:47:45:1F:EC:7F:A9:3A:64:1A:B9:F4:2E
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0965
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/37D582044ADE11F190B224A0CE1D38B0.roa
Signing time:             Fri 08 May 2026 13:02:51 +0000
ROA not before:           Fri 08 May 2026 13:02:46 +0000
ROA not after:            Sat 30 May 2026 13:02:46 +0000
asID:                     22724
IP address blocks:        102.177.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 02:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: May  8 13:02:46 2026 GMT
            Not After : May 30 13:02:46 2026 GMT
        Subject: CN=69fddefb-b1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a3:de:99:30:f5:6e:e3:05:60:e1:e9:20:b1:
                    2f:d2:f7:b6:3b:a2:c4:1e:fc:12:d8:a6:b7:d8:2b:
                    4e:2d:c5:ec:44:99:70:87:bc:31:de:96:e4:29:8a:
                    db:5a:0b:40:d5:55:f6:2b:cb:a0:65:f2:66:e8:93:
                    a2:b8:6f:4b:d0:27:df:fd:90:09:0b:b3:da:47:43:
                    89:05:08:ec:cd:b6:fe:67:52:c1:85:1d:39:91:c9:
                    d4:7d:79:e8:d5:14:68:db:f6:f9:8b:85:14:84:5a:
                    f6:07:f5:7a:a5:b6:4e:7a:cb:9d:45:65:61:b1:20:
                    09:dd:95:b7:11:b3:fc:16:0d:fa:eb:49:a2:e9:cc:
                    f8:bb:46:10:8b:75:47:25:48:c3:eb:8d:bd:86:c4:
                    30:f8:a9:69:e7:64:25:34:1d:ac:09:2e:a7:c6:11:
                    76:0c:e5:b1:8a:58:32:2c:7b:8a:07:79:8b:60:8f:
                    06:46:54:84:4f:ac:c2:1c:99:ed:b8:dc:a2:69:03:
                    b6:a9:0a:b8:19:3d:e4:47:ba:84:79:08:7e:c1:d1:
                    d1:56:ad:f9:e1:20:84:aa:c8:dc:7f:a5:76:bf:e8:
                    5d:1d:f4:fc:9f:62:f9:5d:e2:88:e2:cc:33:75:9b:
                    b5:dd:1e:13:e9:d7:0a:07:85:40:66:25:8f:92:6d:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:34:F0:36:D7:B8:35:6F:47:45:1F:EC:7F:A9:3A:64:1A:B9:F4:2E
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/37D582044ADE11F190B224A0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:bd:86:59:55:0f:41:f4:61:da:88:34:bd:54:bb:19:69:
         ab:ad:5d:60:a5:de:fb:65:bc:e1:32:59:59:4e:62:a2:9c:6c:
         ac:03:82:13:98:19:b7:b8:11:c0:51:cf:b6:c9:14:c0:98:05:
         aa:77:63:b1:82:93:c9:9f:89:07:cc:c2:fb:31:0b:48:31:64:
         34:da:39:9a:83:70:97:33:65:40:5b:8e:36:cf:d8:cb:0e:eb:
         d4:94:55:b4:a9:ce:49:ec:2b:27:0f:ae:b2:4d:2a:48:0d:a4:
         9b:b9:b8:d4:8d:7b:b2:dd:0a:0b:4e:99:43:09:3a:08:04:df:
         4a:82:a8:1f:40:67:28:50:40:24:7c:ae:8f:b8:e8:db:87:62:
         21:17:87:51:69:b8:f7:3b:84:04:a6:b4:89:ce:d2:db:e6:79:
         a5:45:e9:3c:f5:c9:bd:6b:15:32:dc:b6:0f:d2:2e:7e:9f:48:
         2a:6f:10:32:49:80:85:ad:14:56:42:e0:2e:d2:24:be:e3:2e:
         a3:4f:f0:d3:bb:61:a0:15:b8:ab:1d:9c:1f:a9:0e:76:c3:b0:
         38:47:c5:a4:fe:63:07:c8:a8:39:0f:ff:9b:de:70:10:65:7b:
         d3:4c:49:5a:ee:eb:96:c3:9a:ce:b2:ce:87:0c:47:59:2c:d3:
         27:0d:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:18 2026 by rpki-client