Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37032D1A791211F1AFD7C3D5CE1D38B0.roa
File: 37032D1A791211F1AFD7C3D5CE1D38B0.roa (raw, json)
Hash identifier: kiNc8W9q61WOn+0NEUlBXlDiCmPvRJvKlpLO8wdFYew=
Subject key identifier: 9B:D5:25:4E:5A:9C:F9:1C:F7:40:33:38:EA:8A:D1:7A:1A:D1:00:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D730
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37032D1A791211F1AFD7C3D5CE1D38B0.roa
Signing time: Mon 06 Jul 2026 08:10:57 +0000
ROA not before: Mon 06 Jul 2026 08:10:52 +0000
ROA not after: Wed 12 Aug 2026 08:10:52 +0000
asID: 328608
IP address blocks: 154.88.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120624 (0x1d730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 08:10:52 2026 GMT
Not After : Aug 12 08:10:52 2026 GMT
Subject: CN=6a4b6311-3bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:86:2e:a0:ae:90:23:60:b2:fc:ab:c8:4e:
47:ad:32:5d:6d:5a:df:ee:60:b9:3f:34:0e:08:0e:
4a:2f:70:9d:24:21:54:b6:cf:1d:ad:af:3f:74:c0:
f2:33:b9:27:b6:93:74:0d:f1:73:92:a1:cf:cc:22:
c1:de:74:63:d9:37:28:59:f6:19:b8:61:35:48:7d:
f0:a3:d0:b4:8c:98:05:7b:b9:79:b2:e5:f2:1b:7a:
32:de:9d:37:9f:9b:bf:56:25:a6:3c:58:bb:70:99:
14:0b:f2:2d:71:eb:35:0c:88:cf:7a:6b:6e:4f:df:
ac:dd:65:b2:d0:3b:39:45:70:03:b6:d9:7b:9b:90:
e2:3e:2e:e8:93:df:a9:31:73:45:1d:94:83:68:86:
f0:07:07:a9:a5:67:63:79:c0:e0:74:c3:91:07:f7:
bc:b5:c2:b1:2c:61:3a:ed:8a:4a:bf:1f:25:af:e0:
10:11:da:33:72:ed:2a:16:23:ed:c4:94:df:98:79:
a0:27:e4:2f:63:51:12:1f:5f:d1:14:15:72:52:97:
ff:e6:0d:a6:d0:bb:8d:f5:5c:af:68:ac:d6:2d:d4:
eb:41:a0:2d:6a:83:40:1c:08:91:2a:a5:76:a4:0f:
12:c1:32:10:9c:81:26:04:4c:c7:cb:db:85:9c:c4:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:25:4E:5A:9C:F9:1C:F7:40:33:38:EA:8A:D1:7A:1A:D1:00:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37032D1A791211F1AFD7C3D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.0.0/23
Signature Algorithm: sha256WithRSAEncryption
39:c5:11:76:44:84:88:f9:68:2c:f0:cb:35:1d:65:73:af:78:
44:3e:4c:30:94:58:ce:3e:fd:3b:59:c8:cf:65:c4:8d:88:a3:
1f:ca:c9:5f:1c:c5:c6:f3:8b:e2:d0:c3:3d:ba:cd:15:a4:ea:
78:bb:2a:0f:79:2c:29:67:76:09:44:5e:c8:b9:af:65:e2:15:
35:0f:62:2c:b0:a3:de:76:a4:87:81:e5:07:52:91:23:3c:91:
ca:c5:0e:7e:99:4e:18:b4:11:83:fb:f0:d1:cf:1a:3c:f2:86:
1f:49:f1:69:09:c1:28:29:36:89:09:a1:51:42:77:a9:90:0b:
08:60:2f:41:c6:03:8b:3a:37:8a:d2:34:c0:88:f4:58:3d:fd:
8f:04:1b:27:9e:66:7b:96:20:6a:11:80:1c:05:db:86:a6:4c:
52:fe:05:ac:f4:b7:ed:46:e0:75:83:29:cf:d7:e7:a9:14:89:
fe:d1:92:11:7a:01:d2:18:8e:70:f2:d0:91:1f:f1:a5:f3:4a:
65:1b:5a:7e:1f:56:ff:ad:19:1f:00:d8:c1:ee:47:2e:3b:30:
48:cc:13:f3:57:91:9e:39:d8:a4:c2:72:df:a6:07:75:b7:b3:
c6:c3:99:3a:b1:40:2c:55:48:55:7a:0d:4e:8e:5e:ed:80:58:
c1:30:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:30 2026 by rpki-client