Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085A7FDA1E4B11F18A531AE1DAE4EC9C.roa
File: 085A7FDA1E4B11F18A531AE1DAE4EC9C.roa (raw, json)
Hash identifier: dt0uZIO0oviwofLQrhAEcSOQNnImHoy5a+IQY2Qo5dc=
Subject key identifier: C4:FE:58:CA:BA:CD:B2:9E:DF:71:8E:6F:4D:69:03:1C:55:6E:70:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085A7FDA1E4B11F18A531AE1DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 19:38:24 +0000
ROA not before: Thu 12 Mar 2026 19:38:19 +0000
ROA not after: Fri 17 Apr 2026 19:38:19 +0000
asID: 22773
IP address blocks: 156.229.52.0/23 maxlen: 24
156.229.55.0/24 maxlen: 24
156.249.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107722 (0x1a4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 19:38:19 2026 GMT
Not After : Apr 17 19:38:19 2026 GMT
Subject: CN=69b31630-63a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:68:07:6a:a7:27:62:04:60:e9:89:54:07:
d6:fa:95:88:83:0b:02:e8:5d:7d:94:10:57:ca:27:
e0:44:89:1c:75:b8:5e:ab:52:75:3a:18:49:ae:c7:
79:56:c1:81:86:14:b8:93:4b:1f:a2:86:6f:7b:53:
1a:13:2b:e6:82:3c:45:e7:77:ea:1a:a2:65:f9:01:
da:8a:6e:18:65:8a:a6:88:50:97:4f:bc:c0:33:27:
c2:f6:e7:f9:7e:5e:e5:b5:52:76:66:a5:47:36:4a:
dd:9a:4b:f5:60:12:62:ea:36:b2:81:7f:5e:62:45:
1f:5c:2b:a1:00:a4:2a:16:d8:09:8b:91:07:d3:b9:
fa:c4:4d:d6:5d:de:b9:19:6b:73:3f:55:cb:e2:3f:
7f:7d:8b:bb:08:70:0b:13:17:cb:13:78:f2:fc:fb:
da:51:c1:b8:ac:90:9f:f8:be:40:2b:06:8c:fd:b4:
43:7c:1f:99:fa:c7:74:be:54:24:e7:81:34:c3:ef:
55:06:ae:11:6d:c5:9a:e8:b5:60:43:97:7e:92:90:
8e:4f:6b:50:6b:64:5d:13:1e:ab:58:a3:72:75:82:
b8:be:9c:bc:3c:14:34:18:b8:56:4a:36:69:35:7b:
67:5b:70:0f:82:85:ff:96:3e:b5:ef:dc:59:fd:c8:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:58:CA:BA:CD:B2:9E:DF:71:8E:6F:4D:69:03:1C:55:6E:70:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085A7FDA1E4B11F18A531AE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/23
156.229.55.0/24
156.249.2.0/23
Signature Algorithm: sha256WithRSAEncryption
10:9f:a3:0c:89:a2:4b:89:28:77:b2:2b:cd:c3:9a:96:12:f1:
71:84:2e:47:32:f8:7c:3e:f5:ce:93:0a:55:95:bd:16:43:ed:
b4:fe:bd:2e:60:dd:a5:fd:60:a0:61:d3:4f:80:ec:ce:c3:00:
e9:ef:e3:c6:44:22:2c:44:39:03:d4:5a:ef:67:d4:16:44:2b:
0f:9a:ff:28:bb:48:4a:c9:e9:a7:5c:b8:94:00:ee:02:85:09:
8f:3e:9f:2d:93:b5:b1:dd:15:5b:88:dd:41:5e:a4:15:0e:d7:
c5:d4:ff:74:71:27:6c:82:60:06:69:80:e9:ea:bf:11:33:38:
2c:26:17:cb:13:33:6a:c0:33:1c:e5:23:d2:12:a8:98:37:e3:
5a:af:ea:5a:4b:66:c0:59:2c:84:02:ea:b5:59:23:30:70:20:
29:42:f1:ca:32:32:70:08:24:c5:14:42:7e:7d:7a:d7:5b:26:
30:aa:29:d5:df:e2:09:2a:53:4b:f8:e5:8c:52:65:af:17:6c:
54:14:56:2c:b3:84:86:d8:e7:23:49:f2:c4:8d:00:ea:18:74:
23:02:29:7b:06:8a:ce:cb:81:26:22:46:6e:2c:bf:50:68:13:
f2:33:2f:b4:ec:cc:24:89:8c:1d:d8:07:3b:58:70:79:d6:00:
64:77:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:05 2026 by rpki-client