Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/099D23621BB111F1B05E76B4DAE4EC9C.roa
File: 099D23621BB111F1B05E76B4DAE4EC9C.roa (raw, json)
Hash identifier: PRXv26CQ//rf4XfjRCCq1F5ZfR9ybOWq6QK43GwS0rE=
Subject key identifier: E2:EA:DB:AA:0D:70:FF:94:79:91:21:EE:59:20:BB:B3:4B:FE:1F:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A38D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/099D23621BB111F1B05E76B4DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 12:11:01 +0000
ROA not before: Mon 09 Mar 2026 12:10:56 +0000
ROA not after: Fri 09 Mar 2029 12:10:56 +0000
asID: 17561
IP address blocks: 156.252.174.0/24 maxlen: 24
156.252.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107405 (0x1a38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 12:10:56 2026 GMT
Not After : Mar 9 12:10:56 2029 GMT
Subject: CN=69aeb8d5-bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:a9:bd:b4:de:a8:fe:52:39:e2:b9:bf:b8:
b9:15:98:38:6d:13:63:a1:e4:ea:36:e8:e7:dc:a9:
ae:0b:20:8a:84:ae:a9:2d:e3:22:33:01:b0:65:ff:
43:d4:53:92:f9:db:a8:91:ba:90:f9:8f:ff:f0:1b:
71:64:3c:49:e6:9b:7b:05:63:97:67:b1:69:62:aa:
42:38:60:62:e4:bd:8c:9b:00:32:d4:08:e7:bc:e5:
5a:e1:40:89:3b:64:67:a6:b2:9e:ed:70:04:ef:e5:
cd:79:aa:29:76:4b:16:c5:94:be:78:b4:ee:1b:11:
7e:8a:e8:6a:db:3f:87:2b:45:b3:9a:60:03:9d:c1:
8e:31:55:00:13:f3:6e:89:e2:18:c5:1d:b0:74:df:
de:b9:02:77:5a:ba:91:aa:4c:91:15:e5:1e:0f:c7:
b4:ca:ea:d8:7f:b3:91:07:fa:b9:a8:e4:2d:78:2c:
7c:8a:1d:56:9a:b6:d7:bd:7e:71:68:71:31:2b:bb:
02:0e:11:d9:cf:94:1d:1c:51:41:2f:8a:ee:1e:81:
9b:70:f7:c0:44:dc:cb:1b:31:e7:7d:a2:f2:90:e7:
fc:b2:73:07:44:5e:bc:2d:00:6f:a4:4a:65:71:15:
eb:6d:0a:63:5a:4e:e7:13:d5:cc:1d:dd:cc:77:05:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EA:DB:AA:0D:70:FF:94:79:91:21:EE:59:20:BB:B3:4B:FE:1F:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/099D23621BB111F1B05E76B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.174.0/23
Signature Algorithm: sha256WithRSAEncryption
94:f8:39:e8:01:9f:dc:c8:0c:d8:43:e7:aa:6b:69:51:33:aa:
3b:bf:b2:3a:8b:0a:e5:f5:05:d2:cf:1e:dc:02:4e:b4:30:2e:
4a:bf:2f:9d:6b:62:3e:2e:14:c2:1c:43:81:cd:92:2a:f4:c2:
a9:83:ff:02:47:4d:94:4e:c0:ba:03:87:9f:b6:d8:f5:dd:27:
ab:42:86:35:19:ae:15:21:fb:02:5b:37:d7:ff:e2:2e:a7:79:
c6:5e:6e:e8:37:eb:9e:e1:0d:85:8c:dc:4b:88:5c:55:9d:21:
c5:f1:c4:da:54:b1:cb:a7:4a:cc:d0:b8:93:3f:ed:15:db:ed:
0a:db:a9:23:f9:79:c0:00:0f:38:77:b9:48:3f:60:0e:c5:04:
6e:4a:54:f8:e3:c1:90:e3:1d:56:32:5d:57:58:50:c0:55:10:
b7:89:8a:67:8c:72:c9:ff:56:ca:ec:aa:c4:d4:ab:67:d3:d8:
15:19:a0:a2:7f:a0:f7:30:61:ec:1b:b1:7d:d7:cd:02:ad:8f:
8e:5e:f8:b2:46:0c:b6:e8:9b:c7:df:36:6e:db:4c:f1:53:0b:
b6:6f:e2:f1:7e:67:cf:92:f9:2c:fb:50:7a:b2:c1:fc:fc:c0:
cb:80:f0:8e:88:dc:a3:64:30:21:e0:eb:80:0e:e6:f0:0f:16:
bc:5c:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:28 2026 by rpki-client