Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/126F2B7E236E11F1858D36E5DAE4EC9C.roa
File: 126F2B7E236E11F1858D36E5DAE4EC9C.roa (raw, json)
Hash identifier: HazmoeXlhlRqEXz/d/YZE9Sm3AHFs0vaXzHAMYTWoY0=
Subject key identifier: 4A:A3:7A:49:D5:C7:91:69:68:EA:BA:A1:99:1F:E0:97:1D:98:30:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/126F2B7E236E11F1858D36E5DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 08:31:49 +0000
ROA not before: Thu 19 Mar 2026 08:31:43 +0000
ROA not after: Sat 28 Mar 2026 08:31:43 +0000
asID: 153671
IP address blocks: 156.231.70.0/23 maxlen: 24
156.231.88.0/22 maxlen: 24
156.231.92.0/22 maxlen: 24
156.238.12.0/23 maxlen: 24
156.238.28.0/22 maxlen: 24
156.238.60.0/22 maxlen: 24
156.242.64.0/23 maxlen: 24
156.242.100.0/22 maxlen: 24
156.242.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108014 (0x1a5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 19 08:31:43 2026 GMT
Not After : Mar 28 08:31:43 2026 GMT
Subject: CN=69bbb475-a1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:a2:32:a0:d2:a7:b1:91:84:22:c7:44:e9:
f1:ad:7b:00:67:a1:cf:88:de:78:28:05:c6:90:e7:
bf:7d:12:37:56:c5:53:d8:6d:76:ed:54:3a:5a:b2:
45:6a:2e:bc:f8:e8:d2:8a:32:b8:a6:03:96:c7:2d:
09:15:39:93:1e:3d:12:e2:f2:90:75:56:7a:12:14:
b4:b3:e4:a4:8e:56:02:65:33:63:58:a5:f7:ce:c6:
0f:13:71:0c:38:49:d6:20:89:68:2d:e0:9b:0b:e0:
90:e3:25:cc:d5:87:00:8d:ec:30:af:1f:fb:32:ff:
5c:92:08:79:83:76:7b:54:83:03:e5:8c:b6:52:b2:
69:66:5a:12:64:d1:81:e1:d1:77:c6:ed:31:6c:0e:
c0:6f:ae:0e:22:bc:bf:8d:d6:eb:da:a2:b2:6f:0c:
98:9d:5c:86:c1:4a:54:f8:c6:b5:ca:2f:9a:50:c2:
1a:9c:cb:d9:cb:25:ad:38:78:f7:13:d3:d7:83:b3:
c9:9e:4e:bf:b1:16:60:83:92:41:a9:d0:b8:e1:9c:
7d:b0:d6:29:3b:30:fe:e5:95:e6:23:9c:88:1f:57:
eb:dd:54:09:13:82:21:ad:c1:0b:a0:a5:e4:cb:a1:
e0:63:f2:3b:15:aa:2f:ad:28:27:88:4f:3a:e4:14:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A3:7A:49:D5:C7:91:69:68:EA:BA:A1:99:1F:E0:97:1D:98:30:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/126F2B7E236E11F1858D36E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.70.0/23
156.231.88.0/21
156.238.12.0/23
156.238.28.0/22
156.238.60.0/22
156.242.64.0/23
156.242.100.0-156.242.107.255
Signature Algorithm: sha256WithRSAEncryption
56:6b:92:6b:88:ad:5d:12:bc:47:2b:af:ca:28:7c:e3:53:d2:
22:6a:ce:c6:6b:f4:d3:62:66:aa:43:4b:07:d7:da:31:8c:57:
ae:d8:3d:94:d9:6f:43:7f:e3:25:61:58:cb:be:41:b3:b9:6a:
95:aa:0f:8f:17:df:fd:8c:37:4b:89:d7:5a:de:45:57:bd:4f:
f2:d7:5b:52:df:f8:7d:5b:03:bb:86:7e:f8:d1:db:78:0e:52:
67:bb:d4:23:dd:7b:b4:60:12:f2:9d:79:92:21:64:26:e4:6b:
2d:0b:31:21:08:03:f1:c5:d0:c6:1a:34:b4:1f:d0:2d:90:35:
33:15:01:b7:b0:18:f1:4c:24:56:63:b7:62:63:4d:01:e1:89:
84:86:91:6f:ac:57:19:2d:4f:06:82:10:da:2e:0f:15:97:f8:
70:10:52:cb:bb:25:49:43:fc:40:d8:64:83:8d:6a:5e:e1:d6:
30:de:67:19:2e:3c:10:9b:f9:db:fe:69:a5:83:64:fd:ba:96:
65:9f:bc:91:ab:d2:91:ae:b8:77:c2:20:a9:9a:b0:a3:61:2d:
8e:5a:89:92:cc:ad:9a:12:bd:df:e6:c3:e6:d7:36:d0:6f:45:
25:c2:93:2c:4f:2c:7c:40:14:9f:65:6c:c4:5c:8a:c6:da:5e:
81:fc:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:28 2026 by rpki-client