Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14A0DEE421DC11F19EF6FEBBDAE4EC9C.roa
File: 14A0DEE421DC11F19EF6FEBBDAE4EC9C.roa (raw, json)
Hash identifier: 0yqTtQ97KooAm81ona2aerVTFO8aiVBDA4k2WasLtNc=
Subject key identifier: BB:53:E1:B6:1E:C4:CC:76:22:9F:16:83:B1:51:F3:DC:4E:74:69:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14A0DEE421DC11F19EF6FEBBDAE4EC9C.roa
Signing time: Tue 17 Mar 2026 08:34:15 +0000
ROA not before: Tue 17 Mar 2026 08:34:10 +0000
ROA not after: Thu 16 Apr 2026 08:34:10 +0000
asID: 137443
IP address blocks: 156.255.2.0/23 maxlen: 24
156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107938 (0x1a5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 08:34:10 2026 GMT
Not After : Apr 16 08:34:10 2026 GMT
Subject: CN=69b91207-52e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:de:9a:80:3b:87:1e:d0:03:1b:48:f7:cb:
d5:8a:0a:e7:fc:d3:cc:2f:7b:23:9f:51:cd:5b:69:
36:51:8b:5d:51:8c:f1:13:c7:85:0d:44:45:76:a0:
ae:0e:e4:0e:9c:2e:54:4d:c4:69:da:7b:d5:d6:dc:
e4:14:05:bf:f3:30:02:53:a7:59:6b:17:3e:27:20:
4b:a0:63:6c:80:c7:22:3e:57:52:7e:09:48:3f:41:
86:3e:8b:a9:e8:47:49:5f:8c:09:86:ee:53:4d:92:
9a:dd:b3:51:e6:8e:16:65:4c:e8:e9:ed:9d:5b:3b:
0d:ac:15:7e:46:39:f2:c3:8c:ac:53:19:d5:1c:5a:
10:91:5c:00:9b:5e:25:24:04:49:9a:03:6e:78:81:
e8:7a:8b:93:d5:02:5f:cc:d3:5d:b1:45:bd:86:80:
7e:2c:a4:58:35:1d:09:82:d7:d3:5e:29:55:7d:f5:
c6:f7:ef:1b:2d:94:b8:dd:21:e6:f8:b4:2d:3e:96:
bd:0f:4a:f0:ce:a6:17:f2:10:51:ef:0b:19:ad:2b:
ad:1d:a7:ef:b5:62:45:4e:88:81:77:94:6a:05:17:
e1:bd:d1:aa:09:45:b1:b7:4e:ae:aa:f9:19:e3:f5:
09:03:dc:2e:52:bf:7d:e8:fc:f2:89:2d:fb:21:82:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:E1:B6:1E:C4:CC:76:22:9F:16:83:B1:51:F3:DC:4E:74:69:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14A0DEE421DC11F19EF6FEBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:90:b6:9f:14:35:62:ce:8e:d6:04:f6:ca:2a:1e:bb:29:a9:
8a:78:b0:68:e3:62:af:2f:c2:18:d8:55:78:71:bc:38:ff:4d:
94:ad:93:53:fb:c7:96:4a:9a:30:9d:6e:52:f2:37:42:82:cf:
04:e3:ad:7e:90:61:0f:3f:9b:5e:06:53:47:c7:58:4d:d3:6d:
be:84:27:72:3d:10:75:ae:d0:a6:0a:cf:dd:c2:86:d2:fc:9d:
b6:66:bc:b9:7b:a3:3d:4a:13:1c:a5:7b:26:47:61:76:52:88:
74:17:98:c4:74:85:c4:6d:e8:21:a9:4f:17:ce:fd:b8:8c:bd:
4d:39:4a:75:55:ec:26:11:a8:6b:47:6f:97:c6:ce:d8:ad:e0:
8f:ba:d5:8f:95:d7:69:a3:82:ef:c7:9d:ca:90:06:65:50:df:
53:4b:10:bc:34:26:1c:57:2b:dd:ec:b1:81:23:04:bd:b0:66:
2a:cb:ae:4d:73:cd:9a:78:00:96:d5:40:0c:25:50:48:c7:69:
78:05:70:72:b6:e1:ee:6a:79:d6:19:b1:8b:8b:60:4c:fc:5f:
32:52:2e:3f:09:7f:48:6a:a1:db:6b:0a:0d:ae:83:19:03:79:
2a:52:1c:ce:eb:a5:00:70:af:07:2f:64:f1:48:12:1e:0a:e2:
4e:f9:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:25 2026 by rpki-client