Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E736B6210311F1B92AD3CCDAE4EC9C.roa
File: 14E736B6210311F1B92AD3CCDAE4EC9C.roa (raw, json)
Hash identifier: zJseu10wwXUkxm4L6fnejm9gVUTTWJgUKsBgItOslUM=
Subject key identifier: E3:A9:EE:36:69:91:D7:CA:53:52:0F:F6:F8:34:51:61:69:B9:55:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A548
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E736B6210311F1B92AD3CCDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 06:40:55 +0000
ROA not before: Mon 16 Mar 2026 06:40:48 +0000
ROA not after: Mon 20 Apr 2026 06:40:48 +0000
asID: 214432
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107848 (0x1a548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 06:40:48 2026 GMT
Not After : Apr 20 06:40:48 2026 GMT
Subject: CN=69b7a5f7-9a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:10:61:30:2c:3e:eb:56:97:94:7b:50:d6:
48:b4:38:2e:4e:6a:52:21:f9:1c:54:d7:ef:52:c9:
19:fc:b9:2a:ed:b1:a8:74:89:06:7a:64:12:00:fa:
b9:54:b4:5e:bf:0f:9c:01:c2:ee:3a:ae:3b:ab:ba:
dd:c9:c3:f2:e2:cf:dc:08:cc:62:7e:35:23:50:b5:
a0:8a:e6:25:f2:90:be:0b:2a:73:7b:27:d1:d9:05:
9c:55:1b:06:c2:4b:e7:df:1c:c3:a4:bd:55:ac:dc:
08:70:6f:c8:5e:86:8f:34:f1:4e:27:dd:fe:29:7f:
80:3c:a2:7e:9c:5f:82:49:93:d7:20:f5:80:67:cb:
b9:1e:75:b0:f1:31:a9:48:c4:af:c2:93:5e:94:07:
d7:56:1b:83:20:10:8d:45:e7:1c:c4:b2:26:97:27:
f1:cb:eb:19:ad:90:92:48:a1:ad:63:ee:cb:48:f4:
a1:b1:a5:b4:14:80:43:c5:68:b5:81:f9:c1:0b:7d:
e6:fc:17:6c:5f:0c:d4:2f:2d:07:ad:02:81:2e:b7:
69:12:bb:c4:26:d7:20:c9:11:10:7a:bf:b4:3e:15:
15:47:8b:26:08:8c:74:ee:97:64:47:a5:d1:8f:a9:
5c:9a:a1:44:16:10:23:32:55:3e:1a:ca:8e:02:09:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:EE:36:69:91:D7:CA:53:52:0F:F6:F8:34:51:61:69:B9:55:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E736B6210311F1B92AD3CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
97:e3:e1:7b:fe:fc:e2:38:ee:f1:31:52:f4:d1:7b:e2:e3:b7:
81:27:25:9b:8e:47:c4:a6:c5:9b:a1:f7:cf:1c:6a:2a:ed:28:
84:54:2e:10:9a:fb:b0:4e:85:4a:72:34:15:57:16:b0:72:f2:
5c:9c:70:ff:15:40:07:cb:a3:1e:fb:64:91:bf:de:60:02:01:
34:7b:53:f2:e3:32:25:c5:ec:97:ea:66:4f:1b:85:6c:e1:9f:
ec:b4:f1:82:eb:74:43:6f:56:04:af:5c:dc:3c:88:ef:c6:61:
ff:df:fc:b4:4b:59:b6:f9:87:23:1c:a7:cb:d6:fd:a1:72:7c:
e6:61:99:75:02:d9:77:ee:a0:65:32:c0:5c:4f:6c:57:9e:94:
04:20:8d:5a:eb:1f:04:65:3c:0d:eb:e6:cc:66:90:75:e4:36:
12:7f:33:3b:43:5f:a4:8b:bb:0e:01:47:db:45:b8:9b:1c:4b:
fe:69:9b:f5:e1:a5:63:95:0d:1e:1a:d9:88:27:78:5f:05:d9:
b4:fa:d9:1c:11:2a:95:10:b4:41:b3:67:0b:37:be:7c:80:e5:
13:f6:16:93:cf:ee:6e:21:7f:81:6d:43:b2:cd:f4:e5:76:14:
ad:0a:8d:cc:ee:f8:47:d3:73:63:08:b2:c2:2b:7a:af:53:3f:
09:63:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:42 2026 by rpki-client