Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B3A417017C111F18EA0DF88DAE4EC9C.roa
File: 1B3A417017C111F18EA0DF88DAE4EC9C.roa (raw, json)
Hash identifier: k2e6sWaSH8qzgMlKGahMV+kOI3wEl23cDv8/9Y+QPGs=
Subject key identifier: 03:23:BB:DF:96:D9:A3:F3:A2:66:E0:57:1E:3D:A2:06:DA:D1:DC:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A246
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B3A417017C111F18EA0DF88DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 11:55:58 +0000
ROA not before: Wed 04 Mar 2026 11:55:54 +0000
ROA not after: Fri 10 Apr 2026 11:55:54 +0000
asID: 40779
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107078 (0x1a246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 11:55:54 2026 GMT
Not After : Apr 10 11:55:54 2026 GMT
Subject: CN=69a81dce-a86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:ec:62:0a:e4:83:2b:03:d2:59:62:97:b5:
c4:70:00:00:c4:5a:7b:b6:a7:7b:2a:50:05:bc:5d:
20:91:74:53:72:f6:5a:62:d6:8d:11:c4:5b:fa:70:
d4:ba:a5:d6:ee:bd:52:c0:9e:d0:40:cb:48:a5:7c:
14:ad:aa:c4:da:f0:f4:0d:37:10:16:ba:68:45:35:
f5:69:df:c1:cf:b7:8d:07:e1:dd:8d:16:54:53:94:
c1:c1:ee:ab:86:8b:f6:46:95:25:7d:02:2e:f6:10:
ef:c4:13:75:9c:79:05:06:83:85:8f:15:aa:6a:64:
35:4f:28:9e:15:c2:be:9d:bb:69:5f:36:a7:1c:f1:
98:84:b6:d2:fa:85:66:b8:52:a1:36:9f:5f:58:a5:
91:a0:c8:99:e4:7e:9a:74:0a:ad:f1:08:0d:9b:18:
c3:e7:81:39:78:73:4e:6e:5d:51:f5:92:fe:0f:89:
54:02:ff:f5:f9:cb:3f:30:92:6a:64:ed:9d:c9:68:
ae:68:da:3d:a1:9b:96:ec:62:8d:98:ef:07:c7:f4:
e4:ed:2a:0d:e6:f5:f4:8b:5c:1c:7b:5a:1e:8c:3a:
f9:25:f8:24:99:1d:13:dd:df:86:6a:fa:ad:82:52:
04:e4:72:94:cd:00:d5:c6:ad:88:24:ae:5a:ff:08:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:23:BB:DF:96:D9:A3:F3:A2:66:E0:57:1E:3D:A2:06:DA:D1:DC:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B3A417017C111F18EA0DF88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:f8:07:04:c9:73:b4:2c:a1:e8:09:1f:3f:e6:63:82:06:e4:
26:08:df:9d:79:47:bd:34:f5:f7:49:a8:2b:67:04:55:32:fd:
0f:70:91:db:f5:8c:5f:25:33:26:b1:49:25:21:5a:a8:66:28:
be:7f:cc:ab:fc:47:a7:4d:8f:3f:65:1c:f4:f5:af:0f:ca:4a:
a7:c0:e6:99:0f:c4:f3:c7:55:72:d3:db:2a:ac:20:d8:ef:b4:
c1:8c:03:11:be:70:92:ed:c3:37:56:4e:37:b9:e3:45:98:f6:
2b:f2:fb:27:a0:3b:81:c8:37:0b:e6:a0:5e:f1:c4:38:c9:6a:
57:e6:c4:f4:40:6f:5b:75:40:b7:c0:b4:eb:5f:35:65:53:89:
95:06:a9:a5:03:d9:ed:9d:60:31:e7:af:3f:41:a6:aa:e0:10:
d5:46:5b:f1:d7:49:2c:d9:6e:55:4d:ed:92:ee:29:0e:27:2f:
07:5f:97:26:2e:1b:81:0c:ea:bd:3b:c0:32:86:5f:ee:e5:b9:
f2:9f:61:4c:b9:58:f2:3a:7a:bd:e0:60:24:21:f1:75:fc:8a:
93:26:c7:c5:73:e7:bb:16:15:e5:83:d7:9a:7d:4b:40:5c:ad:
3b:d1:b6:f0:35:40:a6:28:e5:ce:08:09:e1:a5:8a:26:43:25:
fe:87:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:30 2026 by rpki-client