Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CBED122210911F1A419E4EDDAE4EC9C.roa
File: 1CBED122210911F1A419E4EDDAE4EC9C.roa (raw, json)
Hash identifier: BSNhGKHBrJ9D2pa4pqPmzDbmOZF4FlUwAYSSpNhiJqw=
Subject key identifier: 33:55:6D:74:BE:61:B0:CE:C4:22:39:9F:36:BD:7A:80:40:34:47:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A564
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CBED122210911F1A419E4EDDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:24:04 +0000
ROA not before: Mon 16 Mar 2026 07:24:00 +0000
ROA not after: Thu 23 Apr 2026 07:24:00 +0000
asID: 401739
IP address blocks: 156.247.40.0/24 maxlen: 24
156.247.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107876 (0x1a564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:24:00 2026 GMT
Not After : Apr 23 07:24:00 2026 GMT
Subject: CN=69b7b014-2b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:03:ed:c8:42:0c:89:5d:65:53:00:6d:c8:
bf:42:46:fa:bd:59:5c:08:8a:30:98:55:3f:42:48:
3a:12:67:ad:72:ec:7a:69:a8:a4:ed:e2:da:81:c5:
18:ec:ed:bb:f4:8d:cc:37:3a:cf:9c:de:fa:b1:97:
0d:51:1c:c2:fb:d3:11:d0:53:f2:e5:66:ef:45:86:
b9:51:c4:96:4f:92:58:bb:2e:f0:1e:56:17:1e:5a:
ba:f0:d6:5b:6d:ea:9e:0d:ad:a5:0f:86:ec:b9:a2:
62:c1:0b:a9:a3:60:b5:dd:9f:86:61:76:45:4d:db:
73:6d:be:c0:c5:b2:02:72:d8:a7:03:34:99:f4:db:
56:eb:b8:d2:56:ca:ec:ad:62:38:fa:3e:8c:06:89:
30:9e:5b:88:ee:a5:31:0c:23:36:61:d4:39:55:1c:
bb:35:05:2d:b5:c0:c9:b4:5f:95:41:4b:66:11:a2:
3d:e7:05:b8:27:f1:37:39:aa:54:2c:c0:6f:01:b4:
47:3b:24:04:f3:58:52:92:84:e8:a3:b5:cf:dd:ac:
a6:ab:82:30:86:45:74:9f:c2:33:c0:bc:1c:ef:c2:
92:29:91:4b:d5:d9:aa:2f:34:d3:42:f2:f3:2c:16:
de:5b:c1:97:d1:4d:2f:c6:88:9e:ac:b2:90:2c:10:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:6D:74:BE:61:B0:CE:C4:22:39:9F:36:BD:7A:80:40:34:47:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CBED122210911F1A419E4EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/23
Signature Algorithm: sha256WithRSAEncryption
46:9e:53:4a:b4:d5:b7:97:54:2d:e8:ea:af:66:49:1a:40:0d:
c8:20:99:01:9f:dd:f6:af:a0:36:0c:0c:15:75:b2:ae:61:a9:
03:c7:84:4b:01:43:b8:29:22:47:00:03:d1:b2:34:f1:c6:7f:
59:cd:93:48:69:2f:2d:d9:9d:c2:dd:64:20:cb:d5:11:3f:87:
07:8e:96:7a:ed:99:1f:f9:e2:bb:db:b4:2c:f5:ab:67:db:3d:
b1:4c:80:bb:f3:b8:a2:9a:7d:49:32:47:d3:c6:3c:f6:e8:67:
54:d6:8c:7a:d6:26:a1:5f:67:c8:a2:c8:2a:33:58:f7:4a:df:
ce:ee:59:e6:3f:94:b9:f6:86:ed:4f:57:72:1b:11:76:98:a5:
9f:0b:92:9f:e2:81:44:a4:1e:92:4a:82:2f:8e:ea:b7:92:03:
18:61:ec:f1:83:6a:9e:75:d6:d8:41:02:2e:b7:84:40:79:96:
9a:9e:9e:ec:ca:72:8d:98:2f:d4:89:15:d3:1e:ac:79:b8:8b:
a8:22:70:7a:ba:f3:1d:06:6f:ed:10:6d:72:13:f7:c7:1f:4a:
ce:21:59:9f:d7:88:df:fe:d3:80:0b:92:28:ea:73:8c:74:6e:
35:6d:dc:71:bd:72:d6:28:2e:88:17:b2:68:31:f8:55:3f:cb:
b6:05:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:34 2026 by rpki-client