Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297A9A36210911F183A5E6EDDAE4EC9C.roa
File: 297A9A36210911F183A5E6EDDAE4EC9C.roa (raw, json)
Hash identifier: w+YO7+Hjkbja9U79Ny9+OQ+4AGgRfrgDiMyQx+V70Tk=
Subject key identifier: 95:A9:67:11:05:4C:D6:BA:76:08:E6:D1:27:44:A2:9B:3F:A6:14:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A566
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297A9A36210911F183A5E6EDDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:24:26 +0000
ROA not before: Mon 16 Mar 2026 07:24:22 +0000
ROA not after: Fri 16 Mar 2029 07:24:22 +0000
asID: 17561
IP address blocks: 156.255.188.0/24 maxlen: 24
156.255.189.0/24 maxlen: 24
156.255.190.0/24 maxlen: 24
156.255.191.0/24 maxlen: 24
156.255.192.0/24 maxlen: 24
156.255.193.0/24 maxlen: 24
156.255.194.0/24 maxlen: 24
156.255.195.0/24 maxlen: 24
156.255.196.0/24 maxlen: 24
156.255.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107878 (0x1a566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:24:22 2026 GMT
Not After : Mar 16 07:24:22 2029 GMT
Subject: CN=69b7b02a-3ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:3a:1f:65:c4:0f:4f:e6:45:11:59:4a:f0:
e2:1a:70:fb:07:81:7b:9a:39:2a:47:c4:4e:78:86:
29:d8:38:4b:c2:82:ab:b3:b6:b2:6a:72:cd:90:c6:
a5:c0:7d:5a:eb:79:8c:6f:af:56:4f:91:e5:ee:21:
1b:d6:7d:19:a1:91:70:25:6a:a0:39:48:f8:d9:0b:
6d:75:03:cc:a2:b4:44:86:e5:21:98:76:4e:e4:63:
30:bb:ca:cc:cd:45:73:b1:f6:48:96:d9:72:4e:0f:
12:03:73:d6:53:6f:c2:c4:11:f8:21:a3:69:df:60:
e2:31:49:d1:80:c9:d4:6f:8d:7e:1b:04:d5:78:74:
6b:1a:18:9d:e0:49:04:79:fb:e7:fc:fb:4e:01:5f:
19:fb:e7:83:76:fd:24:a3:15:16:c0:c9:ed:02:c2:
b3:79:bb:d1:49:f1:99:c6:c5:7e:c0:af:9a:52:b2:
5b:a8:0f:09:86:73:dc:85:60:6f:7a:ad:e7:86:78:
b2:d9:cf:26:31:a6:3f:7d:c5:03:a1:8e:34:10:b6:
29:2a:97:9d:39:ce:39:52:cb:0d:d8:d7:90:6c:a7:
c5:26:e1:94:17:bf:b5:86:8a:3f:6b:d9:32:d3:25:
f8:8d:cb:33:e3:1a:dd:44:f6:c8:9b:46:46:06:09:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:67:11:05:4C:D6:BA:76:08:E6:D1:27:44:A2:9B:3F:A6:14:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297A9A36210911F183A5E6EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.188.0-156.255.197.255
Signature Algorithm: sha256WithRSAEncryption
24:40:25:a4:9c:83:00:1a:3b:37:b5:a1:b7:52:18:f5:b5:a1:
08:a0:b1:35:3c:41:4c:01:bf:bd:b8:fd:d7:66:67:6d:d2:9e:
4c:66:8f:83:ab:ce:e2:25:ea:2c:e4:b6:22:54:57:55:e4:37:
2d:a0:59:3e:38:1c:75:5b:7c:a4:2c:49:41:21:de:4d:17:1c:
24:e5:ac:f5:e4:0c:2a:b5:6e:7a:73:62:11:8b:9c:79:78:3c:
62:1f:72:97:d5:5b:a6:a5:6b:7b:fa:d7:2d:34:24:51:24:b8:
19:fa:0f:3a:ca:8c:c2:12:00:48:b9:a2:24:bc:5e:dc:6f:03:
7a:aa:58:02:f4:91:89:a9:f1:6b:2a:f1:48:2c:71:b3:f6:b4:
6b:ca:1a:34:b6:6e:7d:d6:af:d0:75:71:4f:31:d7:e7:7a:2d:
33:9e:14:82:3e:3f:27:7b:c5:97:21:68:c8:cf:ef:d8:fb:41:
48:56:7f:fd:c6:a5:64:b9:7d:06:ac:0c:35:fb:4a:e3:6f:9a:
a9:bd:a4:33:1c:bf:d6:9c:4d:74:41:ca:19:77:9e:5f:4a:76:
7d:ed:fe:ad:71:13:e5:f9:7d:35:f1:00:5a:4d:12:a2:79:f1:
87:22:14:eb:2c:7e:37:c4:3d:da:2a:e2:8d:96:85:ae:02:da:
1f:da:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:00 2026 by rpki-client