Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B93E6B443AB11F1A68BF2D7CE1D38B0.roa
File: 2B93E6B443AB11F1A68BF2D7CE1D38B0.roa (raw, json)
Hash identifier: K+EVH3kI5WhqpG9BeeRI4oJrQKUlmjtp+HIRErLeYq8=
Subject key identifier: 77:87:E0:4F:1F:4A:29:C8:26:A6:7A:9F:12:AC:71:15:7F:F6:90:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B93E6B443AB11F1A68BF2D7CE1D38B0.roa
Signing time: Wed 29 Apr 2026 09:09:48 +0000
ROA not before: Wed 29 Apr 2026 09:09:43 +0000
ROA not after: Thu 04 Jun 2026 09:09:43 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110547 (0x1afd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:09:43 2026 GMT
Not After : Jun 4 09:09:43 2026 GMT
Subject: CN=69f1cadc-0664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:97:cb:65:5b:eb:eb:2d:96:10:ad:f9:fa:
79:73:1d:c3:ba:cc:79:28:ed:15:b4:bc:4e:87:32:
a5:cf:6c:63:15:a8:10:d3:b9:32:9e:b9:96:ca:94:
47:57:f6:91:9d:47:19:03:7d:a6:e8:94:f1:b9:3f:
a7:16:49:49:df:6b:fb:8c:c2:7e:5b:f5:f8:73:b3:
9c:e4:6d:f4:c9:40:ff:ba:11:65:8e:d4:ef:f4:ba:
82:86:bc:d4:18:41:41:c4:0e:bf:60:b0:17:61:c0:
59:11:81:45:4a:97:66:56:b2:b1:2b:fb:be:66:c3:
77:7c:4e:d9:00:40:86:57:0b:ae:ce:be:2a:2d:00:
0f:cc:6a:10:3a:9b:f5:7b:39:15:0b:96:30:6e:ac:
78:9a:fa:c5:24:26:b7:45:7c:4f:28:75:26:fc:be:
84:a2:b5:21:c2:0a:8f:51:93:de:b0:89:a5:68:5c:
54:25:84:33:fc:32:87:b1:c8:fe:cd:9e:59:e7:f8:
9a:a0:2c:87:51:ed:67:4e:a1:d4:77:a5:03:06:99:
b6:4c:c6:15:70:2a:fe:ea:da:0c:49:ab:25:1c:41:
d8:e3:e4:49:d9:53:3b:97:ce:3e:f9:3a:6f:38:c8:
e2:72:fd:76:73:62:7a:45:34:5a:e3:a8:a8:d7:ba:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:E0:4F:1F:4A:29:C8:26:A6:7A:9F:12:AC:71:15:7F:F6:90:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B93E6B443AB11F1A68BF2D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:4f:2b:ef:01:ec:f1:be:c2:61:c4:74:81:c3:94:24:af:ee:
8d:a6:35:19:ce:7c:77:54:96:40:fb:e5:4d:9d:0f:03:bc:d6:
51:5e:a4:2a:08:86:6f:df:67:9a:b4:79:5b:ea:1a:01:5f:44:
80:d9:79:c7:0b:ef:cb:d0:75:19:29:70:15:29:65:5c:c0:24:
1e:15:51:db:3c:3e:0d:57:ce:d2:8d:cd:11:9e:63:df:6d:f1:
db:f4:33:59:ca:60:2a:e2:f6:99:81:3a:96:be:59:46:fb:b5:
36:7f:6d:57:01:2b:0e:bc:b3:fd:1d:dd:3b:67:47:88:25:d7:
af:9b:ac:23:0c:d8:22:3f:87:ea:7c:fd:5a:32:42:35:a5:1f:
1b:2e:46:e7:64:47:51:df:e8:c0:d6:f9:76:25:42:97:ac:58:
fe:c1:4b:f7:18:bc:48:02:34:6b:a3:43:83:cf:66:91:61:95:
b5:09:3c:11:ad:57:f0:40:cf:48:ad:e4:64:aa:94:94:ef:bf:
6b:9c:8d:ca:ba:00:c6:92:9f:d0:3b:d1:4e:b1:b5:f5:ed:cf:
aa:0b:69:ea:c6:3e:d8:65:10:d1:4c:f1:79:25:1f:63:a6:7c:
18:f7:b3:62:41:37:87:8c:7f:3e:f9:1e:ce:39:d5:9f:c8:ae:
19:13:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:03 2026 by rpki-client