Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C68368210311F1ACFDE4CCDAE4EC9C.roa
File: 31C68368210311F1ACFDE4CCDAE4EC9C.roa (raw, json)
Hash identifier: DdAbhy9rhOYRV2rgMv/oF4ExqbIQs136Ll3/XvC/sWQ=
Subject key identifier: B9:75:91:25:18:1A:F5:D0:28:BB:93:27:F5:BA:9E:6B:8B:4B:22:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A54A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C68368210311F1ACFDE4CCDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 06:41:43 +0000
ROA not before: Mon 16 Mar 2026 06:41:38 +0000
ROA not after: Fri 16 Mar 2029 06:41:38 +0000
asID: 17561
IP address blocks: 156.255.128.0/24 maxlen: 24
156.255.129.0/24 maxlen: 24
156.255.130.0/24 maxlen: 24
156.255.131.0/24 maxlen: 24
156.255.132.0/24 maxlen: 24
156.255.133.0/24 maxlen: 24
156.255.134.0/24 maxlen: 24
156.255.135.0/24 maxlen: 24
156.255.136.0/24 maxlen: 24
156.255.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107850 (0x1a54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 06:41:38 2026 GMT
Not After : Mar 16 06:41:38 2029 GMT
Subject: CN=69b7a627-24a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9b:5b:ea:74:38:5a:bd:30:0c:61:0d:ef:f6:
20:f1:6b:44:65:cb:71:97:76:6a:c3:bb:20:10:9a:
59:34:1f:8b:29:42:59:e5:64:a3:ac:f8:c0:5a:45:
0c:d8:b4:92:d4:ed:ab:c1:0e:f2:8e:a6:2f:9b:5a:
52:4f:25:60:ea:9e:7f:c6:3e:24:26:41:79:98:55:
75:6b:de:2f:85:c3:6f:e7:3e:0c:0b:fa:8c:8b:9e:
10:ca:77:62:2b:4a:e0:c8:6d:17:82:2a:45:82:a8:
56:28:66:63:22:05:00:a0:1a:81:1b:de:70:65:15:
6c:8f:29:63:8c:74:a7:4f:1b:2b:1e:d9:15:00:94:
f2:96:be:38:49:90:66:15:92:ca:ad:3d:3a:ad:13:
16:ab:b0:81:13:df:82:ec:0b:ab:fc:d4:ce:52:a4:
21:7f:7c:7b:bf:bf:0f:a7:27:65:6c:ed:53:44:a8:
42:1f:30:8f:52:93:7f:7b:f8:08:0f:65:df:87:51:
e5:41:d1:a6:58:9d:5e:82:69:a3:3b:09:fb:c0:7c:
18:b2:92:d8:dc:4a:ae:bb:51:ed:3c:4a:70:81:64:
cb:a9:8a:fb:60:0b:cf:9f:e6:1c:a1:96:0b:48:4b:
5a:37:dd:63:40:1e:ed:1f:b6:3b:e0:88:a4:cf:88:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:75:91:25:18:1A:F5:D0:28:BB:93:27:F5:BA:9E:6B:8B:4B:22:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C68368210311F1ACFDE4CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0-156.255.137.255
Signature Algorithm: sha256WithRSAEncryption
b7:c4:dd:b7:9a:c9:66:c6:55:ad:8f:6d:94:60:d6:a2:c6:94:
86:30:5a:1a:22:e2:4e:19:9a:e7:55:d1:15:f8:9a:3a:0c:60:
c2:87:84:02:f3:ad:9e:bc:da:c5:eb:73:19:74:96:67:68:c5:
d7:2f:04:ef:f4:53:ad:c5:2e:c0:3c:35:c8:66:2e:b8:d1:e7:
17:74:cd:41:5f:74:28:b5:e1:4f:9a:05:66:a9:cf:0c:3b:24:
65:ca:45:b7:42:8c:71:e1:79:93:f9:35:0a:7d:04:42:4d:1f:
a7:30:eb:08:44:6d:09:3e:3f:2a:cc:ba:63:8d:de:dd:91:be:
f7:1e:5b:8a:ba:96:d5:fa:b1:6a:33:13:94:ac:e8:6b:75:da:
3f:1e:c1:15:69:2b:ac:93:70:9f:2e:db:cf:ea:6e:1e:c1:9a:
b1:b8:b5:b0:52:8c:96:d8:99:07:ea:d8:42:85:bd:76:1a:67:
c9:43:68:53:e2:3a:64:6b:d1:e9:06:2f:47:9d:f2:5d:2e:16:
71:35:14:80:6b:0c:c2:f6:2c:44:3d:6b:3e:3f:22:ba:2d:a2:
8e:9f:42:15:2a:12:e4:1b:6b:c9:50:64:55:65:60:cd:8c:3f:
c9:f0:75:98:4a:63:d6:25:03:5f:d6:9b:15:fa:00:2b:d9:a5:
79:29:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:43 2026 by rpki-client