Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3314DA88414411F1AB9F35BDCE1D38B0.roa
File: 3314DA88414411F1AB9F35BDCE1D38B0.roa (raw, json)
Hash identifier: 2p33i6vKFSi+BVkfOElyiBs797r8PuyRhUGQEgzUJNE=
Subject key identifier: 06:8E:BE:8C:A9:54:49:9B:46:27:91:A2:C5:81:3C:BA:1B:7F:95:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3314DA88414411F1AB9F35BDCE1D38B0.roa
Signing time: Sun 26 Apr 2026 07:47:40 +0000
ROA not before: Sun 26 Apr 2026 07:47:35 +0000
ROA not after: Mon 01 Jun 2026 07:47:35 +0000
asID: 32043
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110421 (0x1af55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 07:47:35 2026 GMT
Not After : Jun 1 07:47:35 2026 GMT
Subject: CN=69edc31c-4ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:dc:40:4f:ac:d1:0f:1d:e9:7d:67:0e:33:
f2:48:ee:a0:78:8b:f8:13:9f:52:a1:37:1b:d6:e3:
08:2b:9f:ee:6c:8d:40:6f:fd:cb:70:3f:5d:6a:98:
ae:eb:c7:d7:09:07:b5:cd:66:b2:00:28:01:8d:fe:
e5:40:5f:b6:a6:28:d1:b4:d9:60:4b:5a:1e:38:66:
35:3d:cd:d8:c6:7c:01:47:db:cb:6d:95:bd:cf:bc:
99:b2:ad:12:ef:09:b8:f6:b4:aa:7c:7a:4d:6f:8d:
a6:45:3c:9d:e7:47:e5:d0:7e:a3:4c:77:ad:44:ca:
68:e7:be:64:9b:14:b0:53:24:f0:da:07:5f:0e:21:
11:20:73:10:38:25:40:ff:e9:dd:bf:98:87:81:09:
06:59:cd:69:15:a1:44:48:49:15:ad:b1:a6:49:20:
e4:4f:8e:cc:f6:9e:a6:d0:17:bf:58:27:f1:16:22:
16:17:58:dc:87:a4:d0:71:1d:38:ba:7a:2e:e2:67:
57:76:d7:0d:0f:1a:b2:76:72:97:6a:78:07:3c:95:
4f:1d:1e:b5:af:1b:64:65:ac:4f:78:ec:75:0a:5c:
78:86:11:f4:8c:8b:7f:c9:46:8f:f1:c8:95:67:fb:
a1:d4:f3:62:04:79:17:3f:1d:ef:5d:ce:b5:86:69:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8E:BE:8C:A9:54:49:9B:46:27:91:A2:C5:81:3C:BA:1B:7F:95:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3314DA88414411F1AB9F35BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:73:42:2d:f9:da:0b:8c:7a:04:f3:65:6d:01:42:92:ed:d5:
fc:30:f3:d6:40:2f:de:a9:3a:00:cd:be:a3:b1:94:14:e0:48:
de:a1:35:3d:fe:1c:03:1f:b7:e5:02:c2:fc:94:65:d2:7d:3d:
9f:d8:41:86:61:33:ab:df:b1:6f:63:2c:14:3a:f0:bc:71:cc:
13:37:f8:8d:61:51:23:7c:41:a8:d5:1e:c1:75:0a:01:0d:f2:
6f:44:ff:ed:eb:ee:54:b5:ea:00:3f:a6:b0:5f:d1:da:ad:cd:
ae:ef:d7:00:b5:b3:87:97:7c:c5:23:20:ce:55:49:94:f9:bf:
3a:be:3d:a7:44:8c:76:fe:5a:6d:7e:52:29:39:d2:a7:9c:ca:
c9:e7:76:d7:e2:7b:ba:2a:8f:fe:d6:cd:5f:d7:49:66:a7:07:
4c:a9:c4:e3:c6:e6:8b:0c:91:11:19:a7:8e:28:71:08:3c:6c:
eb:a7:4a:12:ed:03:7a:44:b4:70:b4:ad:db:d2:12:83:af:7c:
81:a2:18:84:f6:e6:5c:16:33:95:8c:95:c0:2e:95:4e:fb:ad:
3f:aa:b4:70:50:02:81:cc:63:9c:66:fc:67:3b:74:ed:f9:b6:
64:e8:3a:0d:d6:93:be:18:cf:27:3c:76:21:d0:d9:83:4a:14:
2c:de:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:51 2026 by rpki-client