Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF084D2245A11F184EC79BEDAE4EC9C.roa
File: 3CF084D2245A11F184EC79BEDAE4EC9C.roa (raw, json)
Hash identifier: 4iSUYvYzcAkMRLoN7ntFwMqyxjJIcFt65dyfgOIrBvA=
Subject key identifier: 47:93:3C:0B:1D:5B:A3:6F:78:A7:B3:51:79:73:E1:CA:5A:23:24:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A637
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF084D2245A11F184EC79BEDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 12:42:22 +0000
ROA not before: Fri 20 Mar 2026 12:42:17 +0000
ROA not after: Fri 23 Jul 2027 12:42:17 +0000
asID: 328608
IP address blocks: 156.229.172.0/23 maxlen: 24
156.229.174.0/24 maxlen: 24
156.243.134.0/23 maxlen: 24
156.243.138.0/24 maxlen: 24
156.243.145.0/24 maxlen: 24
156.243.146.0/23 maxlen: 24
156.244.204.0/22 maxlen: 24
156.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108087 (0x1a637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 20 12:42:17 2026 GMT
Not After : Jul 23 12:42:17 2027 GMT
Subject: CN=69bd40ae-b703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:0b:49:d3:3c:fa:c4:b3:21:6e:63:09:06:
c6:74:82:16:c8:f3:64:0f:44:96:ad:9e:a9:9b:5f:
ca:0d:b5:9d:77:55:e6:1e:55:27:63:ea:ab:25:68:
6e:ca:19:98:65:6d:d6:0b:b7:f5:a0:83:14:95:fd:
0d:1c:23:b7:81:40:c0:b3:15:bd:2a:29:ee:f4:e8:
28:16:31:3e:1a:8e:00:34:36:74:5c:15:06:66:d3:
ea:a7:51:37:5f:b5:e7:41:2d:a4:52:5f:35:4f:f5:
39:ae:52:3f:2f:ed:03:2e:36:db:26:6f:c1:97:2e:
82:c9:ba:cf:ee:94:ff:4d:a7:53:5c:48:95:22:a7:
20:40:45:1b:b9:23:f2:91:cf:f7:b3:6d:ec:a0:ae:
db:1c:ca:9f:fa:78:b3:32:bf:26:97:d0:03:28:27:
f3:c4:54:b1:d1:3e:70:e7:f8:fc:7d:59:65:2d:7e:
f8:cb:09:7d:86:fa:1a:07:a3:a7:33:d0:d0:ab:bd:
04:c8:d2:5b:31:6a:99:7a:81:16:c3:85:7c:9d:ca:
d1:eb:49:ad:c5:bb:f1:6f:09:54:a2:19:90:ef:dc:
92:c1:7c:99:36:e2:bf:5f:ab:19:8e:ce:ae:e2:e6:
0d:b5:d8:35:f8:16:41:1f:2d:c7:ae:66:11:ef:b4:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:3C:0B:1D:5B:A3:6F:78:A7:B3:51:79:73:E1:CA:5A:23:24:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF084D2245A11F184EC79BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.172.0-156.229.174.255
156.243.134.0/23
156.243.138.0/24
156.243.145.0-156.243.147.255
156.244.204.0-156.244.208.255
Signature Algorithm: sha256WithRSAEncryption
9a:3f:d7:83:b4:b2:6a:4a:3d:13:a4:a4:f5:53:ad:aa:9c:95:
97:f2:e3:df:83:4a:74:40:66:02:58:2c:60:86:a3:c0:87:fe:
ff:c5:9d:df:ae:f0:70:06:37:46:13:09:8a:6b:02:38:54:86:
24:05:4d:8b:51:fa:6a:89:b8:84:6c:2a:6a:e0:53:1c:d2:96:
f3:f6:24:97:aa:57:3a:cf:5c:31:7d:70:94:dd:40:19:1d:af:
a7:54:1b:7b:da:37:09:b4:b8:d3:4a:c7:3c:d3:a5:67:e9:ae:
18:de:cf:ff:4e:79:ce:07:d0:72:f4:79:38:90:fe:40:bc:f7:
dc:db:08:7a:7c:9a:af:71:cf:22:cc:f8:25:6e:12:77:3c:ee:
2a:57:e1:a4:72:7b:90:f6:78:1f:e3:16:8f:05:cf:5f:8c:47:
50:c5:02:a9:f2:42:40:62:5d:69:d2:31:ec:f4:54:d2:7e:b7:
27:df:4e:74:17:31:ac:94:8c:a4:a3:a5:7f:ee:95:23:dc:a4:
3f:f0:f6:8a:a5:5a:b5:6c:29:87:92:e1:ae:2f:d5:64:6d:15:
51:66:8b:32:dd:d4:4b:f4:0e:6a:aa:34:94:a8:7e:26:f7:99:
5b:02:78:93:cf:53:0e:9d:c7:89:68:bc:c6:a6:63:c2:5b:7b:
f6:10:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:06 2026 by rpki-client