Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C21FF301D2011F1A6D1699DDAE4EC9C.roa
File: 4C21FF301D2011F1A6D1699DDAE4EC9C.roa (raw, json)
Hash identifier: gG/VAy60nWoOE9oSoAg2Mmos3tzEsAyQl2kVz4e7uMY=
Subject key identifier: E9:17:3B:7C:9E:BF:FD:CE:0B:FE:D1:78:C4:B4:E6:B2:63:EB:2C:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A417
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C21FF301D2011F1A6D1699DDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 07:59:58 +0000
ROA not before: Wed 11 Mar 2026 07:59:54 +0000
ROA not after: Tue 14 Apr 2026 07:59:54 +0000
asID: 213690
IP address blocks: 156.249.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107543 (0x1a417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 07:59:54 2026 GMT
Not After : Apr 14 07:59:54 2026 GMT
Subject: CN=69b120fe-2d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:ec:f8:5a:44:00:9a:e5:35:bb:f2:30:a4:
80:aa:df:59:1b:07:d5:2e:b8:95:53:46:e6:12:3a:
76:72:5d:4b:a9:e4:1f:e3:b5:dc:9c:fe:f9:e8:b4:
d9:3b:e8:54:3a:10:a9:e9:a4:c2:5c:5b:ae:a1:14:
c3:e6:b9:fb:8d:de:d3:0b:83:bf:05:e2:19:da:15:
ad:d2:01:ee:ca:04:ee:50:60:7e:3f:24:d4:c4:82:
f8:a3:ff:e3:a4:da:2d:e6:e5:e7:93:34:6a:32:4b:
82:6a:59:fb:b6:b0:f7:01:87:08:67:12:e2:ca:5a:
fd:cb:18:0e:53:05:c0:a4:1c:2c:52:2b:8e:92:c2:
dc:e5:64:6d:d6:80:5e:04:c1:8a:20:8b:fb:3a:3b:
bc:e7:82:44:96:98:0e:99:b1:40:1f:ed:05:d8:6a:
bb:8d:33:6c:ff:32:58:83:3a:d7:7e:05:97:3f:8d:
8a:2c:44:8d:90:bc:de:f3:46:bc:36:4c:59:fe:ff:
a0:19:d8:67:c4:ac:c2:01:e7:43:e1:b8:49:45:1b:
3b:de:00:9e:25:12:5b:ac:1d:02:79:ca:f5:74:ad:
31:52:15:84:8a:72:7e:be:d3:d8:94:87:f5:f7:92:
13:52:30:ee:21:33:86:49:96:39:15:08:44:55:3c:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:3B:7C:9E:BF:FD:CE:0B:FE:D1:78:C4:B4:E6:B2:63:EB:2C:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C21FF301D2011F1A6D1699DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:b1:56:99:72:4c:3d:54:66:7b:8f:bc:16:ec:18:93:fe:d4:
f6:34:ca:d4:12:9b:a5:6a:72:b7:1d:9c:92:68:f3:34:9c:d9:
bc:ba:9d:8e:8b:5c:bc:77:ab:48:f0:e5:19:52:2f:0f:03:55:
da:6f:92:15:fc:1a:42:8f:97:f4:9f:8a:49:61:75:27:0b:e8:
2a:df:4d:c4:3f:d4:de:dc:66:6d:65:22:b6:fd:59:40:b8:06:
9d:8a:06:d1:ea:ac:a5:45:83:c9:39:53:58:2e:65:a3:f3:c4:
48:e0:c2:7d:1f:61:fa:64:0e:bc:d6:4d:30:9c:8d:eb:ed:5b:
11:a7:5f:63:68:7a:ee:90:96:ed:f8:df:04:b1:1c:4b:bb:68:
83:66:31:11:e3:4f:26:bb:6e:a5:9b:1d:cd:aa:ca:0c:aa:e9:
41:46:d2:b4:7d:f1:f2:65:4b:42:d9:47:5b:f3:fb:52:14:1c:
21:48:e2:d6:b3:a1:a1:54:ce:73:a7:51:93:d3:18:14:8e:e4:
eb:94:f5:42:01:a5:56:7d:db:28:50:25:6f:40:0d:31:b9:67:
1a:18:69:92:30:f0:55:60:54:bd:be:48:ea:14:f3:6a:58:f6:
de:9f:c5:79:f6:37:1d:93:b3:83:f8:db:96:45:56:f7:ef:d7:
43:09:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:47 2026 by rpki-client