Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E4AD978275011F18F89ED89DAE4EC9C.roa
File: 4E4AD978275011F18F89ED89DAE4EC9C.roa (raw, json)
Hash identifier: artoORmdm2kqDnkMRVvHgkqluRJN13PVX6yDwwNA8dk=
Subject key identifier: D1:01:D9:85:0B:66:B4:13:41:24:49:AD:39:72:AC:61:B0:80:F4:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E4AD978275011F18F89ED89DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 07:08:49 +0000
ROA not before: Tue 24 Mar 2026 07:08:44 +0000
ROA not after: Wed 08 Apr 2026 07:08:44 +0000
asID: 55714
IP address blocks: 156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
156.238.77.0/24 maxlen: 24
156.238.78.0/24 maxlen: 24
156.238.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108286 (0x1a6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 07:08:44 2026 GMT
Not After : Apr 8 07:08:44 2026 GMT
Subject: CN=69c23881-e884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:5e:dd:67:cd:71:b9:94:11:b7:f4:40:00:
78:b3:c2:b9:74:e5:f3:70:f4:c2:26:88:e0:2c:fd:
06:00:ce:76:ac:38:c1:f2:f3:02:50:8c:50:b5:d5:
a1:b6:31:41:7f:f9:2f:fa:b2:47:75:30:b9:12:0a:
01:05:b6:43:80:3e:36:02:c7:b4:20:05:c7:5d:ff:
aa:37:a8:95:71:63:25:97:1c:4b:a4:6a:44:b1:d6:
eb:5e:04:7e:ce:28:7d:92:5f:ce:c0:cf:92:76:8f:
04:41:f3:36:15:a5:bd:3e:a5:0a:46:e6:14:2c:4d:
3d:cf:6a:a1:c4:70:38:dd:d8:d5:8a:4e:7f:13:72:
c7:8e:5b:69:e0:bc:14:bd:e6:20:1f:83:6b:6a:41:
23:06:85:96:83:ad:8f:3f:64:9c:82:70:76:41:e7:
4c:86:35:ae:4d:c9:44:af:36:40:e2:00:80:2e:4b:
c4:92:f7:75:7b:b3:4b:6b:f7:37:52:a7:39:0d:b8:
b0:bb:aa:00:b3:3c:f9:04:79:fe:2b:9c:f2:9b:e4:
27:09:20:4a:0c:12:03:bf:e5:d3:93:f2:e7:cc:3c:
1e:c3:8c:1a:58:60:92:1b:b2:44:27:b7:36:e7:b3:
c9:3f:22:7c:b1:fd:57:0d:8b:25:8b:90:6d:06:06:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:01:D9:85:0B:66:B4:13:41:24:49:AD:39:72:AC:61:B0:80:F4:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E4AD978275011F18F89ED89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.73.0-156.238.79.255
Signature Algorithm: sha256WithRSAEncryption
5a:37:4b:62:f2:04:b4:1f:dd:d6:b6:59:8b:80:24:b8:74:f4:
f8:30:e2:ad:de:94:bf:3d:10:44:64:5d:40:9e:e8:61:56:de:
9f:b2:20:c7:8f:2b:df:a9:5b:14:12:9d:e9:a6:40:b5:c5:b5:
a6:d0:16:e8:73:df:4a:16:6d:c7:af:1a:0c:bf:79:ec:d9:4e:
12:fb:65:f0:1d:ae:ce:8e:2c:20:67:a8:40:5f:fc:44:cf:03:
cf:09:ab:0f:f4:c5:51:25:1e:fa:eb:aa:62:94:0e:5f:64:b3:
cb:92:ae:18:64:8e:91:19:64:52:48:c3:84:06:ba:60:7b:df:
b9:b2:86:a5:21:1c:88:4e:91:5e:9f:7c:bf:13:c5:bd:20:64:
94:7e:37:c1:2f:8b:a6:8d:f1:a6:67:f6:ed:d7:e6:42:06:9c:
8b:37:df:11:2e:64:68:21:3a:11:ca:9c:1f:f2:84:c6:18:c0:
6d:98:4b:05:77:b5:6e:01:89:7b:1c:29:1a:24:7c:ab:90:4e:
68:02:7c:17:fe:a5:50:52:7e:d2:02:43:26:b3:bf:9c:6a:59:
d5:de:bf:57:50:49:ee:e1:c4:26:7d:48:ef:02:bb:a1:a1:fd:
06:64:dd:f7:a3:7e:45:10:a2:be:67:d6:05:59:b0:34:85:6a:
44:a4:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:51 2026 by rpki-client