Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/529C762624CB11F1A15097C3DAE4EC9C.roa
File: 529C762624CB11F1A15097C3DAE4EC9C.roa (raw, json)
Hash identifier: U3/DPQ7cLhAVeMEAgLCdcbeEVPHFuDWuiOcmV2ln6WY=
Subject key identifier: DA:CE:53:4A:0D:C9:FB:43:34:E4:06:8C:5B:36:CB:99:CD:D1:9E:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A640
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/529C762624CB11F1A15097C3DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 02:11:51 +0000
ROA not before: Sat 21 Mar 2026 02:11:46 +0000
ROA not after: Sat 27 Mar 2027 02:11:46 +0000
asID: 136800
IP address blocks: 156.246.80.0/22 maxlen: 24
156.247.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108096 (0x1a640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 02:11:46 2026 GMT
Not After : Mar 27 02:11:46 2027 GMT
Subject: CN=69bdfe67-9742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:58:40:97:89:b7:c8:01:36:4c:26:42:82:
17:6c:75:8e:f0:f2:d6:2e:4e:7b:4b:a3:20:c6:db:
36:77:82:1c:d5:80:7b:24:f5:59:6e:81:da:40:6a:
da:4f:dd:de:94:ce:a9:2c:cd:46:cd:fa:9a:c2:20:
de:08:ad:54:52:9c:bf:80:63:37:96:3f:8e:27:08:
ef:75:92:0a:6b:c6:92:25:5c:be:82:1a:c6:bc:64:
66:2a:87:3e:28:2e:fc:78:88:87:18:e9:12:bf:30:
e9:7a:7e:a7:6f:f9:94:0c:f0:0c:09:16:7e:70:e5:
f1:2b:08:1a:4b:f7:b6:39:fa:05:58:62:39:21:1e:
41:36:a0:86:ef:a1:ed:0a:62:73:b1:13:47:91:95:
cc:3e:c1:19:23:e4:15:9e:cb:78:92:b4:a2:30:48:
36:e3:25:07:80:b5:72:d3:cd:44:56:2b:5c:ed:84:
21:ae:b2:43:11:30:9a:bc:09:4b:8d:12:3c:01:52:
26:8b:99:2d:30:79:62:aa:8d:9e:fd:f8:dc:b5:c7:
33:ab:73:e6:55:da:48:0e:d8:88:f5:fb:b1:d8:ec:
39:05:0c:c2:b4:34:28:45:7c:89:5e:ad:c8:0d:85:
bd:04:45:ed:38:bd:2d:4d:0e:5c:0d:11:9d:9f:66:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CE:53:4A:0D:C9:FB:43:34:E4:06:8C:5B:36:CB:99:CD:D1:9E:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/529C762624CB11F1A15097C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.80.0/22
156.247.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:a0:ab:1a:48:d4:69:d9:42:92:0c:33:69:bb:04:fd:de:16:
e0:6c:67:35:79:b8:94:56:a2:70:68:fd:55:55:27:c1:2d:4b:
0c:8a:79:a8:cc:5c:9a:f2:6c:32:e4:97:82:94:ff:68:bc:fe:
a3:11:21:25:8b:27:89:c3:5f:8b:94:49:67:16:9d:dc:91:db:
e5:1e:fa:e3:5a:76:c9:78:60:80:bf:35:e0:14:41:a5:c4:05:
31:1e:75:7b:67:b2:21:61:90:3d:9f:20:79:b3:a4:ee:77:3c:
e7:b9:96:35:11:e8:6e:48:70:3f:31:a8:fc:b0:1a:f4:a2:0f:
c9:bd:38:e8:4b:e8:83:eb:31:4e:dc:6c:8b:1a:a5:01:80:b8:
30:3d:f3:58:50:11:bf:1f:53:22:15:57:84:2c:74:c1:75:9e:
d8:47:c6:a9:d1:9f:77:62:b5:98:29:8f:67:5b:f0:d5:d7:95:
0c:95:97:a9:d8:0e:7f:83:b5:b4:c6:b7:9f:91:cc:60:e3:99:
28:60:04:46:db:f9:c2:87:3d:b6:4a:71:ca:cc:96:dc:42:fb:
68:c5:ef:e6:9d:b0:0c:d3:6f:f6:ef:81:42:bb:61:20:2c:79:
38:20:f9:03:5a:04:64:b3:07:68:25:91:9f:02:d7:6b:c7:c5:
58:ea:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:45 2026 by rpki-client