Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C833141C5511F1A8A3127ADAE4EC9C.roa
File: 54C833141C5511F1A8A3127ADAE4EC9C.roa (raw, json)
Hash identifier: 1wtXoQWtSHgRFS1tmaHQK5nW+jWexJuL/5iywTQ0yiQ=
Subject key identifier: B2:7F:71:FF:97:43:E2:E8:E6:72:D8:55:C7:5A:18:DB:68:AC:FD:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C833141C5511F1A8A3127ADAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:47:05 +0000
ROA not before: Tue 10 Mar 2026 07:47:00 +0000
ROA not after: Wed 18 Nov 2026 07:47:00 +0000
asID: 205512
IP address blocks: 156.227.1.0/24 maxlen: 24
156.227.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107434 (0x1a3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 07:47:00 2026 GMT
Not After : Nov 18 07:47:00 2026 GMT
Subject: CN=69afcc79-6476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:ea:de:7b:5d:10:1b:c6:90:4a:8b:2b:2b:
08:29:7f:a4:71:2c:96:84:94:92:06:c6:50:e1:26:
77:4d:6b:c6:d7:6a:35:0d:77:10:a2:a8:be:c2:ee:
d8:b2:4c:4a:57:bc:48:43:62:21:c3:b0:16:31:bb:
78:a4:f8:51:b7:3a:80:03:34:32:b5:e2:93:6c:a4:
c1:d2:3b:70:d6:60:69:98:06:3b:28:15:d4:11:17:
63:5a:25:70:48:a1:24:34:72:7e:c3:ad:76:40:7d:
4e:c5:4f:32:81:32:e6:5b:71:49:7c:7c:f3:0f:d0:
5e:c2:54:67:80:50:d1:a9:84:3a:de:84:cb:2b:9b:
7d:32:7f:84:94:c9:b7:71:3e:73:a3:91:01:7c:95:
9f:3e:09:7d:f7:28:8b:5a:72:c7:e5:e6:29:2f:bd:
8b:b9:66:bb:d9:17:94:bc:e5:ba:b4:1e:a4:72:62:
0f:4a:0d:ab:82:f5:fd:95:fb:b5:0f:9d:3c:19:08:
2d:81:59:4c:0b:cf:c0:1e:0f:9b:c8:f2:08:ba:1e:
59:0a:87:94:5d:54:b3:98:a3:9d:85:3b:27:88:82:
e4:33:ae:77:05:66:7b:1e:21:5e:91:c0:34:08:ea:
d4:da:14:05:70:5c:29:7d:d4:f6:b9:ff:11:79:ea:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:71:FF:97:43:E2:E8:E6:72:D8:55:C7:5A:18:DB:68:AC:FD:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C833141C5511F1A8A3127ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.1.0/24
156.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:08:4d:dc:bc:7b:6f:b9:9e:28:d0:19:b3:e4:2c:f6:b1:a1:
67:cf:0a:89:3c:51:41:a1:52:b9:12:0b:98:a1:73:fd:d6:9e:
43:65:ed:95:98:4a:c2:80:b8:a3:36:91:95:6f:6e:76:7c:d7:
9e:88:ec:13:62:89:cf:0a:b3:81:a2:ac:60:0b:c8:69:64:22:
39:7c:d9:6d:15:51:62:42:ba:10:86:47:aa:b8:81:ec:26:43:
71:91:eb:27:33:81:a0:92:9e:e3:99:e5:a9:29:0e:f6:97:34:
93:b6:44:22:fe:07:18:a4:62:d6:3b:9e:24:ce:a4:83:e2:16:
67:b4:9e:f0:10:dc:45:8e:b8:c3:3d:83:49:59:db:19:21:8d:
36:d3:b1:a8:17:db:ec:4c:bb:e4:ed:b9:a3:db:11:15:60:95:
6c:2f:2a:fe:8c:47:7a:c4:2b:24:37:fd:b2:ec:dc:88:92:af:
c2:f0:95:5e:af:91:90:97:51:88:f8:27:84:a7:1a:76:ef:de:
a7:2f:b1:89:00:8b:32:7a:dc:e4:4d:6e:18:61:2e:8f:f4:54:
c6:0e:4c:7c:1b:9f:b7:c2:0c:32:14:f5:8a:00:f4:d5:f6:5d:
19:6d:7b:c9:c9:cd:11:a3:1a:a2:84:24:9f:40:2b:c9:dc:80:
7a:32:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:06 2026 by rpki-client