Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CC4797627B611F1B2CF02CEDAE4EC9C.roa
File: 5CC4797627B611F1B2CF02CEDAE4EC9C.roa (raw, json)
Hash identifier: 2G16MduxtWU6uVoG1TGqO2UlOICETokgXWnmFtJbYiI=
Subject key identifier: D0:E9:0D:01:CA:C0:DF:D5:68:57:95:1F:0D:D5:FA:5F:7A:F0:47:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A722
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CC4797627B611F1B2CF02CEDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 19:19:22 +0000
ROA not before: Tue 24 Mar 2026 19:19:17 +0000
ROA not after: Thu 30 Apr 2026 19:19:17 +0000
asID: 35916
IP address blocks: 156.225.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108322 (0x1a722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 19:19:17 2026 GMT
Not After : Apr 30 19:19:17 2026 GMT
Subject: CN=69c2e3ba-f7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:fa:aa:dd:54:75:9f:55:ae:cf:23:13:9c:
7d:91:c3:69:f2:8c:8e:64:d6:89:25:e0:26:ed:3a:
87:e3:62:10:7d:19:3f:da:ac:bd:25:aa:d7:5e:42:
d5:c2:c3:41:f0:d4:b2:c5:36:e4:00:08:e2:02:02:
31:32:4e:65:b5:40:90:95:50:07:49:a0:34:1d:10:
db:7d:7e:40:a4:17:72:31:13:60:61:7b:50:0a:d4:
34:1d:98:6d:39:f4:ce:e5:f4:f7:ca:25:b6:a5:f7:
3c:57:c5:1d:20:09:e6:a8:56:83:cd:a3:6e:ed:8a:
d0:ff:65:3d:80:3d:48:d6:1b:50:5a:20:85:00:05:
64:85:94:67:f8:5d:be:99:3b:04:e1:ed:6f:92:61:
b5:3e:1d:da:f7:ff:a4:77:99:71:9e:91:a5:25:d5:
5b:95:d2:21:8b:6f:95:cb:f7:1b:20:d1:46:57:d0:
1f:2f:bc:7e:9f:04:83:a6:1f:35:2d:e2:89:d3:9c:
89:d9:92:01:c4:52:c7:38:7d:bc:4e:82:22:bf:54:
72:26:af:39:f6:72:ea:6d:3c:fc:73:ca:8e:46:6e:
74:99:3d:45:91:62:00:15:34:ef:be:88:4e:6c:d4:
04:f0:3e:eb:bf:06:bc:1e:b5:20:86:b9:b2:bd:ac:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:0D:01:CA:C0:DF:D5:68:57:95:1F:0D:D5:FA:5F:7A:F0:47:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CC4797627B611F1B2CF02CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.192.0/18
Signature Algorithm: sha256WithRSAEncryption
84:84:fd:62:de:99:c4:88:7c:0c:fa:64:a7:f9:2c:e8:43:1b:
5f:e5:90:76:7b:cd:dd:34:5d:86:72:2f:e5:21:2b:7e:56:c6:
00:38:de:17:8a:1a:98:18:ab:f2:46:71:a9:0f:e6:fd:43:a5:
c2:42:ff:a9:b9:ef:8f:2f:8d:29:8c:7a:44:19:11:de:65:0f:
6a:70:d6:02:99:86:e0:77:a8:11:90:08:21:08:fb:97:b5:7e:
a3:75:e8:24:20:8d:a7:90:41:91:0b:c8:27:35:eb:61:14:73:
1a:19:ff:04:20:96:d6:95:0e:dc:58:c1:7a:fc:13:b4:a3:c4:
6c:56:f1:1f:be:bf:d2:e0:98:df:be:05:71:01:98:96:f1:2f:
29:fc:b2:81:3b:73:9c:5d:41:47:ac:9a:79:1a:52:52:bd:f3:
5c:67:e3:fd:d3:fe:d1:3d:52:73:5c:89:30:d7:c6:2e:e9:42:
3f:79:98:68:2c:96:93:72:ac:ce:33:b4:dd:a4:e4:27:4c:aa:
bf:c3:4c:71:8e:34:b5:6c:b5:15:b9:65:d8:d0:b5:c8:67:19:
0e:cf:07:c3:44:2c:66:5b:0d:2c:a6:53:47:4e:b5:67:b7:b3:
3b:4f:fe:70:03:1c:2d:bd:18:f3:cb:24:33:e7:5a:02:4b:2d:
aa:7b:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:37 2026 by rpki-client