Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3C22CA1F9911F1ADB3FD8ADAE4EC9C.roa
File: 5D3C22CA1F9911F1ADB3FD8ADAE4EC9C.roa (raw, json)
Hash identifier: VWx/6FVSA5VAQfcic6gHGjVOCbiJk5O+cK8/UyHsPAc=
Subject key identifier: 6D:AC:0C:E2:8C:91:B9:0E:D1:C4:83:E2:B9:7C:AB:B3:3B:6A:A7:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A51E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3C22CA1F9911F1ADB3FD8ADAE4EC9C.roa
Signing time: Sat 14 Mar 2026 11:31:38 +0000
ROA not before: Sat 14 Mar 2026 11:31:34 +0000
ROA not after: Mon 20 Apr 2026 11:31:34 +0000
asID: 19318
IP address blocks: 156.233.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107806 (0x1a51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 11:31:34 2026 GMT
Not After : Apr 20 11:31:34 2026 GMT
Subject: CN=69b5471a-f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:47:6d:75:5e:0d:37:fe:15:1e:10:e1:3e:
61:c4:31:1c:e7:28:11:ee:29:38:07:c6:9b:ae:45:
1a:86:f7:ce:ed:b6:14:bb:29:e4:99:56:a8:31:20:
ec:88:30:56:ad:96:4c:0c:2b:69:db:e4:de:ba:b3:
67:3c:1e:77:68:5e:1e:59:98:e4:7e:96:4c:3e:a8:
88:4f:af:a1:16:19:68:07:05:ce:46:84:a3:39:2f:
2d:42:4d:a3:e7:b2:bf:41:6f:11:c9:7f:3d:49:ea:
b2:78:80:c5:ad:e0:c3:c7:35:65:ac:15:24:15:76:
b5:e5:a9:d0:5f:ed:67:00:2a:52:20:ae:fb:8a:ad:
47:46:8f:9d:ed:bb:c6:b8:79:5d:c6:b6:46:67:a3:
58:4c:7b:2a:a2:88:0e:cd:7a:44:11:c1:4e:47:ae:
48:21:2d:c8:7e:7a:43:da:22:74:9b:8d:22:a4:4d:
19:1e:df:78:6a:37:2b:7e:9e:0a:a0:de:18:4a:44:
a9:59:0d:9c:55:e1:b7:ee:a6:30:db:83:ec:23:3f:
6c:aa:27:d5:af:3a:84:27:dc:79:92:ac:e9:20:c0:
59:60:e1:01:50:8b:8e:d4:ee:45:91:02:e5:e6:fc:
06:40:b9:19:bc:17:54:84:8e:6a:fa:07:d6:0c:61:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:0C:E2:8C:91:B9:0E:D1:C4:83:E2:B9:7C:AB:B3:3B:6A:A7:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3C22CA1F9911F1ADB3FD8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.72.0/22
Signature Algorithm: sha256WithRSAEncryption
10:e8:e7:73:fb:37:29:7c:14:96:50:db:30:ae:91:74:6d:70:
74:06:d7:75:75:d4:6b:2c:93:39:da:0c:80:b4:f1:11:cd:05:
ff:4e:61:3b:1a:b1:48:c0:7f:8a:ca:aa:a0:7d:9f:5c:bc:ab:
3f:c9:34:1d:87:d9:5e:1e:d1:47:b0:4c:e6:6b:88:32:d9:f8:
e8:c0:57:a3:57:bb:44:34:a6:a2:b3:b9:32:a7:ca:22:d9:1b:
a4:fe:40:f7:a5:7a:17:cc:9d:ac:db:3b:27:59:cf:c6:74:29:
3f:af:8b:32:a9:21:cc:b5:01:a6:c3:2e:b5:45:10:7e:fb:f6:
c0:68:98:c4:a0:81:87:81:f6:60:88:d2:b4:27:7d:9a:a7:30:
42:46:38:1c:6a:f3:ff:3d:ba:44:82:b1:c1:0f:ec:a7:a3:41:
75:09:a4:ed:55:27:e5:c0:0c:e5:c4:31:8a:d1:1f:7a:d2:93:
14:14:79:9e:0a:74:74:63:ad:e8:b9:bf:ab:f7:ea:06:68:ad:
3b:e3:09:4c:ef:90:c4:49:b9:03:b3:11:46:2c:bb:a6:36:38:
37:f7:14:2e:1e:df:11:e5:47:33:35:8d:9c:b0:8f:c1:f7:0b:
c2:e8:8b:32:8a:8b:02:73:06:48:57:4d:44:b2:09:b6:0b:76:
51:d0:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:41 2026 by rpki-client