Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68526F3C210811F1B32B00EADAE4EC9C.roa
File: 68526F3C210811F1B32B00EADAE4EC9C.roa (raw, json)
Hash identifier: VUV1qBtgIuoyh6fZKa4o0OJ0kf5V3Br0W+I4V7yvoCs=
Subject key identifier: 65:91:BC:67:40:E4:62:E1:8C:9A:FB:71:A2:D1:0E:B4:2D:CE:3C:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A562
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68526F3C210811F1B32B00EADAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:19:02 +0000
ROA not before: Mon 16 Mar 2026 07:18:57 +0000
ROA not after: Thu 23 Apr 2026 07:18:57 +0000
asID: 64013
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107874 (0x1a562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:18:57 2026 GMT
Not After : Apr 23 07:18:57 2026 GMT
Subject: CN=69b7aee6-1428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:d4:3b:c9:fe:47:60:75:64:87:23:66:48:
fe:75:4b:09:b1:ee:b4:36:d1:25:4f:0a:bd:7d:c2:
3e:a8:14:34:a4:c9:9d:36:41:c4:14:10:79:e2:0d:
a5:7d:a5:fc:f9:78:d8:d8:58:ed:a5:d3:81:dd:be:
a0:8d:a7:8f:55:9a:19:06:81:a2:ce:3d:52:5e:0b:
28:e3:9c:09:2e:40:38:cd:06:21:63:d7:86:3c:8f:
09:41:ef:88:e1:42:34:09:86:c5:51:cc:8b:5b:fc:
17:b4:2c:15:29:e5:4d:f1:ce:89:2e:46:06:72:19:
5a:59:c7:2c:1c:ed:f6:52:40:9e:b0:f6:d9:52:5d:
88:5d:70:9b:b8:9e:51:4d:ec:8a:b2:6c:e9:67:9a:
a6:1d:38:3f:26:04:28:1b:fd:5d:9e:d6:07:e4:c4:
25:c8:f2:48:8a:5f:47:6f:6d:9f:a6:28:39:9a:0f:
d2:d3:1b:52:ab:2b:02:dc:18:8e:87:53:ac:6e:3c:
ec:55:7d:47:a1:54:9f:47:4d:3a:49:36:81:4b:98:
d7:53:a3:87:c2:fe:b8:bc:dd:e3:41:2f:22:8d:8a:
a3:64:01:b1:71:66:be:27:b8:a9:b9:bc:78:8f:62:
ec:6e:5b:05:f1:fb:73:57:9c:dc:89:df:03:48:1a:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:BC:67:40:E4:62:E1:8C:9A:FB:71:A2:D1:0E:B4:2D:CE:3C:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68526F3C210811F1B32B00EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:67:78:f9:e2:66:af:3c:f9:d5:30:51:f3:e2:e7:84:78:9a:
f6:7e:a6:b7:59:d4:99:5f:aa:9c:2f:0f:66:ca:79:40:9c:dc:
89:69:ba:1b:31:86:36:b0:38:5f:32:2a:8d:8c:85:67:7b:84:
a0:f4:21:3d:93:4d:3b:11:21:3e:2d:ca:1a:ee:77:5b:ae:13:
c5:af:aa:10:98:e9:19:eb:2a:e2:86:98:49:10:7b:09:c5:a4:
b3:93:b7:a4:fd:25:be:b1:41:c1:ae:ad:43:b3:54:78:ac:16:
bd:69:40:2a:c6:2b:f8:02:be:13:7d:a5:4b:03:7d:f2:07:23:
30:12:4f:f8:4d:0c:a0:7f:0d:c4:bc:3f:16:77:91:db:cd:aa:
06:9a:d4:d9:69:e6:2c:c3:14:68:8c:f1:ac:a1:09:58:53:50:
dd:d0:cd:b5:17:d0:07:38:02:78:c2:98:e9:70:9d:e8:7c:f8:
7b:82:2d:80:f4:68:c4:fb:37:6e:64:11:48:5f:fe:27:8e:5a:
89:b5:49:df:ef:42:2c:72:4f:1a:8b:e4:2a:0b:61:8c:1a:53:
57:76:e4:95:61:81:71:19:42:7a:27:f5:4c:13:0d:38:37:df:
46:e4:bc:89:c4:27:30:2d:2b:a2:9c:5e:ef:66:94:24:17:b0:
5b:d1:e6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:19 2026 by rpki-client