Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C23BDD61F7E11F1BC4681F0DAE4EC9C.roa
File: 6C23BDD61F7E11F1BC4681F0DAE4EC9C.roa (raw, json)
Hash identifier: +jf03W1XtkmRANZpwqSX4fiaCwhvmcdkISSZa5h1YfE=
Subject key identifier: DD:A0:E9:62:63:44:7C:47:72:C4:E5:EF:06:33:0B:F3:15:AE:7E:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A502
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C23BDD61F7E11F1BC4681F0DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 08:18:47 +0000
ROA not before: Sat 14 Mar 2026 08:18:43 +0000
ROA not after: Sun 31 May 2026 08:18:43 +0000
asID: 134548
IP address blocks: 156.240.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107778 (0x1a502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 08:18:43 2026 GMT
Not After : May 31 08:18:43 2026 GMT
Subject: CN=69b519e6-3aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:24:77:ef:7b:03:d7:0a:ca:57:10:f6:12:
4b:17:ad:bd:7f:6b:ad:fa:f6:48:bc:61:16:7d:ee:
fa:30:0d:16:97:70:7f:30:b3:7f:9a:b2:b1:9f:59:
56:d9:f3:77:1e:92:17:4b:aa:79:1c:a1:97:46:e9:
54:15:f0:04:b6:32:02:ed:ad:09:6e:e2:02:57:25:
4f:32:4f:fd:74:16:53:a2:27:f8:de:14:62:94:61:
ba:2f:0b:f8:51:e6:56:e1:ce:02:68:c9:ec:65:83:
02:d6:4c:54:46:59:2f:81:32:ff:15:cc:c9:f5:36:
65:98:f8:67:aa:d4:67:f3:2e:d4:65:ad:1a:0d:20:
eb:3f:67:30:05:cc:1c:85:6e:49:32:f7:09:57:6b:
23:be:ad:ba:6b:1f:28:07:8e:af:4c:e1:e8:e9:7e:
ba:e1:2b:e5:cf:f5:18:6f:80:b4:ea:c5:6e:8c:a5:
56:ee:23:d3:c0:ae:04:06:90:84:87:5b:76:f9:a5:
92:19:a3:65:a1:af:a9:42:99:30:a7:b6:6d:25:a5:
28:db:28:e1:82:b7:87:b0:42:bb:09:18:00:8e:4f:
3c:0c:4f:78:cc:d8:4e:b9:c0:86:88:2b:c9:f6:3b:
1e:9f:78:7a:43:2e:ed:ea:f1:87:48:df:ba:b3:3c:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:E9:62:63:44:7C:47:72:C4:E5:EF:06:33:0B:F3:15:AE:7E:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C23BDD61F7E11F1BC4681F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3b:a3:08:0a:39:5c:45:09:1d:32:c3:c6:2b:4e:6c:a3:53:
a6:d4:0a:cb:3a:11:d3:eb:2c:0c:01:76:ad:b6:68:ff:9e:4c:
ca:7a:7b:01:12:89:3d:b2:25:fb:89:56:28:3d:0b:d2:1a:78:
72:81:ce:2d:9a:57:d7:f5:3f:e8:a3:75:88:ec:8b:75:88:e6:
0a:8f:d8:ac:4c:58:b1:99:fd:11:5b:8d:e6:7c:37:7d:2d:c2:
4d:6e:91:2a:64:1a:cf:55:f4:4b:09:3d:68:53:a5:a2:09:4e:
42:97:a4:9a:22:bc:4a:59:df:59:30:d1:ca:ea:a0:28:71:5f:
98:45:69:0a:98:77:d9:75:2f:3f:e3:96:0c:e1:43:16:02:54:
ce:9d:0c:9f:59:bf:bf:c5:ff:c8:8d:98:da:70:33:89:cd:5f:
28:8e:7d:a0:71:8d:c9:5b:9f:9c:65:11:98:ea:a9:e0:4c:c4:
b9:65:ff:6d:fc:84:89:29:cc:e6:e9:b7:4b:f6:a5:47:3d:57:
7b:22:ba:d0:94:27:fc:e3:08:c6:c6:8f:d6:4b:a8:50:07:1b:
23:b8:86:14:8d:b7:ca:1c:83:a6:54:cf:0c:30:b9:c6:50:10:
63:df:1c:bf:26:3e:03:92:78:c9:57:47:10:66:ea:6e:30:9e:
56:1d:1c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:32 2026 by rpki-client