Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7104601E27C411F1BEFB799FDAE4EC9C.roa
File: 7104601E27C411F1BEFB799FDAE4EC9C.roa (raw, json)
Hash identifier: p4D3XbNBxTKas93Uw3W1KmEcsp1LGPXULXfPXdbMreU=
Subject key identifier: E8:AE:8E:78:E0:AB:0F:98:D1:C2:47:A4:EE:96:F1:C8:1C:7D:29:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A742
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7104601E27C411F1BEFB799FDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 21:00:09 +0000
ROA not before: Tue 24 Mar 2026 21:00:04 +0000
ROA not after: Fri 01 May 2026 21:00:04 +0000
asID: 62240
IP address blocks: 156.233.0.0/24 maxlen: 24
156.233.1.0/24 maxlen: 24
156.233.100.0/24 maxlen: 24
156.233.103.0/24 maxlen: 24
156.233.104.0/24 maxlen: 24
156.233.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108354 (0x1a742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 21:00:04 2026 GMT
Not After : May 1 21:00:04 2026 GMT
Subject: CN=69c2fb59-3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:1c:d0:81:1e:f9:d4:d8:2a:d2:c3:94:84:
5f:a2:5a:29:bc:91:41:85:89:5b:97:c1:e2:78:9f:
f1:ef:11:26:4a:38:91:8e:ae:ca:62:0f:2d:ba:da:
54:7d:c4:04:fe:ed:43:d3:81:ae:70:02:74:5e:27:
1d:14:6b:3d:94:1a:47:52:2d:53:61:d3:a4:2b:70:
88:28:95:dc:b9:57:ed:bf:9e:e3:60:1e:c2:dc:9b:
5a:77:7f:f5:c6:4b:09:9f:5b:fa:07:cc:4f:b6:d7:
ee:d9:53:ab:d3:a3:04:3a:3e:b5:43:12:91:57:38:
46:bd:04:d3:b7:18:9d:48:d7:46:3e:6b:d1:88:56:
ad:48:c7:84:e0:e2:08:5b:c7:25:08:19:4c:0e:47:
ef:c1:26:28:68:49:6a:4a:e8:dd:88:97:85:5f:7d:
b1:b2:53:f2:6d:7c:fd:20:28:ef:e9:ef:b3:1c:de:
c4:54:cd:37:c3:2d:a6:40:74:b3:40:ec:58:c1:9d:
4f:f9:33:e0:66:fd:df:4c:31:03:f1:f6:a5:71:79:
b8:54:cb:37:17:cd:a0:c2:d9:67:8c:8f:e4:d1:f9:
c4:87:f7:0a:58:e5:79:64:4c:70:f4:58:5f:42:d9:
a8:02:11:51:23:45:f8:c7:f8:9a:ab:cb:10:65:f5:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:8E:78:E0:AB:0F:98:D1:C2:47:A4:EE:96:F1:C8:1C:7D:29:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7104601E27C411F1BEFB799FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.0.0/23
156.233.100.0/24
156.233.103.0-156.233.105.255
Signature Algorithm: sha256WithRSAEncryption
49:ea:67:db:f2:9d:66:5a:ca:a1:01:1a:89:cb:21:c6:f9:35:
18:a6:82:1e:87:c5:46:c0:59:6c:33:ac:fe:82:51:fc:16:f4:
2b:62:13:65:85:0d:ef:30:b1:c2:50:08:84:a8:1d:b4:30:7f:
c2:e5:f3:5a:d8:df:d3:6b:d2:dd:d8:94:0e:95:2a:56:58:c9:
86:14:6b:81:0f:b8:54:15:c3:cb:6e:7c:04:71:15:30:08:ec:
c4:bd:36:ef:76:2a:d6:8f:83:45:85:9f:63:00:dd:41:a1:8b:
f1:ec:4b:aa:01:ca:de:23:b6:2f:e2:69:d7:bf:51:c6:78:d3:
bf:a2:90:66:6b:bc:8b:d3:3e:a3:b4:21:12:83:ff:46:1f:f7:
58:39:22:8b:51:d2:99:86:da:26:f5:f2:88:22:a4:ab:26:f5:
9f:60:6d:57:24:45:aa:fc:7e:27:0c:31:f3:e2:0a:6c:b6:97:
22:be:72:f3:02:3c:f9:07:01:73:80:e9:cf:91:f7:af:1f:81:
53:26:54:5f:cb:fa:fe:79:c1:05:14:55:5e:2c:9d:39:67:44:
e5:b9:e2:76:e9:31:58:62:3f:83:e2:c0:d2:2e:b9:32:7f:08:
90:35:a0:03:19:12:2a:80:4e:5b:d1:fc:23:12:98:6b:14:fc:
56:13:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:39 2026 by rpki-client