Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85DEF97C221011F1BD6B23E5DAE4EC9C.roa
File: 85DEF97C221011F1BD6B23E5DAE4EC9C.roa (raw, json)
Hash identifier: JQYYAwkt2o0hHy4NmkqkOvsGjyy4Oiq2bGjXQ0fyb2I=
Subject key identifier: AC:C4:01:23:29:22:D0:42:71:F5:9B:5B:27:BC:2E:3B:13:F4:A0:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85DEF97C221011F1BD6B23E5DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 14:49:39 +0000
ROA not before: Tue 17 Mar 2026 14:49:33 +0000
ROA not after: Thu 23 Apr 2026 14:49:33 +0000
asID: 138415
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107960 (0x1a5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 14:49:33 2026 GMT
Not After : Apr 23 14:49:33 2026 GMT
Subject: CN=69b96a03-e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:c9:67:a9:72:70:43:c3:e6:ef:f9:14:51:
53:ea:1a:39:a9:b9:4a:63:0b:7a:ca:86:17:7d:ea:
6d:b0:7a:57:9f:ec:64:b7:74:8b:d3:45:a7:ea:f6:
d4:98:24:d9:4a:1c:31:0e:14:44:ad:27:d4:b3:f8:
8d:88:b4:3c:0e:0e:3a:e0:e1:ba:69:06:82:14:aa:
0a:ef:ee:ca:1e:7b:a8:79:d2:8e:42:2b:cd:b4:ff:
a0:d1:8d:ae:30:17:1f:42:94:b9:bd:43:60:de:0c:
1b:0d:7c:7c:5c:f7:a4:30:f4:d7:ef:79:db:17:dc:
d8:14:12:12:e2:a5:34:7a:0c:4f:1d:f5:5d:ac:5b:
46:2d:0d:33:1c:5a:d3:7b:8f:c2:3d:1a:79:de:1b:
9f:d4:00:32:51:5f:c8:af:7d:97:45:5a:56:43:ca:
b7:53:d1:02:d1:ee:81:22:28:eb:02:46:fa:8a:0f:
ec:34:f8:ee:84:b3:3c:83:6d:15:ad:75:92:f7:fa:
1e:15:36:6b:a6:cb:a7:7a:ae:a2:9e:73:29:1c:d9:
4b:4e:24:01:8a:36:67:c3:ba:35:b9:a7:cd:12:2b:
54:0a:a9:e0:26:b3:68:0d:ae:f5:7f:b6:32:d5:ef:
5c:ea:ef:a9:03:6d:36:f0:99:f2:bf:17:38:25:43:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:01:23:29:22:D0:42:71:F5:9B:5B:27:BC:2E:3B:13:F4:A0:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85DEF97C221011F1BD6B23E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
67:c7:44:a4:94:98:ef:46:62:89:f4:ce:cd:2a:71:e7:53:8f:
f9:4e:82:8f:f0:33:82:ca:47:16:8f:bc:49:25:c0:50:ae:c2:
0e:be:ee:bc:74:d7:52:7f:ee:6e:c9:d5:0d:1a:28:47:12:bb:
e3:bc:80:0c:53:7f:b4:6a:0d:87:92:c5:ca:be:8d:eb:07:d3:
a7:f6:f9:7b:03:97:3c:ff:f6:91:9c:f0:df:0d:24:4f:64:d0:
41:69:99:e2:3b:eb:17:50:a0:8f:70:57:7b:bb:d8:b7:a4:7c:
b1:55:af:0c:f6:77:a3:d9:2f:41:39:75:96:b8:5f:98:ba:fa:
b1:df:c4:09:50:fd:d9:9a:b0:90:fc:8d:85:77:1e:f1:36:2c:
5e:69:25:88:9a:85:64:6f:42:80:46:40:76:e7:94:11:89:f8:
c0:98:e0:4e:78:fa:71:76:2f:d0:c8:d2:d0:fa:27:df:32:63:
48:09:eb:2c:ec:e3:23:eb:ee:66:e3:1b:7d:a6:36:d7:af:83:
89:8a:15:3b:30:c1:5f:58:e3:d3:21:1b:08:be:81:8a:e1:4f:
34:e7:81:c9:32:4b:f1:32:e0:1d:49:55:c3:92:ee:a2:6c:0f:
41:66:47:ca:ec:d7:70:5d:ec:8e:d4:dc:85:b3:6f:78:3b:29:
6b:01:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:05 2026 by rpki-client