Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/970EDA0824BA11F195758DDFDAE4EC9C.roa
File: 970EDA0824BA11F195758DDFDAE4EC9C.roa (raw, json)
Hash identifier: qbMFs4tZ384xJocPqa7Xfz+bgNsYMEu5ceEh1c1w0EA=
Subject key identifier: 32:7C:29:26:64:D5:BF:C6:B7:AC:62:C2:DD:B6:09:E5:0E:02:B2:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A639
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/970EDA0824BA11F195758DDFDAE4EC9C.roa
Signing time: Sat 21 Mar 2026 00:12:05 +0000
ROA not before: Sat 21 Mar 2026 00:00:59 +0000
ROA not after: Thu 02 Apr 2026 00:00:59 +0000
asID: 269984
IP address blocks: 156.255.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108089 (0x1a639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 00:00:59 2026 GMT
Not After : Apr 2 00:00:59 2026 GMT
Subject: CN=69bde255-5854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:62:e3:55:70:39:d7:ed:c9:a1:a4:80:5c:
06:38:f4:a1:24:4e:74:a4:2b:93:5f:0e:f6:a3:57:
43:2c:af:b7:48:b5:8f:84:98:e7:1a:3c:54:1c:5e:
59:40:f4:ae:c5:87:66:a7:17:6e:67:c1:8b:f2:64:
f3:31:ec:2b:02:bf:7f:b7:f4:27:cf:cf:7c:29:2a:
d3:a6:bc:a6:4b:6f:25:9c:79:6c:f0:19:96:78:16:
cc:e0:e9:d5:cc:99:14:c5:b9:d3:33:cc:2c:9c:5f:
12:cf:4b:e9:c1:83:b8:e3:59:18:6a:06:8c:08:81:
ac:3d:72:ce:81:05:07:ca:4a:e0:0c:6f:7e:bb:23:
a0:8c:1f:45:37:04:e2:24:ef:c5:61:99:51:46:aa:
69:2e:e6:df:b0:c1:1b:fd:0f:fd:9b:1b:d2:d0:dc:
98:ae:7e:b4:95:1b:0c:f8:61:87:44:5d:78:b6:2d:
f0:c3:fc:07:9a:09:42:e0:dd:4e:f6:3f:8e:8d:b0:
5b:bb:85:c5:ed:7f:c6:36:17:b2:e4:0f:d8:26:10:
d2:ef:8c:b3:8c:37:21:1a:fc:bb:2e:60:f7:0f:d7:
b2:64:2e:a2:58:dd:c3:ac:72:30:62:95:2b:80:5a:
a1:30:29:b8:70:89:42:dc:93:77:9d:ea:00:de:9d:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7C:29:26:64:D5:BF:C6:B7:AC:62:C2:DD:B6:09:E5:0E:02:B2:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/970EDA0824BA11F195758DDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:89:98:57:39:1d:bd:05:be:52:9e:c0:a0:f9:32:88:73:d1:
ee:6e:44:fe:d4:00:9f:33:b2:29:6d:17:95:91:13:32:cd:0e:
44:8b:a9:0c:d4:59:8c:cd:3a:ad:a2:52:cb:4f:0d:86:f2:c6:
e2:0b:56:e6:5c:54:ca:5a:df:fc:48:c6:72:85:51:37:5f:0b:
2f:e0:12:fe:f7:94:5e:8c:a4:2b:ab:89:f9:d3:b2:94:2c:9c:
cc:94:38:84:84:28:4d:c3:74:74:4b:68:61:83:4b:a5:7e:ab:
00:3e:b9:85:c6:e8:64:2a:6a:a5:d2:d4:f5:a4:85:c8:22:36:
15:14:5f:e0:0d:72:b1:39:22:e2:31:0e:8e:f5:bf:02:65:8b:
87:6b:7a:65:b4:c2:20:5e:e5:ba:77:99:73:47:90:18:b0:3e:
e8:02:f4:60:ab:9b:39:69:03:b8:2e:54:a6:55:24:b1:93:d7:
0b:f8:9f:0c:72:80:b0:58:88:45:68:4c:d5:66:ad:72:d9:32:
ed:23:fe:25:4d:f7:f5:59:d4:27:07:07:a9:f1:f4:58:2b:9b:
78:7b:33:01:59:a5:cf:0a:40:a9:6c:e2:06:84:c7:d1:35:41:
59:08:42:2b:49:6e:c7:01:7c:cd:5e:57:73:25:9b:4b:df:1b:
30:52:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:54 2026 by rpki-client