Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C867C3A278911F1A881E5CEDAE4EC9C.roa
File: 9C867C3A278911F1A881E5CEDAE4EC9C.roa (raw, json)
Hash identifier: u5Aoh2zeKrAg6PdUMtAv/s8+YkCL3v64H89t0zwKkiw=
Subject key identifier: DE:AF:F7:A2:15:12:D6:95:DF:C1:92:DC:B5:19:4F:25:E0:EB:0E:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A70E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C867C3A278911F1A881E5CEDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 13:59:02 +0000
ROA not before: Tue 24 Mar 2026 13:58:56 +0000
ROA not after: Wed 08 Apr 2026 13:58:56 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108302 (0x1a70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 13:58:56 2026 GMT
Not After : Apr 8 13:58:56 2026 GMT
Subject: CN=69c298a6-4f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:d3:62:ab:90:93:0f:7b:21:62:fe:52:e6:
2d:d7:57:97:00:97:7b:07:c1:4d:6c:53:22:d4:13:
60:de:27:e6:7b:d5:10:44:a0:f8:5b:83:b6:a7:80:
c6:e1:dc:30:68:71:24:26:9e:11:39:a8:3c:a7:b1:
3b:11:31:2e:ff:c4:23:20:f7:6e:19:56:9d:19:1a:
49:de:9b:8e:6f:83:33:3b:e6:0d:42:13:de:6c:0b:
07:a8:a8:99:90:8c:ea:6b:8c:d1:f7:82:68:ab:b3:
d9:c4:93:14:51:4f:0f:93:14:9f:a0:d9:92:06:37:
41:d6:23:c2:b3:b9:91:87:76:87:45:b9:9d:2b:67:
3c:84:2f:67:c4:59:aa:7f:59:4e:38:48:9f:84:af:
7f:da:9e:bd:5c:1b:0b:af:b3:ee:67:7f:4e:f4:70:
f7:fa:fd:59:e8:17:b7:44:1c:b7:1d:fb:f5:c8:a8:
d9:20:58:c2:cb:9e:4b:7f:f9:64:37:ba:c6:0c:9d:
26:1f:89:19:4b:21:83:3e:80:86:69:e3:5c:80:b1:
84:ce:81:20:78:45:04:84:02:21:c0:da:bc:21:62:
a2:fa:2b:a6:ae:46:6c:37:76:da:d0:80:a9:7f:54:
0c:d4:7c:59:4f:4a:7d:7e:98:d6:4c:6d:be:e0:e0:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AF:F7:A2:15:12:D6:95:DF:C1:92:DC:B5:19:4F:25:E0:EB:0E:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C867C3A278911F1A881E5CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a4:76:12:b6:3a:47:b0:80:2e:7d:7b:a5:5c:39:aa:9d:44:
d0:e9:c4:92:f3:a2:ea:2b:11:10:26:b9:43:b0:72:d2:73:8b:
8e:4d:16:ca:e2:7e:3d:3b:3a:46:5c:60:2f:a2:7e:54:72:d4:
72:6d:8e:18:0d:11:4c:d4:d7:79:6f:49:91:7c:58:aa:02:c2:
b7:b2:bb:8e:e3:aa:5c:fb:e9:10:e1:0f:05:a6:ef:c0:59:9f:
b4:fd:0b:56:dc:90:99:b6:5e:fc:58:32:cd:5a:05:ba:c3:72:
8f:69:18:e6:86:c8:64:68:a2:b9:93:9d:2e:f3:11:1d:99:d5:
43:45:16:65:58:66:86:ba:a1:54:73:43:79:7a:f2:98:ca:e8:
9b:5b:e4:f4:2f:cc:3d:84:88:d1:97:c1:72:e3:2b:1f:d9:45:
db:3b:47:6a:88:28:96:09:a9:6b:6d:f7:16:9c:5d:62:7b:d0:
94:91:25:16:53:e2:52:fd:17:1c:c6:d2:3c:a0:f1:cc:90:e6:
56:f1:43:31:f5:83:df:82:33:ca:f9:b7:23:ae:5b:c8:71:bf:
92:cd:78:f4:3c:f7:71:5f:37:9a:97:23:59:4f:12:1e:fc:42:
3b:4e:23:1e:18:57:44:78:12:01:e2:8c:27:4a:31:3b:7f:7e:
ca:28:5f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:14 2026 by rpki-client