Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33A48A01DF111F1A28089E1DAE4EC9C.roa
File: A33A48A01DF111F1A28089E1DAE4EC9C.roa (raw, json)
Hash identifier: rvBqyzuIF49S5jMTCdnGHYy5bhTuhmwS5f0rH0Nu/78=
Subject key identifier: 02:2A:65:72:27:EA:8A:6E:D3:D2:BB:6E:5E:F0:2A:3F:9B:2D:DF:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A46E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33A48A01DF111F1A28089E1DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 08:58:29 +0000
ROA not before: Thu 12 Mar 2026 08:58:25 +0000
ROA not after: Thu 16 Apr 2026 08:58:25 +0000
asID: 22773
IP address blocks: 156.242.19.0/24 maxlen: 24
156.242.234.0/24 maxlen: 24
156.242.235.0/24 maxlen: 24
156.242.236.0/24 maxlen: 24
156.242.237.0/24 maxlen: 24
156.242.238.0/24 maxlen: 24
156.242.239.0/24 maxlen: 24
156.242.240.0/24 maxlen: 24
156.243.115.0/24 maxlen: 24
156.243.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107630 (0x1a46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 08:58:25 2026 GMT
Not After : Apr 16 08:58:25 2026 GMT
Subject: CN=69b28035-50ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:67:ab:56:76:6d:c3:31:dd:04:d0:2f:6e:
07:9b:cc:8f:9d:a2:12:73:bc:cb:05:76:42:40:e8:
48:04:9a:35:73:6f:05:e4:dc:b9:60:2d:00:43:fe:
0a:98:f5:14:55:30:b7:fb:80:25:24:85:91:27:28:
54:5a:0a:a4:f1:be:65:4b:b0:df:31:3d:3f:20:0b:
ea:52:10:6c:b6:76:7a:ea:a9:10:0f:3b:11:6d:af:
99:90:19:12:3b:d8:b9:bd:59:f9:a3:c0:2f:78:3f:
60:a4:d2:5f:42:38:2a:cb:ff:91:c4:73:b3:78:6d:
14:9e:8c:0e:26:3e:74:d2:2f:4e:5e:29:0e:28:45:
7a:15:06:62:d4:97:4e:a7:8a:de:df:85:f5:c9:41:
06:b6:03:0d:db:dc:17:89:2c:63:0e:c6:24:73:bc:
4e:26:51:c7:6e:09:04:21:79:70:ac:17:5c:03:28:
1b:33:ce:c1:a5:e5:b5:40:57:52:56:d4:53:99:96:
a3:a1:8e:16:85:62:eb:27:68:fb:11:56:d1:bf:76:
27:23:ff:e3:fc:c5:08:1d:5a:76:08:17:8c:b3:70:
9e:4c:65:4f:3a:84:c9:85:ce:fa:d9:a7:fb:c2:6c:
82:09:19:1a:a9:63:0b:51:97:2c:01:66:3f:6e:e2:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:65:72:27:EA:8A:6E:D3:D2:BB:6E:5E:F0:2A:3F:9B:2D:DF:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33A48A01DF111F1A28089E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.19.0/24
156.242.234.0-156.242.240.255
156.243.115.0/24
156.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d4:ba:6b:90:a7:1d:17:10:01:5a:e9:b3:1c:76:52:ea:e9:
40:7b:1c:c5:48:2f:66:d7:53:12:ef:73:df:2d:ff:6a:b2:ff:
64:40:d3:bb:a5:03:2c:aa:b2:a6:f6:9d:20:20:bb:0f:04:59:
9c:e3:82:9e:75:eb:b5:22:04:8e:dd:6e:eb:8b:4a:d2:7d:8b:
9a:8e:0f:66:c8:64:10:46:52:2d:4e:33:75:b2:b8:af:59:72:
99:df:a1:b9:43:96:3a:1e:0d:48:bb:72:2f:28:23:6f:88:66:
37:85:63:ad:cc:13:93:4f:c4:25:16:1a:2a:73:8f:93:1f:99:
0e:23:87:ac:12:f4:a5:06:0d:fc:f1:af:ab:39:ef:f5:90:a4:
48:f6:d1:10:34:07:5d:2a:01:ff:a8:50:df:fd:91:8c:da:d3:
aa:f9:a7:f7:ca:67:86:87:b3:2b:3d:ef:95:95:59:63:71:6b:
3f:21:77:b6:5a:2a:bc:15:aa:bb:56:9c:25:11:f7:72:02:6c:
59:b3:e7:d6:4d:13:bd:0b:b6:39:02:26:51:df:a9:6b:84:f3:
ac:1a:0b:07:9d:59:8f:49:e1:78:8e:d8:77:4d:21:7d:53:dc:
bc:63:45:5f:dc:5e:8a:8e:40:95:44:c2:1a:3d:d4:37:ad:c9:
9a:76:35:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:58 2026 by rpki-client