Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A957DABC282E11F19385E497DAE4EC9C.roa
File: A957DABC282E11F19385E497DAE4EC9C.roa (raw, json)
Hash identifier: TLCJMgN6mdp7NbSTZYMUXHIT3PwPMm8yqPQKp/Lu1qI=
Subject key identifier: A9:BB:67:8F:CE:12:2D:97:E3:23:86:E9:FD:59:26:A5:97:AA:13:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A75B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A957DABC282E11F19385E497DAE4EC9C.roa
Signing time: Wed 25 Mar 2026 09:40:30 +0000
ROA not before: Wed 25 Mar 2026 09:40:25 +0000
ROA not after: Thu 16 Apr 2026 09:40:25 +0000
asID: 154321
IP address blocks: 156.226.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108379 (0x1a75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 25 09:40:25 2026 GMT
Not After : Apr 16 09:40:25 2026 GMT
Subject: CN=69c3ad8e-0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:28:2d:fb:c0:c5:db:9c:26:e1:1e:b3:67:
75:35:85:2d:b7:55:10:75:97:27:a8:1b:42:24:d0:
fc:7f:d0:67:ac:20:bc:47:ef:31:9e:8d:86:b0:91:
4a:d1:b7:1d:5c:4c:07:d8:b5:fe:d8:b0:4c:2c:db:
49:0a:09:3f:f8:58:a2:0b:ad:95:fc:59:83:8d:12:
8a:8b:00:99:20:62:bd:9c:c6:69:9b:51:7f:2c:ad:
3e:d3:89:92:41:20:8b:c3:6b:fd:c4:87:20:bb:8d:
05:b1:ce:4e:f4:e4:f0:fb:f9:2a:c4:17:d7:b3:06:
81:11:70:07:c5:6a:e7:3e:1a:e9:dc:8a:98:01:1b:
a7:6b:09:e2:c7:b5:b7:80:aa:da:75:e2:8b:76:77:
59:6e:9a:a7:2f:b9:6c:33:e3:4e:2b:d8:95:d0:5b:
40:ed:c0:45:6e:10:3f:8b:b3:10:a4:16:e5:b0:5d:
b9:f0:a7:ff:8f:ee:c8:be:c2:3c:a8:8b:f5:b5:87:
f0:7a:c9:c1:63:9d:22:d2:19:23:3c:33:5b:11:53:
5f:88:1d:2b:98:84:4f:03:84:fc:b1:5b:14:cd:36:
31:02:31:06:0f:45:2b:04:c2:24:59:8b:27:1e:90:
7a:1b:6a:30:cf:06:0a:ea:b4:29:34:59:5c:ad:43:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BB:67:8F:CE:12:2D:97:E3:23:86:E9:FD:59:26:A5:97:AA:13:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A957DABC282E11F19385E497DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:0d:58:de:66:dd:bc:d6:ca:35:77:5d:4a:3f:b9:6a:e4:33:
fa:1a:74:3c:cb:af:8c:5b:3b:ce:6c:13:47:de:a7:2f:ca:cc:
a1:8c:c9:94:c2:98:ef:8a:be:14:32:19:c0:00:8c:a1:e1:71:
13:06:4a:32:19:48:c6:0a:5c:b0:36:0f:c1:83:b0:eb:d3:e1:
67:08:37:dc:11:36:64:19:8a:18:0f:04:5e:a0:46:d9:51:43:
a2:15:e2:c7:07:74:7b:ee:0c:c1:65:83:66:84:4d:0c:4c:48:
0d:36:42:c5:6c:30:39:33:2d:11:51:30:53:39:7f:bc:92:39:
56:38:62:f0:9f:c9:0c:31:b0:8a:94:dc:3e:d8:c2:af:f5:cb:
6c:d7:ec:fe:2d:9b:17:9a:9e:cc:51:ec:a5:cd:19:3a:38:c2:
ea:d6:2c:09:b4:ca:21:be:1f:b3:cc:37:fd:bf:89:90:9a:c0:
51:e0:c3:5a:dd:cc:62:65:a5:19:bb:e2:00:84:fc:ae:30:9a:
d2:6d:7c:ca:32:7e:9d:27:5b:66:6a:fa:b5:44:5c:bd:be:62:
9b:75:9e:54:40:ba:24:ed:4a:0e:41:c8:f7:24:0b:f2:7c:bf:
06:8e:bb:47:40:5c:50:2f:01:e0:ed:ad:d0:09:f4:f9:26:d6:
49:61:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:48 2026 by rpki-client