Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9A1B6D421E711F1BD4D287EDAE4EC9C.roa
File: A9A1B6D421E711F1BD4D287EDAE4EC9C.roa (raw, json)
Hash identifier: N0ct9rDDBpKdpVnM7cLeSE6o3VNpegr0AxEhHwNXIYw=
Subject key identifier: D7:23:81:CC:5E:35:02:88:D4:FC:A2:86:D1:F2:A5:7B:F5:EA:1F:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9A1B6D421E711F1BD4D287EDAE4EC9C.roa
Signing time: Tue 17 Mar 2026 09:57:10 +0000
ROA not before: Tue 17 Mar 2026 09:57:05 +0000
ROA not after: Sat 17 Mar 2029 09:57:05 +0000
asID: 17561
IP address blocks: 156.255.248.0/24 maxlen: 24
156.255.249.0/24 maxlen: 24
156.255.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107958 (0x1a5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 09:57:05 2026 GMT
Not After : Mar 17 09:57:05 2029 GMT
Subject: CN=69b92576-77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:76:d9:05:51:60:9a:fa:29:ee:f7:29:69:
1c:3e:4a:e3:18:87:69:10:45:5e:78:a9:18:8b:0d:
a6:f5:4d:74:44:8a:51:72:66:cf:c2:8c:ff:4d:e0:
c4:34:4d:6b:75:c0:b9:70:f2:aa:44:42:85:04:6e:
70:3a:3c:90:a0:b9:2e:e4:2c:c6:b7:8a:9e:11:71:
3a:c8:1b:10:58:dc:a5:82:88:c0:11:12:68:c9:d9:
58:45:30:19:a5:2d:48:ea:06:5b:ed:ef:c6:0f:05:
6f:a5:de:2c:3e:ae:ba:86:18:4a:05:d0:24:44:c4:
38:02:87:6c:92:19:aa:aa:4a:51:5b:75:3a:85:b0:
df:24:34:51:10:be:0e:8f:8a:02:81:8d:d5:a9:0b:
2a:0b:65:98:7a:28:2e:f6:94:4d:ac:6c:cb:1c:25:
6f:18:d2:f0:e5:e9:0b:8c:e8:a7:71:e2:3d:44:d0:
e8:8b:08:82:9f:62:14:ea:24:e9:51:a7:b2:da:21:
c4:f4:6d:ef:1c:67:81:d4:e9:9c:e1:97:16:c2:49:
e9:55:c7:a2:51:ae:ad:e8:7f:38:55:3b:4a:c4:7a:
8c:89:eb:9b:1b:72:35:30:a9:cd:a8:be:ed:bd:76:
7b:1f:4b:e6:1c:1f:ef:2c:96:59:bb:cf:a7:cf:4d:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:23:81:CC:5E:35:02:88:D4:FC:A2:86:D1:F2:A5:7B:F5:EA:1F:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9A1B6D421E711F1BD4D287EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.248.0-156.255.250.255
Signature Algorithm: sha256WithRSAEncryption
30:f1:d7:d2:86:b7:47:70:a2:ab:c2:7a:81:6d:b4:d4:db:8b:
93:d1:69:8b:93:f4:6a:0c:1e:6f:3c:5f:e5:8e:a0:02:6c:e9:
e4:64:1c:8b:aa:dd:13:08:99:4c:8e:04:40:af:38:4d:f3:04:
b5:b6:a4:89:4d:0e:67:94:17:ec:87:d4:fd:48:75:54:e1:b6:
01:31:b8:22:de:89:14:13:dd:a1:59:03:60:d9:e1:f9:3d:12:
99:d8:7e:12:96:1f:28:5e:f5:59:a9:30:cc:79:cb:23:af:13:
f8:c7:d2:07:01:7a:8f:2c:43:ed:1e:80:b8:d7:4c:c2:36:31:
9d:ff:db:3e:fe:9b:c0:ff:14:f3:f6:b2:4f:e5:0e:29:81:23:
9d:13:78:fd:9c:21:69:29:e5:1c:64:cf:4c:fa:9f:6d:33:77:
1d:e1:67:2e:4f:6e:a0:78:2f:59:19:c1:e1:10:af:71:86:f6:
e8:85:f9:e8:2c:7c:d6:29:48:f0:24:29:0c:7f:35:74:e6:14:
74:fb:6c:4c:36:b6:3c:51:4f:b4:ff:33:c0:1d:76:4a:e2:28:
bf:50:39:ca:e2:79:84:f7:e0:45:22:50:30:4e:ef:bb:0a:e8:
bc:83:8b:92:f3:1e:f8:fe:b3:43:76:e4:28:17:a1:c1:b8:05:
6a:1f:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:03 2026 by rpki-client