Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3499EE61D3111F192A56480DAE4EC9C.roa
File: B3499EE61D3111F192A56480DAE4EC9C.roa (raw, json)
Hash identifier: 7Bex5g4dRcAX5P3Uvsdw09jp+wtDjzO5d9FABgZe6eg=
Subject key identifier: CD:99:86:23:A3:D6:64:C9:CD:0C:61:1C:D9:D5:B1:1F:08:8A:3F:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A439
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3499EE61D3111F192A56480DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 10:04:32 +0000
ROA not before: Wed 11 Mar 2026 10:04:28 +0000
ROA not after: Sun 11 Mar 2029 10:04:28 +0000
asID: 17561
IP address blocks: 156.242.40.0/24 maxlen: 24
156.242.41.0/24 maxlen: 24
156.242.42.0/24 maxlen: 24
156.242.43.0/24 maxlen: 24
156.242.44.0/24 maxlen: 24
156.242.45.0/24 maxlen: 24
156.242.46.0/24 maxlen: 24
156.242.47.0/24 maxlen: 24
156.242.51.0/24 maxlen: 24
156.249.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107577 (0x1a439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 10:04:28 2026 GMT
Not After : Mar 11 10:04:28 2029 GMT
Subject: CN=69b13e30-9d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:42:ab:20:6b:c9:fa:9a:9d:06:35:e1:e1:
e8:ce:c9:96:15:e0:35:9f:fa:9e:70:c7:90:7e:ac:
09:98:a6:f9:c1:5b:dd:64:b0:b8:01:48:20:9f:84:
5f:fb:e8:c1:16:08:93:f3:02:c3:5f:73:4c:77:f2:
64:f1:ce:31:4b:00:58:4b:75:d7:01:02:b5:92:7e:
4e:e2:fc:51:40:88:4d:20:f2:6a:f7:10:23:d5:97:
4e:7b:46:16:ed:01:ed:91:1c:0f:13:19:4c:db:6e:
ae:fa:6d:fb:5d:72:d4:e9:98:6e:18:79:25:84:cf:
a8:c4:82:59:18:70:db:f8:68:95:41:7c:c9:4b:99:
f9:c3:78:32:e1:f7:9e:82:ef:53:9e:ba:72:31:97:
09:b4:d7:ed:2c:78:2a:18:3b:e0:5d:c7:8e:94:1d:
36:a9:08:b7:ca:28:3c:7a:9a:43:aa:82:58:e6:32:
8f:45:80:ae:a9:18:f3:6a:52:c0:39:be:92:a9:9f:
9e:ba:1d:bf:40:ff:84:4b:94:56:4e:da:86:cb:6c:
76:e2:bb:60:12:fa:a3:b2:61:66:1f:21:34:59:74:
20:5c:bb:d7:54:c4:72:50:f7:f0:e8:e1:9d:3b:a5:
c1:65:10:6f:a1:fc:3b:c0:d5:0f:2e:a1:75:03:3c:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:99:86:23:A3:D6:64:C9:CD:0C:61:1C:D9:D5:B1:1F:08:8A:3F:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3499EE61D3111F192A56480DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.40.0/21
156.242.51.0/24
156.249.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6e:f4:1d:73:d9:1b:21:7a:86:11:14:3a:de:9f:50:46:d2:
b3:41:cb:ed:ab:50:35:f3:10:27:a0:16:10:b8:4f:cc:78:86:
f7:ee:6d:c2:0c:b1:5e:74:53:14:44:70:29:f9:d2:19:7c:9a:
8d:15:1f:45:33:ae:e0:ca:57:e6:f3:30:bd:15:51:c3:51:8f:
26:63:b7:36:71:c8:85:c0:68:2b:be:36:39:1c:89:2d:99:35:
19:c7:57:4a:0c:06:83:c5:e4:09:97:0b:9c:03:51:65:a7:ce:
01:eb:1e:88:55:70:e6:19:a5:fc:8e:75:dc:c7:f2:23:88:a5:
19:74:45:1d:fa:10:84:38:24:13:8a:82:ed:83:c1:ab:a9:69:
5b:9e:50:46:08:b6:7a:c9:ba:f5:2b:f3:52:bd:2d:96:0e:46:
7f:69:cc:d7:8d:33:81:7a:1c:d5:d5:55:ae:53:9c:5a:2e:4e:
17:ea:b8:c1:0e:1a:77:a3:f3:a3:f7:df:23:2b:03:98:87:e0:
50:24:49:3c:39:25:3f:0a:5e:81:d2:2d:b6:8e:8e:48:9d:41:
92:38:14:38:26:db:fa:53:a1:d6:da:05:2c:46:2d:66:5e:0a:
bc:d8:f3:8b:13:b9:2b:6e:94:c0:44:8e:09:c3:07:ef:7c:55:
79:75:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:57 2026 by rpki-client