Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB202F641D2B11F187D777DDDAE4EC9C.roa
File: BB202F641D2B11F187D777DDDAE4EC9C.roa (raw, json)
Hash identifier: 4EK8RzBuAmT4aQbv8IIPUhp3rpE8QQNjph1P2ZN2EsA=
Subject key identifier: 54:FD:B9:1B:E1:E9:4D:EA:91:79:01:BD:3E:EE:27:05:78:FE:B2:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A42B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB202F641D2B11F187D777DDDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 09:21:49 +0000
ROA not before: Wed 11 Mar 2026 09:21:43 +0000
ROA not after: Thu 25 Jun 2026 09:21:43 +0000
asID: 16437
IP address blocks: 156.236.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107563 (0x1a42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 09:21:43 2026 GMT
Not After : Jun 25 09:21:43 2026 GMT
Subject: CN=69b1342d-7ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:10:08:dc:26:fa:a3:fd:b3:98:67:ae:3b:
fd:02:16:8c:ad:c4:ec:d9:cd:a7:c8:d4:f8:b7:7f:
62:05:b5:55:83:83:2b:10:67:44:ee:14:16:6d:b4:
4d:5c:39:9e:79:b3:86:b2:59:be:46:f3:18:6a:40:
7c:63:df:0b:b5:d1:a3:02:a3:84:3e:ff:a1:e1:35:
fc:e3:d5:f9:fd:61:a3:f7:58:ad:53:5d:98:74:30:
74:e9:fa:88:82:00:29:78:d8:d8:6a:0a:cb:4a:ab:
27:59:4d:f4:a1:70:12:cc:3f:62:51:b5:b3:9a:c4:
4a:75:09:21:5c:db:66:d9:d2:b8:a0:60:cb:33:b1:
89:8f:f8:d7:7d:77:ce:c5:be:c2:aa:d6:44:47:2d:
aa:bf:14:05:44:d9:f4:71:28:c1:1b:b9:7b:49:fc:
f9:16:94:30:22:90:f0:77:de:5e:21:1e:d1:d1:d5:
7b:23:d1:82:4e:0c:ec:68:bf:04:19:eb:10:35:d6:
ad:43:75:fc:c5:d8:ae:9f:03:ba:2f:89:56:68:52:
81:08:c0:a9:03:28:27:20:7d:58:93:ec:83:56:3c:
67:a5:f4:cb:48:3a:3c:99:0d:25:79:a8:61:62:f0:
fc:12:fd:e6:d0:35:0c:f8:29:eb:25:13:05:b6:75:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:B9:1B:E1:E9:4D:EA:91:79:01:BD:3E:EE:27:05:78:FE:B2:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB202F641D2B11F187D777DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:aa:4c:a9:8a:73:6d:c0:8b:56:98:57:85:46:94:e0:0e:a7:
15:63:f7:b9:13:47:7c:45:91:69:1b:96:9f:6d:30:1b:b9:a4:
c7:95:66:e8:f2:40:ce:91:3c:cb:69:ef:c2:18:c5:cf:5b:eb:
c3:f4:2d:34:26:47:1f:c5:31:8b:c4:f9:77:b3:cd:1c:00:98:
e6:5a:29:18:79:7f:1c:29:4d:70:fb:2b:a1:67:de:f5:2e:20:
37:17:df:df:47:f9:d2:f3:ad:9a:f0:a7:7d:45:67:5c:a1:e2:
65:aa:b1:bb:06:e1:03:7a:37:96:5a:f8:4d:d3:93:53:03:44:
9f:a4:33:01:97:1f:10:66:f1:4b:c5:e4:11:84:8d:dc:76:dd:
37:3c:4f:65:83:f9:c1:fc:6c:5a:5b:f8:e3:3c:e8:73:15:1c:
75:47:fe:b6:e8:3a:ec:84:28:3a:d9:a6:9f:97:dc:f0:55:a7:
86:d7:87:dc:65:ed:1d:fd:87:26:49:99:1a:b0:24:68:26:38:
8f:42:12:4f:4a:0f:48:82:3e:50:16:86:10:34:f4:b9:08:4f:
8f:c6:0b:6a:9a:ce:55:9b:6a:f4:50:3d:ad:ac:11:57:29:41:
ff:fd:75:c0:00:2f:50:13:b1:9d:d9:67:6f:7d:06:b8:a6:45:
61:03:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:23 2026 by rpki-client