Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3E7577C3E6D11F188505FD4CE1D38B0.roa
File: C3E7577C3E6D11F188505FD4CE1D38B0.roa (raw, json)
Hash identifier: RL8ByGwI7Rbp8g6ausDRSSovcQ6sTFGERP88sRzS7lk=
Subject key identifier: 5C:0E:26:2C:82:09:A9:2A:35:FE:7C:0F:F7:12:67:68:55:CD:1B:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3E7577C3E6D11F188505FD4CE1D38B0.roa
Signing time: Wed 22 Apr 2026 17:07:39 +0000
ROA not before: Wed 22 Apr 2026 17:07:34 +0000
ROA not after: Tue 09 Jun 2026 17:07:34 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110153 (0x1ae49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 17:07:34 2026 GMT
Not After : Jun 9 17:07:34 2026 GMT
Subject: CN=69e9005b-151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:d9:1f:4a:34:19:d3:d8:92:74:b5:75:03:
7d:53:56:33:95:c9:1f:e9:7c:77:4f:67:6f:4b:ef:
b4:39:d1:f4:12:68:6d:0c:96:76:ea:40:29:2e:79:
27:6e:11:c7:80:e1:38:6a:7e:fb:85:57:a7:80:08:
4f:a6:81:b8:a7:bb:af:78:90:1a:5f:21:1e:67:8d:
9b:2b:ba:97:f6:d2:0b:60:76:86:57:5f:cb:9c:65:
fe:e0:9f:fa:59:8c:cf:13:49:0d:9d:b7:50:a4:31:
ee:d2:00:ed:56:f9:d7:6c:e3:3c:0f:26:1c:15:86:
38:de:d4:08:92:79:ac:fd:02:1e:6e:91:b2:4d:19:
34:48:4b:b2:a4:94:9c:10:f9:a3:a5:17:e9:09:09:
8d:ca:70:d1:a7:58:79:d1:b5:4a:15:91:03:98:0a:
4d:90:1c:e6:0c:92:6a:08:c2:f8:e1:43:b4:53:a3:
54:e2:f6:ff:ba:23:d2:3b:00:ab:47:e1:61:dc:ea:
f7:78:08:72:61:c3:05:0c:64:16:72:6a:a3:15:80:
2f:b8:64:38:90:fe:3e:03:c2:b1:5c:b0:08:56:8b:
47:ac:6f:40:a0:9d:cf:20:d5:b5:49:e7:71:59:12:
c4:95:11:ec:f5:9f:88:73:ae:ab:98:da:13:1a:df:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:26:2C:82:09:A9:2A:35:FE:7C:0F:F7:12:67:68:55:CD:1B:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3E7577C3E6D11F188505FD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
90:90:2a:b9:5b:9f:2e:2f:db:d1:3f:c5:f7:a1:60:a7:e5:dc:
8d:f8:86:9b:5b:52:53:e0:5e:66:58:9d:02:2b:3a:bf:86:4c:
f2:4b:91:cb:28:1c:14:1a:35:28:7b:66:ba:2b:ef:71:b4:92:
0b:94:bf:12:95:68:ad:fb:ae:46:a4:b3:ab:fd:89:e5:54:4a:
99:59:ca:f7:06:c9:a9:59:55:94:05:11:05:c9:fa:0c:87:6b:
74:c9:05:07:89:c9:82:b6:88:a2:23:07:83:a2:30:26:aa:df:
54:8e:ef:a0:c6:fe:d5:93:28:1b:e3:46:1e:67:2d:09:b3:c8:
10:fc:5e:f5:d7:66:33:da:8a:b2:a1:b8:e1:65:67:38:b8:4f:
4a:06:05:fd:b1:cc:88:88:d0:c0:fe:4c:51:3e:97:21:42:8c:
40:70:7a:1c:20:b1:19:47:fe:41:a3:b5:fa:e4:eb:a8:99:2a:
81:44:20:04:9d:59:b8:2e:c5:00:f6:d6:19:93:27:27:7c:2f:
52:34:b7:8b:d6:7f:57:0d:31:32:63:9e:ea:32:b5:73:98:99:
d8:cf:cd:b9:91:74:d8:cc:07:94:51:78:e8:40:7e:9a:91:f9:
66:dc:1a:f0:8a:28:73:7c:3a:66:f6:ab:31:29:e8:8a:bb:29:
6a:af:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:05 2026 by rpki-client