Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82B33441DE811F18D27BEB0DAE4EC9C.roa
File: C82B33441DE811F18D27BEB0DAE4EC9C.roa (raw, json)
Hash identifier: OspzwWfIB1C0TeHL8NQTRKLIpTMf4/Ty7X06AVWLcSs=
Subject key identifier: AA:12:C9:5E:34:E9:2E:5B:50:34:31:44:A9:ED:37:F7:59:7D:E2:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A452
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82B33441DE811F18D27BEB0DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 07:55:06 +0000
ROA not before: Thu 12 Mar 2026 07:55:00 +0000
ROA not after: Thu 16 Apr 2026 07:55:00 +0000
asID: 22773
IP address blocks: 156.243.108.0/24 maxlen: 24
156.243.109.0/24 maxlen: 24
156.243.110.0/24 maxlen: 24
156.243.196.0/24 maxlen: 24
156.243.197.0/24 maxlen: 24
156.243.198.0/24 maxlen: 24
156.243.199.0/24 maxlen: 24
156.243.200.0/24 maxlen: 24
156.243.201.0/24 maxlen: 24
156.243.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107602 (0x1a452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 07:55:00 2026 GMT
Not After : Apr 16 07:55:00 2026 GMT
Subject: CN=69b2715a-8b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:8a:6b:60:4b:32:37:ac:fe:2c:4a:17:64:
83:98:5d:49:0d:82:53:16:2b:a5:0b:bb:f8:d4:ac:
af:59:bd:73:6f:3e:b9:b0:44:57:89:52:e5:e2:c2:
2d:c7:3b:a9:31:ec:17:d0:c0:08:88:9a:53:6e:01:
bf:6d:db:9e:ef:fe:50:df:f0:57:31:3d:96:ff:ee:
15:df:ca:f9:7e:3d:b6:77:1e:2f:ee:82:08:3b:01:
a1:68:83:70:ad:20:73:b2:fc:6c:7b:e1:0f:11:45:
d4:8c:9e:72:e6:51:29:dd:64:15:a1:19:49:f7:61:
e9:f0:f7:bc:f9:ba:38:ec:ef:bc:f6:0c:a6:af:61:
ec:37:8c:74:9a:d5:3c:e7:c2:3e:23:ce:23:b6:1e:
a9:d5:a9:29:a5:21:f8:cc:ff:c3:5f:66:29:ba:ad:
37:2a:0e:f2:c2:3d:da:9a:dd:c0:5c:57:e8:30:40:
5c:b4:46:82:5e:be:39:00:8a:44:01:94:e5:9e:28:
fc:dd:2f:7e:df:51:4f:81:ee:37:a5:b4:0b:62:88:
01:85:71:ea:d2:80:55:87:e3:64:4a:30:e4:08:6a:
54:de:1e:91:e3:62:85:91:23:b1:91:16:c8:e9:62:
2b:dd:bf:97:91:82:7e:10:0d:36:c0:95:c9:2e:38:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:12:C9:5E:34:E9:2E:5B:50:34:31:44:A9:ED:37:F7:59:7D:E2:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82B33441DE811F18D27BEB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.108.0-156.243.110.255
156.243.196.0-156.243.202.255
Signature Algorithm: sha256WithRSAEncryption
ba:e2:ba:b3:d7:a6:0d:fa:4e:32:68:75:73:f2:bd:3e:51:4c:
5a:a3:fb:8d:ce:ff:c2:39:f5:ee:3a:5e:1b:4c:41:db:38:2e:
1e:b2:5d:cc:84:61:c7:38:69:c8:e2:83:37:ab:a2:5d:8a:00:
8f:5e:c4:8b:b6:9c:51:51:cc:b5:f5:e3:a3:05:9d:1a:65:cc:
e7:ab:05:4d:53:9a:82:88:80:0f:77:c3:8e:05:a0:24:a7:f5:
70:f2:0c:38:c5:c6:c2:43:77:fd:8e:6f:1d:81:d8:ef:d6:2f:
c5:68:25:3c:c9:b3:97:8f:16:2d:02:39:32:6e:15:0a:e2:44:
7f:66:4e:36:3c:9e:da:dd:a5:4a:d2:88:ff:51:3c:da:b0:b0:
55:15:84:99:2a:a6:55:c3:79:47:62:4c:53:00:a6:1d:c6:35:
4e:71:76:ad:10:8a:47:a6:b8:b9:e8:62:f3:59:f7:4c:89:16:
8e:98:f3:a5:6c:74:98:27:d8:1a:a9:d1:88:6b:b3:0a:c3:2c:
6f:96:ec:8c:31:7e:04:e4:64:64:a6:7a:b3:e0:c1:a7:2e:99:
6e:04:4f:a4:0b:70:f5:5d:22:2d:e8:7f:28:f3:f6:3d:29:ac:
58:65:25:99:e7:b2:31:8d:71:bc:1f:9c:fd:a2:c8:55:80:0d:
87:3c:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:23 2026 by rpki-client