Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C857CA78204D11F1BFFCF2AADAE4EC9C.roa
File: C857CA78204D11F1BFFCF2AADAE4EC9C.roa (raw, json)
Hash identifier: HK4dKoG/cHJ4uPeKHnjGGplleBKqcGNhF0+oojg7PeQ=
Subject key identifier: 8E:B8:55:D4:34:4A:83:45:9F:BD:3F:1F:74:F7:C6:67:3B:A2:CC:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A53B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C857CA78204D11F1BFFCF2AADAE4EC9C.roa
Signing time: Sun 15 Mar 2026 09:03:07 +0000
ROA not before: Sun 15 Mar 2026 09:03:01 +0000
ROA not after: Mon 22 Mar 2027 09:03:01 +0000
asID: 13335
IP address blocks: 156.238.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107835 (0x1a53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:03:01 2026 GMT
Not After : Mar 22 09:03:01 2027 GMT
Subject: CN=69b675cb-0f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:1a:cf:52:61:b2:f2:34:08:98:fb:c2:a8:
df:72:70:50:9e:2c:c4:1e:89:05:68:99:34:07:f0:
a9:fb:4c:88:1d:69:4d:48:78:59:38:aa:b9:05:7b:
97:99:84:a1:88:8c:7e:5d:76:3b:87:2d:f0:bf:d6:
d3:ac:4c:1d:3a:00:a4:b1:e0:38:f1:5e:b4:7e:12:
67:c7:ff:41:e0:2f:7e:b6:a3:60:d7:9f:42:d2:a2:
4b:a4:3d:de:11:24:bc:2c:07:5e:e1:3e:85:66:60:
e0:99:1c:9a:9a:ab:fd:1b:c3:99:a9:72:7d:6d:2d:
29:60:2d:2f:fe:ad:24:68:24:ca:7d:44:66:4f:82:
bd:ee:92:55:b3:0d:3c:a5:54:48:23:f8:a9:2c:16:
51:e8:ed:a7:76:c2:7b:d5:1d:e2:26:8b:ae:f1:2b:
0e:f0:7d:2c:d3:71:f2:25:12:be:52:2b:58:69:d5:
c0:db:64:fd:d8:5b:17:1e:7c:72:56:84:b8:94:f1:
e5:82:3f:00:45:c7:60:b0:21:30:15:0c:49:d5:40:
3e:52:43:a8:20:50:12:6d:0f:54:f5:71:bf:84:b4:
b9:0a:15:25:19:58:40:ae:e6:a7:82:25:9b:45:a0:
e3:6c:36:e5:0f:a8:52:1c:f0:94:7a:87:63:78:39:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:55:D4:34:4A:83:45:9F:BD:3F:1F:74:F7:C6:67:3B:A2:CC:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C857CA78204D11F1BFFCF2AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bf:a6:31:c5:fa:ac:fe:1c:17:75:87:73:eb:8f:a2:bc:09:
6d:3b:8c:e2:be:c4:35:f7:c3:c5:1f:32:9c:37:43:10:c3:fd:
03:62:d5:86:fa:9c:00:71:de:cd:ab:35:4f:d0:c7:2f:bc:29:
61:e2:1d:af:b5:af:34:49:b5:a2:15:a3:6d:68:a8:db:d3:30:
d2:ee:01:1f:45:b9:c9:6e:6a:cd:55:cd:de:2b:47:46:6f:af:
48:c6:3e:ba:d3:8c:e3:29:17:08:bb:f6:4a:39:5f:b6:07:71:
ce:a5:9a:94:4d:9b:d5:fb:af:15:61:1f:af:e6:6b:6a:19:c3:
37:0b:ab:d6:0c:65:4f:61:69:f6:a4:06:e4:1b:8b:d1:dc:86:
92:60:0c:41:53:da:cd:f3:6b:79:ac:64:f7:e0:43:26:a4:64:
f6:e7:20:b3:6c:5a:5e:5b:66:cb:d4:c7:a6:b3:45:e6:9e:92:
78:27:8c:00:65:0e:fd:80:42:70:76:5b:0d:f9:76:b4:03:0f:
e4:0e:0a:b5:8a:92:f5:70:ad:1c:65:28:84:09:7d:54:30:d6:
56:88:85:a1:0d:20:b7:fa:4b:3c:f2:13:ca:d8:f0:33:d6:b9:
31:68:5a:f4:57:7c:ae:10:2a:c1:f7:52:7e:53:47:9b:a1:b0:
b5:1c:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:31 2026 by rpki-client