Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAC0BB3622BD11F19E4414DFDAE4EC9C.roa
File: CAC0BB3622BD11F19E4414DFDAE4EC9C.roa (raw, json)
Hash identifier: Ucho6frGkAy5MYGJ71ZJc0bqZV60lgmnzT/jxVoNO5Q=
Subject key identifier: 4A:DF:E2:DC:EA:F8:3B:BA:5D:3F:19:B7:33:70:6A:0F:06:E0:3D:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAC0BB3622BD11F19E4414DFDAE4EC9C.roa
Signing time: Wed 18 Mar 2026 11:29:57 +0000
ROA not before: Wed 18 Mar 2026 11:29:52 +0000
ROA not after: Sat 28 Mar 2026 11:29:52 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
156.238.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107991 (0x1a5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 18 11:29:52 2026 GMT
Not After : Mar 28 11:29:52 2026 GMT
Subject: CN=69ba8cb5-78e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:c5:5b:3a:7e:11:76:f7:72:66:84:84:15:
15:b9:40:56:98:55:94:9f:29:d6:37:29:2b:34:fc:
f1:26:58:71:7e:7f:8d:b1:e0:7b:77:7d:c8:36:a1:
ba:7c:65:14:24:17:62:a3:0f:a9:d2:05:a8:30:e3:
ca:c0:96:5d:f6:55:22:fd:5b:97:b3:98:db:03:dd:
ca:eb:62:81:6b:cf:cb:04:d4:4e:85:d6:db:5a:e4:
0a:d8:cf:0a:ad:0c:8b:b0:e4:fb:56:34:0f:55:c8:
bd:a5:a2:a4:27:1a:a3:08:f6:00:88:c2:12:56:ce:
e5:6b:46:68:c4:aa:c1:2a:ff:45:18:f3:5b:b2:d6:
dd:f5:b1:f6:eb:22:07:ff:44:d4:62:a8:71:6a:e3:
02:b1:61:bb:4c:92:20:83:98:28:20:76:79:12:4f:
01:46:10:b6:98:a6:2a:18:ba:bb:31:92:68:61:7c:
0a:60:fe:b0:db:25:fe:55:6a:28:f8:be:82:68:f1:
9e:0d:75:d0:47:95:c4:0d:c4:53:2c:98:28:1f:84:
0f:6f:bf:ef:5f:9f:14:db:4c:c4:f7:45:ab:f4:71:
e7:94:ee:f5:cb:7f:63:ce:f2:b5:c4:52:3b:d0:d2:
de:ff:47:4b:72:e4:e5:f2:9b:dc:69:0e:c1:8c:dc:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DF:E2:DC:EA:F8:3B:BA:5D:3F:19:B7:33:70:6A:0F:06:E0:3D:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAC0BB3622BD11F19E4414DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0-156.238.72.255
Signature Algorithm: sha256WithRSAEncryption
90:12:05:59:a9:9b:90:2e:63:9a:68:8d:fa:41:e5:55:5b:b6:
54:a1:9f:2e:75:8d:6b:d1:0b:7f:dc:15:f5:e8:c2:c7:b1:e8:
8b:3c:a7:3d:9d:2e:26:c2:a0:d6:78:3b:8e:5a:a2:de:0a:83:
e4:1d:cf:0c:83:73:a7:92:6f:96:98:4c:ca:00:41:1b:a0:0f:
2c:ef:25:30:cd:67:82:4d:05:4c:1b:e7:e6:97:3d:ea:68:d4:
38:f3:e3:4b:74:95:04:1a:17:bc:ec:c4:45:c3:25:33:15:06:
03:88:23:88:47:11:26:83:d8:b9:16:0d:40:a3:dc:72:52:a5:
de:a6:61:83:25:67:42:ee:35:7e:b5:1a:8e:98:e6:2f:4d:a9:
2a:98:fb:22:e4:a6:f3:22:db:3c:0b:eb:eb:1d:57:f6:e9:78:
ee:ba:b5:45:7c:d0:65:f8:5f:ca:c5:a5:ea:68:bf:cf:9e:ef:
0d:91:27:ba:a6:c3:36:a4:fb:20:6a:83:8d:89:4c:51:67:67:
6b:61:b8:dd:3b:c0:1b:58:46:79:50:83:3b:e4:57:17:be:97:
fb:61:a8:b1:c1:2c:2f:82:33:dd:d2:a6:45:51:16:aa:f0:da:
fb:68:52:06:0c:f9:b1:4a:35:53:13:b2:74:30:85:80:06:14:
6a:53:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:17 2026 by rpki-client