Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB5E7F7E235311F19F3C8ACADAE4EC9C.roa
File: CB5E7F7E235311F19F3C8ACADAE4EC9C.roa (raw, json)
Hash identifier: k0p+82l/MevUU9/i4hnNbYBzPKYY8mF709YxrdAI7p8=
Subject key identifier: 50:17:CE:83:3D:62:12:12:E4:87:C9:85:E6:43:BF:EF:62:16:58:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB5E7F7E235311F19F3C8ACADAE4EC9C.roa
Signing time: Thu 19 Mar 2026 05:23:43 +0000
ROA not before: Thu 19 Mar 2026 05:23:38 +0000
ROA not after: Tue 05 May 2026 05:23:38 +0000
asID: 21859
IP address blocks: 156.252.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107996 (0x1a5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 19 05:23:38 2026 GMT
Not After : May 5 05:23:38 2026 GMT
Subject: CN=69bb885f-3653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:d9:e4:2a:a8:e2:63:c4:de:bf:22:da:58:
90:e7:1d:89:e3:ca:5f:c3:7c:c2:2f:a6:da:e4:11:
15:ed:bb:a5:1c:62:f9:16:61:ed:76:7d:fa:20:14:
6a:49:93:15:d9:c6:ba:47:21:6b:93:fa:0b:df:66:
2e:96:93:93:f2:56:c1:91:ba:ec:8f:fe:90:12:28:
6c:15:b3:53:5a:34:24:b5:af:a4:fd:a0:5f:59:1b:
bb:69:31:bb:ff:e7:89:97:ec:43:b8:1c:00:bf:fb:
df:79:9d:04:c0:70:94:97:ab:ee:04:37:35:a5:6b:
bd:93:91:d3:eb:c8:46:c8:7b:ae:b9:f3:da:b9:8d:
f2:78:ea:ba:14:f0:8b:a3:22:31:1d:67:9f:c1:0c:
06:5f:98:8b:e7:41:85:d2:24:02:ef:26:6f:a1:47:
9d:e2:36:bd:af:7d:e2:27:d1:01:04:90:e2:ef:aa:
f3:b1:d6:d2:53:43:d4:6f:d0:8b:23:85:da:1c:94:
42:c0:3b:4f:59:e5:49:a2:24:9f:b8:ab:28:47:11:
2d:6d:55:2a:9d:4f:bb:3b:f2:3b:7d:5a:13:2a:df:
d8:44:74:33:38:60:c7:1b:8a:7c:94:26:82:01:f9:
88:fb:e4:7b:8e:a2:ac:e6:19:cd:c0:f4:05:93:6c:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:CE:83:3D:62:12:12:E4:87:C9:85:E6:43:BF:EF:62:16:58:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB5E7F7E235311F19F3C8ACADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.29.0/24
Signature Algorithm: sha256WithRSAEncryption
07:eb:08:c1:55:54:14:0d:e5:21:c3:59:e5:6c:f2:52:5a:8b:
7d:68:9a:5b:2e:44:83:a3:09:fd:26:4b:d0:96:e0:59:ec:7b:
5b:3f:84:55:c4:07:e7:ae:81:05:2d:ba:1e:a7:99:fa:0b:bb:
3d:18:32:e5:51:9d:b7:5e:09:ca:db:b7:e8:a3:cc:77:02:c6:
e1:84:19:72:78:c9:54:65:d7:2f:dd:c9:14:85:11:8d:b3:91:
9c:f5:95:b7:5f:d6:90:b1:17:9f:53:68:6c:bf:75:e6:7f:05:
ab:b4:ac:76:ac:7d:bd:7f:61:3b:85:a6:c1:9b:f0:95:c2:5e:
92:f8:dd:16:c8:ff:94:58:ee:b2:4b:76:27:e2:81:93:09:b5:
11:af:df:d2:ba:ac:3f:d0:5c:a6:7f:a2:77:9d:f9:2f:e2:e1:
e9:38:a6:e4:df:99:ec:7b:2f:ea:ad:23:78:f1:8d:97:06:ca:
35:1b:4a:b6:84:b7:a4:92:07:65:06:2e:5c:48:75:13:74:e6:
76:b5:e5:d3:a9:92:c9:70:b0:d5:12:47:d8:2e:6d:7a:ff:f2:
2d:c0:9a:4d:fa:48:5b:8b:f5:b4:c1:57:af:d4:27:5a:d0:d4:
26:df:16:ed:82:3d:13:f9:b5:4c:cb:3f:80:f0:3b:ec:43:1b:
5f:a3:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:48 2026 by rpki-client