Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDC7076E1D3011F1AD69447CDAE4EC9C.roa
File: CDC7076E1D3011F1AD69447CDAE4EC9C.roa (raw, json)
Hash identifier: 6L1i9XMzyq7glJHqh7itZkpamEyb/n1lzqA/ZhY8Nik=
Subject key identifier: 74:29:74:7B:AC:F9:DD:61:FC:2F:70:5D:B9:8A:5E:F6:77:F9:09:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A437
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDC7076E1D3011F1AD69447CDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 09:58:07 +0000
ROA not before: Wed 11 Mar 2026 09:58:03 +0000
ROA not after: Sun 11 Mar 2029 09:58:03 +0000
asID: 17561
IP address blocks: 156.239.222.0/24 maxlen: 24
156.239.223.0/24 maxlen: 24
156.242.32.0/24 maxlen: 24
156.242.33.0/24 maxlen: 24
156.242.34.0/24 maxlen: 24
156.242.35.0/24 maxlen: 24
156.242.36.0/24 maxlen: 24
156.242.37.0/24 maxlen: 24
156.242.38.0/24 maxlen: 24
156.242.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107575 (0x1a437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 09:58:03 2026 GMT
Not After : Mar 11 09:58:03 2029 GMT
Subject: CN=69b13caf-c258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:42:bc:98:97:d7:7c:06:54:0b:88:f2:6b:
a3:f0:05:3e:cb:8e:a8:80:e5:86:ed:2f:3d:a9:d3:
c4:6a:1b:c4:a3:26:c1:45:63:36:90:9a:00:ef:a0:
dc:7c:e2:26:83:cd:b1:ae:9e:8d:ec:5e:5f:d1:b8:
36:ce:b2:80:4a:9d:56:29:62:11:60:0d:c9:a6:26:
a3:3b:0c:c5:52:42:10:69:6a:48:0d:c0:d8:18:59:
77:62:78:6c:6c:4e:eb:fd:0d:5d:fc:e0:dd:0a:31:
34:ee:21:c4:f6:83:57:8d:c2:51:8e:0a:3e:47:cb:
17:b0:99:81:e5:d7:a5:62:46:f5:ce:af:77:0a:c7:
be:1c:f8:b1:b8:eb:6d:b9:58:d1:e7:85:f0:39:13:
54:fb:6e:1e:ab:f2:db:3f:71:dc:5f:1d:e1:89:cb:
4d:39:9f:25:03:32:b4:b5:af:23:dd:3c:52:34:54:
eb:e4:27:8d:51:8f:3f:e2:01:e5:b6:5f:81:fd:96:
ee:1d:5b:a9:ba:ef:35:81:df:e7:d9:58:02:01:0b:
aa:f1:12:4d:17:ed:1c:c9:55:f2:b3:fc:eb:09:ca:
37:4f:cf:6c:58:8e:10:62:62:7f:1b:56:50:60:10:
94:76:3c:62:45:fb:9a:2f:83:82:d1:04:14:75:e2:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:74:7B:AC:F9:DD:61:FC:2F:70:5D:B9:8A:5E:F6:77:F9:09:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDC7076E1D3011F1AD69447CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.222.0/23
156.242.32.0/21
Signature Algorithm: sha256WithRSAEncryption
29:5a:2a:4e:79:60:43:df:1c:3c:12:02:54:b7:01:e9:95:dd:
0d:7e:96:fc:2c:3f:e3:df:df:bc:e8:17:bf:34:24:c7:c9:f0:
c5:52:94:62:30:23:8e:c2:57:5b:34:35:46:dd:65:62:b8:b3:
6a:e4:95:f7:dd:a6:20:d8:85:95:e3:3f:ba:21:9e:72:1b:be:
da:00:35:3b:d4:b9:0f:e4:c9:75:3b:9c:1b:13:f8:4c:02:70:
5d:e3:91:70:1c:a1:20:26:22:b5:5f:8f:c5:3d:95:bb:61:be:
61:bc:9c:d7:e1:2e:03:4b:23:36:1e:c8:0f:1d:85:1d:e2:a2:
00:84:2f:d0:2e:77:3b:35:f8:7d:cf:ae:3b:49:52:10:6b:5c:
e4:0e:40:9c:c8:73:b0:22:7b:ad:6f:2e:79:19:f7:38:6e:7a:
bd:49:ed:ea:ad:68:07:7d:33:6e:bf:55:15:e8:cc:d8:bc:e2:
cb:06:87:da:43:e0:3f:49:ee:fe:e0:da:f6:5e:ef:56:15:a0:
4b:7e:f9:14:0d:f4:38:00:48:c1:39:06:d3:a9:e5:bd:b1:49:
85:46:db:39:49:73:db:d0:4f:29:af:30:0f:47:d0:5b:53:35:
0c:02:21:ab:b2:ac:44:e8:a0:9c:a0:88:39:95:a6:ed:a2:6e:
90:ea:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:47 2026 by rpki-client