Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D11A1B8C1FA511F19EBF27D2DAE4EC9C.roa
File: D11A1B8C1FA511F19EBF27D2DAE4EC9C.roa (raw, json)
Hash identifier: +MfKjr2c9UoVKZdJwmdbgA8atgUWYJMaZ/XZSQJGBq4=
Subject key identifier: 75:03:80:B5:19:C1:9C:09:51:70:36:44:2D:8B:6C:2F:99:32:9D:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A52E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D11A1B8C1FA511F19EBF27D2DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 13:00:46 +0000
ROA not before: Sat 14 Mar 2026 13:00:43 +0000
ROA not after: Mon 20 Apr 2026 13:00:43 +0000
asID: 63018
IP address blocks: 156.233.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107822 (0x1a52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 13:00:43 2026 GMT
Not After : Apr 20 13:00:43 2026 GMT
Subject: CN=69b55bfe-f444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:ad:20:e4:64:61:25:34:5a:d3:c7:9f:94:
a5:8c:04:7e:63:30:ee:78:09:12:11:78:c9:03:0b:
e7:f8:05:97:04:ce:57:4e:dc:94:75:c6:db:b1:79:
db:2e:b3:74:a4:50:fd:d7:35:fb:fa:66:cc:5e:96:
ae:ec:5e:62:d0:98:89:ed:03:cf:00:73:f3:83:c3:
e5:4c:cd:c9:9b:62:c9:e4:da:f5:fc:44:ad:9b:e2:
73:15:98:44:e2:d6:1e:8b:7f:4d:08:58:58:1c:9e:
f5:06:61:c6:81:20:2d:54:85:88:f4:3c:7d:42:9d:
de:0b:e9:54:a8:c9:45:c5:13:1e:7d:c5:5b:72:98:
e7:f4:fe:ff:0e:24:b4:72:31:ec:b2:3e:d6:bc:83:
93:8a:c4:53:49:93:cd:38:bf:c5:49:ba:13:9c:0c:
b0:f2:80:e5:76:e1:b0:00:5f:2e:37:b4:f9:94:27:
17:06:41:95:4e:0d:8a:41:81:9c:35:f4:fa:ae:ab:
a2:cd:49:4c:bc:5c:50:8a:6a:aa:7e:b4:78:1a:dd:
91:8d:73:48:3e:c2:ed:55:9f:b2:5a:8f:a2:e7:a3:
b7:56:cd:a9:e0:9d:e6:c4:f5:da:07:63:e0:42:47:
34:e4:71:44:09:ae:da:8e:5e:22:ef:6c:5d:50:62:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:80:B5:19:C1:9C:09:51:70:36:44:2D:8B:6C:2F:99:32:9D:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D11A1B8C1FA511F19EBF27D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e8:d2:15:38:ed:d6:56:52:d7:6c:1a:05:be:d8:4f:d3:51:
0e:b0:fc:b6:81:3b:28:23:87:ca:91:05:44:5f:25:a8:d6:13:
bb:36:2c:fd:eb:47:44:2c:1b:ef:ca:fd:2f:e8:48:b6:1b:be:
b3:32:0b:f1:a6:d0:4d:7d:e8:0e:60:81:d3:80:1b:30:00:aa:
08:7e:45:3a:e9:01:d9:de:0b:e2:23:2a:4c:c8:63:9e:d2:56:
ec:76:7c:e9:8b:a5:21:f9:b6:ad:e1:e7:f4:fc:43:51:28:2c:
22:55:c1:f9:57:45:ba:30:6b:7a:3b:99:a2:97:f5:79:0f:59:
84:91:39:8e:58:08:e5:7c:68:45:1a:24:0e:8b:24:ca:10:46:
4a:ad:58:33:23:b1:44:c6:17:86:7a:b5:12:4f:ed:75:9c:63:
1b:01:67:9a:08:1b:a2:92:89:2f:55:f2:50:cb:0a:8f:74:e8:
aa:a7:52:d7:69:35:20:a3:8b:f3:07:51:6e:0b:71:5f:2d:c0:
0e:6e:3a:a1:d2:3f:dd:7b:c7:11:ad:08:55:ea:3e:4b:99:e3:
ef:8a:5e:93:5f:81:e5:61:93:8b:f7:a0:1a:56:35:fc:9b:29:
41:e9:a9:6a:1d:52:e7:bd:50:ca:3d:55:8c:e4:19:a1:e1:c9:
11:49:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:32 2026 by rpki-client