Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D996F208269911F1B298D0DEDAE4EC9C.roa
File: D996F208269911F1B298D0DEDAE4EC9C.roa (raw, json)
Hash identifier: N/L0vq75MjnaWtdhALcugfRJq73zC3LhwT3+Y4JkoVE=
Subject key identifier: 77:46:7D:08:A6:FE:6D:F0:48:D8:46:41:68:C3:A1:30:A0:C8:2B:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D996F208269911F1B298D0DEDAE4EC9C.roa
Signing time: Mon 23 Mar 2026 09:22:45 +0000
ROA not before: Mon 23 Mar 2026 09:22:39 +0000
ROA not after: Thu 30 Apr 2026 09:22:39 +0000
asID: 152705
IP address blocks: 156.245.200.0/22 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
156.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108251 (0x1a6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 09:22:39 2026 GMT
Not After : Apr 30 09:22:39 2026 GMT
Subject: CN=69c10665-80c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:87:79:c7:f5:4d:38:4d:32:52:2b:23:2a:
14:7f:a5:d9:df:26:63:9c:54:bd:37:a5:55:a3:ee:
0a:94:67:3a:39:e5:88:f6:85:7e:c5:99:2b:5d:16:
98:37:8a:5a:40:a8:de:11:9f:6a:83:9a:e3:4e:4b:
64:26:63:2b:c8:00:6a:70:a0:03:bd:24:c5:16:a0:
5e:27:17:61:76:b9:b8:af:ca:c6:dd:8c:bd:8a:99:
01:59:44:40:f3:84:a4:02:56:b0:f4:a2:2a:be:cf:
05:34:1e:9a:ca:9c:a4:77:9e:16:82:c1:e3:78:41:
ae:2b:ad:ad:15:4d:22:69:c6:2b:f7:49:d5:f1:97:
bf:8f:e5:93:32:ca:c5:09:5f:a5:95:08:e8:b3:e1:
ed:ec:21:59:b0:9f:4d:79:e6:7d:49:9c:ab:f0:58:
15:94:ab:eb:ae:5e:be:36:2c:9f:94:8a:e8:d6:71:
7f:b7:b0:c9:5c:3f:1f:12:f9:d4:fd:2c:f4:2d:83:
7e:f7:c1:34:d7:09:cc:14:f0:be:5c:fe:f7:4f:ee:
d4:45:cb:40:c8:53:a4:d0:f0:6a:e7:82:7e:20:41:
6f:86:4b:c2:e5:79:81:24:ee:03:31:ac:51:25:e7:
96:28:0d:42:a2:98:e2:0e:60:b9:e2:d6:75:7b:bf:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:7D:08:A6:FE:6D:F0:48:D8:46:41:68:C3:A1:30:A0:C8:2B:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D996F208269911F1B298D0DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:84:55:62:28:82:fa:bd:ff:03:57:49:03:71:13:59:c5:02:
5e:bf:4f:dc:73:c4:de:b8:9b:ea:6c:e0:e6:f8:fc:0c:44:ce:
d6:0d:ba:ab:ee:e8:7d:c5:ce:7f:16:6f:a0:f1:64:76:e9:35:
45:4c:f0:b4:b1:1a:2b:a4:3a:df:2a:67:02:5d:68:95:9a:3d:
58:f7:8b:b8:4b:e5:b8:4b:1c:54:ab:bc:b1:e6:d8:5f:42:12:
b3:b9:08:c0:39:2d:24:30:70:2d:00:f4:70:2d:8a:8f:d0:39:
ad:b1:13:a4:3b:9c:37:76:61:65:a4:bc:91:5b:79:48:68:e3:
89:6d:40:cf:d7:38:f7:8a:53:92:03:a4:a0:a5:5f:3f:96:75:
c8:32:0e:56:95:b9:d0:a1:80:fb:b7:52:9d:d5:ad:65:e0:aa:
88:06:ce:8c:7e:c0:cc:1a:33:98:7f:b8:dd:69:49:89:37:d4:
14:65:e6:0c:f3:f8:34:26:a6:78:3e:5a:2b:72:fb:b6:02:bc:
d4:f0:7a:3d:da:56:27:fa:ef:9f:bc:d9:b0:f2:33:54:58:da:
01:26:11:e4:71:1c:1a:c5:a0:39:2d:4a:00:79:47:c5:bf:78:
11:47:48:a3:32:6a:da:37:71:d2:9c:b3:e2:e1:87:84:9d:db:
fc:ec:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:17 2026 by rpki-client