Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEFBB0A6282111F1B4E6B8CFDAE4EC9C.roa
File: DEFBB0A6282111F1B4E6B8CFDAE4EC9C.roa (raw, json)
Hash identifier: Q225AxhTPGHR2cQwWe4jr4rsQFx4BsWLeKrRTrFNEfo=
Subject key identifier: A6:B8:DD:B1:96:41:EB:A1:53:48:5E:80:1C:28:9F:91:13:88:80:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A74F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEFBB0A6282111F1B4E6B8CFDAE4EC9C.roa
Signing time: Wed 25 Mar 2026 08:08:57 +0000
ROA not before: Wed 25 Mar 2026 08:08:52 +0000
ROA not after: Sat 02 May 2026 08:08:52 +0000
asID: 984
IP address blocks: 156.242.66.0/24 maxlen: 24
156.242.67.0/24 maxlen: 24
156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108367 (0x1a74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 25 08:08:52 2026 GMT
Not After : May 2 08:08:52 2026 GMT
Subject: CN=69c39819-1b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:10:6f:db:54:d0:46:dc:15:10:4e:18:66:
53:28:77:0f:0d:db:f1:21:eb:89:5c:73:ec:79:b6:
a8:dd:19:b4:26:2b:32:fc:a2:d7:f9:c0:e1:c9:fc:
8d:29:4f:7a:2a:f8:a6:94:1a:61:52:82:94:19:2a:
e1:02:d5:f6:28:23:2e:a8:a2:6f:ad:a7:8d:9a:cd:
89:4e:2e:1a:76:55:e3:d9:f1:bc:33:94:4d:9d:65:
15:5a:15:66:ce:ce:07:75:aa:5d:73:77:6c:ae:e6:
10:61:49:9b:1a:db:9c:87:a5:95:e7:4e:0f:ea:3f:
8a:36:56:40:3e:b9:6b:34:51:bb:7a:21:14:99:10:
98:69:63:14:82:bf:05:1b:18:bb:ac:9c:9d:0f:16:
8f:65:72:dd:bd:a2:f2:26:dc:0e:fa:a1:26:62:cc:
16:17:85:ee:b6:35:a1:8c:aa:12:a9:ee:29:b0:4a:
8d:75:05:98:2d:f7:93:e4:ec:b3:ff:34:2b:ab:12:
a3:c7:b4:74:d3:12:f5:d9:47:7f:cf:d6:22:c7:76:
c9:aa:6a:7d:3f:dc:2a:89:8f:92:fc:19:d3:01:3b:
e7:d1:83:fa:4e:f7:dc:20:dd:46:6b:25:61:25:ad:
3f:09:47:f5:41:76:66:f3:cd:b5:be:d5:e7:1e:d1:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:DD:B1:96:41:EB:A1:53:48:5E:80:1C:28:9F:91:13:88:80:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEFBB0A6282111F1B4E6B8CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.66.0-156.242.68.255
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a6:8d:04:df:37:69:a7:ef:07:c8:bd:ba:ef:42:b7:15:a6:
d8:20:46:a7:a5:f9:fa:ee:a2:2e:06:2e:a6:fd:ef:e4:5e:ca:
bd:1c:22:e3:2f:d4:ea:41:6b:9f:74:59:d6:8c:2c:e8:e5:60:
30:5d:10:45:95:50:e5:b5:e6:c4:ba:fa:c2:a9:ac:58:48:13:
ca:30:6b:82:4d:24:98:b2:67:33:b1:ee:25:f6:98:3a:4c:8b:
01:f5:7a:51:30:3d:bc:2c:0f:e1:39:66:72:57:f9:5d:d1:5d:
e0:4a:18:9b:80:2f:2a:07:00:0c:68:75:63:56:90:f7:b0:49:
57:c8:c6:69:d3:d1:da:22:84:c9:a6:56:aa:9b:0f:b6:ef:a9:
af:a2:77:18:42:96:44:6e:72:6b:84:50:0a:88:f7:e2:f8:e3:
57:f1:9e:a7:0b:71:e0:84:68:bb:ca:17:e5:39:67:1a:0a:22:
c6:17:2a:c0:57:e8:51:ca:6c:a9:e7:2a:79:3b:1b:a3:a0:71:
bc:03:28:1e:c6:b4:c0:40:17:22:32:2f:c8:56:6c:c0:c0:b8:
31:8e:b6:ad:92:de:48:91:98:06:3e:f8:7a:a7:c1:3b:20:33:
9b:00:ae:0a:ae:92:d9:90:d3:61:35:08:ea:b4:53:d1:87:16:
94:b7:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:38 2026 by rpki-client