Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38344B01B8611F1920C78C1DAE4EC9C.roa
File: E38344B01B8611F1920C78C1DAE4EC9C.roa (raw, json)
Hash identifier: 1LU3v+YtoEct4r8E6TDHKHN9JlpA4i+8pNgOjM21wyg=
Subject key identifier: D5:2C:98:22:DC:4E:68:70:15:C0:45:DF:5F:8A:3E:36:3D:83:C7:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A355
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38344B01B8611F1920C78C1DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 07:09:19 +0000
ROA not before: Mon 09 Mar 2026 07:09:13 +0000
ROA not after: Wed 01 Apr 2026 07:09:13 +0000
asID: 205712
IP address blocks: 156.225.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107349 (0x1a355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 07:09:13 2026 GMT
Not After : Apr 1 07:09:13 2026 GMT
Subject: CN=69ae721f-8bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:d9:6b:c0:14:f2:4f:36:2a:01:8f:c5:f4:
ab:d3:6b:99:2e:f2:99:e3:a4:f2:9a:37:3c:83:eb:
d2:ba:3c:9e:c7:f1:60:2d:33:e6:59:26:9f:58:04:
94:c1:6e:86:bd:72:70:eb:5d:e8:27:c6:e8:e1:d9:
9c:30:e6:bc:ef:83:5b:cd:3f:2f:ce:35:4b:cf:05:
f6:00:f5:c1:62:21:83:aa:4b:78:b7:92:6e:1d:19:
1a:a1:95:ce:aa:63:a2:8f:c3:92:a4:93:21:4f:43:
86:1c:76:01:90:e8:74:73:47:ac:fd:cc:70:95:72:
83:59:44:f0:ae:e7:e4:7a:ad:fd:9e:0a:ba:1a:25:
e6:9f:36:07:65:d7:3b:95:f1:60:3e:4b:70:cb:8a:
98:6e:36:7a:ab:42:b5:c3:a9:c8:f0:ea:d4:91:62:
a2:46:57:b9:8d:8b:9d:18:b7:2c:9d:54:d4:00:07:
3f:aa:52:be:f6:aa:fe:47:b2:09:e4:66:c6:3a:90:
8c:05:ec:0f:da:0b:93:50:6b:85:aa:7f:3b:70:1f:
56:ba:35:17:75:37:ae:4e:b9:bb:44:54:d9:ca:93:
b3:b0:8f:0d:07:aa:09:07:0b:01:9c:ee:40:8e:cb:
cd:a4:5c:92:8c:7b:97:80:43:06:ff:dc:71:cc:4f:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:98:22:DC:4E:68:70:15:C0:45:DF:5F:8A:3E:36:3D:83:C7:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38344B01B8611F1920C78C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e7:02:04:f1:87:45:be:d1:2b:83:67:aa:e9:fa:d1:ce:b4:
c6:73:da:d3:81:64:a7:aa:6e:9b:41:dd:55:02:87:f0:38:9b:
5a:83:94:27:23:ee:08:8f:bf:46:8a:2d:56:be:28:d1:19:39:
4a:85:44:eb:b8:1f:51:a6:d9:1c:33:a2:66:fc:4f:9d:cd:35:
f2:e9:73:4b:d1:26:70:16:42:d9:29:39:ba:78:11:b3:97:c3:
8b:74:51:41:05:fa:c0:0b:ee:72:cd:ba:45:36:77:61:00:15:
8e:91:2b:81:c6:0d:c6:01:57:b2:8f:69:a1:68:5f:56:5f:b0:
09:e9:3e:9e:15:66:e6:da:fa:a2:31:2e:8c:ae:58:6f:0f:c0:
15:f9:13:c4:2b:aa:b7:29:ce:26:b5:9e:85:38:c9:48:9e:8a:
11:79:85:fc:37:b5:46:03:21:be:7b:17:c8:d9:8d:9a:b8:b0:
3c:bf:99:76:8f:59:02:d7:6f:05:ac:11:7c:f3:3c:9e:02:41:
d4:a4:d8:d4:6a:48:64:b9:f3:61:0f:c4:61:c3:65:91:4d:64:
96:34:0c:99:d3:6c:32:d5:fb:ca:13:14:df:32:0e:7b:e0:67:
c6:fc:32:f0:83:19:5d:7c:0f:9f:a3:77:73:9e:0f:e4:e3:dc:
b2:18:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:25 2026 by rpki-client