Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F6F4981EB611F1A0C623E5DAE4EC9C.roa
File: F4F6F4981EB611F1A0C623E5DAE4EC9C.roa (raw, json)
Hash identifier: QSxnAt7Ip3Bk4OJLdWIrgos+GLhxnlnLVQX3gO+7d1g=
Subject key identifier: 1B:7C:E5:72:A0:70:4E:24:01:C3:C4:89:09:B4:6A:10:04:C2:9C:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F6F4981EB611F1A0C623E5DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 08:30:57 +0000
ROA not before: Fri 13 Mar 2026 08:30:52 +0000
ROA not after: Wed 29 Apr 2026 08:30:52 +0000
asID: 32043
IP address blocks: 156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107753 (0x1a4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 08:30:52 2026 GMT
Not After : Apr 29 08:30:52 2026 GMT
Subject: CN=69b3cb41-209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:7e:47:e1:1b:25:bd:88:06:ed:4f:2f:de:
55:43:0c:a4:7f:98:62:41:eb:db:16:e4:24:91:d9:
96:e2:48:d8:38:e6:5c:ed:23:7c:7f:ed:b3:70:55:
a6:73:76:1c:96:86:b1:20:0a:c4:9d:ba:97:c3:fe:
8d:d3:05:27:08:0f:61:85:87:85:93:25:67:48:d1:
b4:d1:be:8e:42:24:cd:b6:5b:c0:f6:41:ac:8d:ad:
25:ae:ab:f2:6c:02:18:4c:72:2d:98:80:57:97:e2:
02:93:2a:31:bb:76:56:c4:6c:40:a3:51:b2:d8:b5:
f9:59:d8:f5:73:d8:b2:69:43:f1:d7:a4:e0:78:ba:
ec:7e:11:2f:34:8d:fc:92:95:94:28:f3:12:17:12:
ee:d2:8d:58:a1:31:3a:f4:f7:63:89:db:69:53:8b:
8b:bc:64:52:30:33:6a:93:a7:34:32:b1:d4:fa:1f:
98:26:df:e2:c1:a5:68:6f:73:57:ed:fc:da:40:e1:
46:fb:fb:e7:2c:3f:c0:9b:9d:58:12:bb:c8:07:cd:
53:26:da:22:28:82:b1:90:56:e4:2b:9d:bd:24:fb:
b7:c6:93:71:cc:7e:eb:f2:04:59:30:68:5f:71:0f:
29:9b:e1:55:73:23:47:d5:e7:7c:71:00:91:a7:f6:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:E5:72:A0:70:4E:24:01:C3:C4:89:09:B4:6A:10:04:C2:9C:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F6F4981EB611F1A0C623E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.48.0/21
Signature Algorithm: sha256WithRSAEncryption
10:9c:08:28:ba:30:f2:c5:5f:21:d7:ac:88:a6:77:06:5d:ef:
c3:d5:de:70:e7:69:dc:46:1b:7b:11:2c:95:7e:a0:2c:87:41:
1f:40:6b:bb:ee:b4:a1:6a:95:a8:5a:a8:66:38:4e:79:2b:78:
f3:b7:69:c8:a1:bb:35:6e:ad:4a:a4:e9:c9:7f:3c:a9:14:fa:
e5:2a:ab:8d:55:95:4e:0c:92:10:16:ae:ac:f8:1a:30:f1:7a:
c4:7c:be:80:5e:4d:9b:0b:ac:bb:59:f8:2d:d4:2a:90:cd:aa:
f0:30:aa:57:c1:67:3e:d6:0b:61:d2:bd:f4:84:7d:9b:95:09:
1f:3d:44:64:9e:ec:57:5b:38:11:4e:a9:5b:ac:cb:fe:54:00:
1a:e3:11:5b:f5:68:67:92:3f:d5:e6:a4:78:48:c6:92:a5:50:
72:6e:64:8f:9b:70:07:02:da:c5:ce:12:a4:ef:88:fc:6a:42:
3f:41:1d:7c:24:64:c1:35:c5:fd:21:d9:65:78:51:c1:7e:01:
a5:ed:81:27:44:43:b1:0f:b5:a9:27:61:1c:df:6c:aa:13:05:
7d:a5:5f:34:ec:aa:2a:f2:42:c3:2f:3a:c3:c5:9a:25:e6:c9:
a4:e0:a8:2b:a8:c3:01:35:73:56:5f:12:f4:cf:19:c5:eb:4b:
ce:0e:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:40 2026 by rpki-client