Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA17ABA01FAD11F18AD76F80DAE4EC9C.roa
File: FA17ABA01FAD11F18AD76F80DAE4EC9C.roa (raw, json)
Hash identifier: Mg7rtEEPoOT/TjYNDT8yzIzJaHMNCANCJZdHBqAGC04=
Subject key identifier: A5:53:69:48:A1:07:4F:CA:C9:F6:25:6D:DD:34:96:72:8D:03:B6:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A535
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA17ABA01FAD11F18AD76F80DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 13:59:12 +0000
ROA not before: Sat 14 Mar 2026 13:59:07 +0000
ROA not after: Thu 23 Apr 2026 13:59:07 +0000
asID: 63023
IP address blocks: 156.229.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107829 (0x1a535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 13:59:07 2026 GMT
Not After : Apr 23 13:59:07 2026 GMT
Subject: CN=69b569af-4285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:f4:10:c0:e0:af:0d:9b:21:9f:8e:49:41:
0d:59:ec:01:65:df:0b:e1:7a:35:93:0f:00:de:71:
b1:44:aa:a9:a2:af:07:fe:02:3e:7f:7a:0d:17:12:
10:0e:cc:32:f0:f9:4b:53:03:07:f1:03:02:fd:60:
9f:56:76:93:82:8f:c4:5a:a3:05:7b:52:b7:d8:f7:
61:56:b5:35:66:e4:85:29:df:c2:6f:6a:be:ed:02:
ee:9a:f3:01:98:9c:95:a2:b7:2d:ef:ab:56:4d:6c:
00:44:34:4f:5f:c2:e1:14:fd:ff:1e:2a:be:fc:fd:
df:94:11:57:29:c3:f3:d6:fa:9f:b7:c0:53:5b:c3:
88:7f:3d:e4:42:27:b5:f1:99:ac:a0:ac:8a:98:16:
0d:71:eb:91:dd:16:35:9b:cd:d1:44:c5:99:67:c8:
6d:12:dc:45:8f:59:3e:22:f8:6f:46:a1:9f:b3:5b:
71:b1:2e:6e:47:83:c5:71:0d:33:26:8a:e0:c1:2b:
ef:27:33:fd:a0:01:55:33:53:be:22:c2:9c:f7:6a:
9c:2a:fa:cb:5e:37:67:cb:4c:21:dd:43:74:4d:64:
0f:75:d7:e5:57:25:31:a0:87:ba:17:87:68:a2:b6:
3d:ae:e8:bb:34:53:d0:75:8c:8e:73:7f:bb:7c:d8:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:69:48:A1:07:4F:CA:C9:F6:25:6D:DD:34:96:72:8D:03:B6:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA17ABA01FAD11F18AD76F80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.119.0/24
Signature Algorithm: sha256WithRSAEncryption
52:41:5f:e8:a7:d8:9f:b2:60:f5:11:d9:89:ab:c5:29:29:ea:
2e:a5:99:53:ea:5f:01:dd:af:f2:a3:6c:5e:77:14:4f:75:5d:
f5:b9:fb:d1:90:50:c3:a2:63:16:44:62:1a:27:02:0a:ac:04:
72:b4:ae:d8:64:61:9d:f8:31:b3:2c:44:5a:77:f5:a2:80:fb:
74:4e:01:45:9f:06:a4:35:cd:69:31:e7:44:fb:85:c2:92:cc:
f3:72:24:7d:f6:bb:1c:de:14:ff:e6:f7:af:f2:36:25:e8:b4:
74:05:f6:7f:f0:66:9c:4a:b1:be:cb:c4:66:9d:d0:23:cf:3f:
cc:66:fc:d9:81:1a:75:a8:19:00:1c:b0:9d:3c:3e:de:e8:ff:
dd:71:5c:ad:51:f4:38:d9:1b:ed:eb:9b:5a:19:9d:47:ea:48:
77:f0:1d:be:5b:87:e2:26:8c:1b:15:7e:b4:fe:94:4e:f4:06:
6d:78:bf:84:da:2b:df:51:ce:b2:ce:59:9f:34:39:7c:64:ec:
b1:46:4d:bb:16:37:c7:bc:af:41:e7:1e:d5:7f:85:6f:45:d0:
3f:63:e6:21:70:84:5c:ec:cf:48:f7:99:dd:71:cd:cc:ae:d6:
d4:ba:99:a1:e2:2f:f3:f3:b2:e7:e5:28:45:23:6d:49:3b:fd:
c0:76:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:52 2026 by rpki-client