Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05DC3B98154C11F1AC5925EEDAE4EC9C.roa
File: 05DC3B98154C11F1AC5925EEDAE4EC9C.roa (raw, json)
Hash identifier: ayMFO8cJ/TrbwJnlJ/6hHDDMTPldxsORKZZHn/GIrQc=
Subject key identifier: 2C:91:6D:EE:21:58:E3:37:39:18:EB:F5:66:D9:FF:23:FC:7D:61:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A178
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05DC3B98154C11F1AC5925EEDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 08:52:48 +0000
ROA not before: Sun 01 Mar 2026 08:52:44 +0000
ROA not after: Wed 11 Mar 2026 08:52:44 +0000
asID: 24435
IP address blocks: 156.238.82.0/24 maxlen: 24
156.238.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106872 (0x1a178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 1 08:52:44 2026 GMT
Not After : Mar 11 08:52:44 2026 GMT
Subject: CN=69a3fe60-d49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:08:28:8c:e1:2a:38:52:f5:18:74:93:53:
8a:cd:6e:80:38:d3:3e:d0:7e:cc:40:08:08:32:9e:
f3:dd:42:63:fe:12:c8:1c:c5:08:89:dd:cc:6b:37:
c6:df:e0:34:9b:90:10:18:23:20:12:60:af:22:f3:
f8:41:f4:b6:2c:eb:57:2a:04:7f:62:00:7e:e3:75:
eb:f4:c9:e2:59:20:e8:41:08:40:4c:8e:00:ec:a4:
f4:74:58:10:55:75:3d:c2:65:c6:1a:19:68:ac:1d:
f8:a4:04:fb:5f:64:5c:80:7f:64:d4:a9:a4:97:65:
0c:c2:79:e0:98:ff:fe:73:38:16:16:cd:b1:b1:e5:
78:7e:3b:69:9d:90:ee:61:cf:bd:e6:f7:f5:d5:b9:
43:36:b6:8d:8a:a5:df:72:dc:bb:79:20:c3:d1:f0:
65:97:22:1d:d9:ea:33:e2:b8:eb:3a:92:cb:55:e7:
c7:68:c3:ac:3c:07:f9:a4:09:13:9f:eb:84:8d:25:
3f:4e:69:f3:d5:b7:67:d5:3a:b6:3c:a3:90:7f:c7:
d8:80:32:b7:cb:3b:7a:ce:35:95:06:cb:b4:a8:d5:
8a:bc:a9:11:7e:3b:6c:5f:78:b9:4c:f4:42:a4:34:
25:44:0c:85:42:7d:f6:07:70:02:8a:aa:3b:d8:e0:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:6D:EE:21:58:E3:37:39:18:EB:F5:66:D9:FF:23:FC:7D:61:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05DC3B98154C11F1AC5925EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.82.0/23
Signature Algorithm: sha256WithRSAEncryption
44:44:ae:eb:ab:9f:47:3c:23:29:36:98:d5:40:e5:b1:be:8e:
5c:89:63:62:d4:6d:7d:e6:2b:fa:09:a6:d3:bd:80:a8:b9:26:
c0:e7:e2:c7:90:5a:37:ad:c0:a7:ee:9a:a6:9a:09:1a:d3:65:
ed:c7:8d:a0:11:ae:c5:70:32:61:68:03:4e:b7:62:3a:5f:25:
c2:5d:b0:5f:f6:97:78:3c:c4:3a:91:d7:7c:0f:20:d7:88:2b:
77:72:93:a9:8a:49:e5:48:58:cc:05:78:7e:7b:07:93:49:1c:
25:d0:41:a6:1c:10:6d:2f:c1:62:65:7a:00:90:1a:b1:68:48:
e8:df:b8:d7:f2:d5:a6:d8:81:52:e2:65:9d:6a:6a:d1:42:de:
e7:b4:c8:53:2b:cd:4a:14:e4:3f:86:ba:9d:8a:71:78:80:75:
dc:5c:e0:ed:f3:8f:85:d1:b0:5e:80:64:41:33:b8:15:f4:31:
59:5e:f9:09:a8:35:a2:8d:1a:5d:25:a2:30:07:9c:58:3a:37:
47:88:bc:ac:c3:05:18:4a:0c:a0:3a:8f:3a:94:2e:c4:87:60:
3f:c8:e9:f5:2f:b4:42:12:ca:bf:78:04:f4:2b:01:12:e1:c2:
58:91:48:e4:89:15:1a:7b:5f:76:fd:47:05:f4:33:ef:a6:23:
32:8e:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:18 2026 by rpki-client