Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07D55A46122311F1B411B58EDAE4EC9C.roa
File: 07D55A46122311F1B411B58EDAE4EC9C.roa (raw, json)
Hash identifier: nq2zeZKrNRDLUGszyjKMom+mt/9QHD9YcOg6NV98Lv0=
Subject key identifier: 18:35:10:DF:E4:C2:76:11:80:32:48:F5:41:CE:31:CE:26:C7:9B:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A068
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07D55A46122311F1B411B58EDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 08:21:49 +0000
ROA not before: Wed 25 Feb 2026 08:21:45 +0000
ROA not after: Wed 01 Apr 2026 08:21:45 +0000
asID: 984
IP address blocks: 156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
156.249.177.0/24 maxlen: 24
156.249.179.0/24 maxlen: 24
156.249.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106600 (0x1a068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 08:21:45 2026 GMT
Not After : Apr 1 08:21:45 2026 GMT
Subject: CN=699eb11d-96b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:ef:6a:8a:52:03:98:25:ae:92:d9:4f:d8:
db:39:83:d4:2d:7f:bf:ad:fd:77:8c:dc:08:1a:28:
08:7f:78:90:82:eb:4f:6c:5a:3f:a3:a9:a0:e1:af:
b7:39:10:f2:cd:68:e6:39:37:c1:c3:a0:20:80:1d:
2e:c7:51:42:69:11:56:42:ae:d7:ab:f3:1e:aa:13:
fd:99:e3:ad:45:ba:55:bb:08:2e:f1:a5:16:14:57:
27:87:d0:41:ff:d9:b1:d5:2b:2e:62:10:7e:e7:85:
29:b2:0f:06:60:19:6e:3a:d2:51:65:fb:9c:14:6a:
59:33:fb:66:7b:de:f0:9a:0a:e0:75:2d:61:dc:e6:
74:12:e3:63:af:68:88:89:70:4f:c1:6b:e0:dd:bd:
77:d1:26:7c:b4:28:de:ab:70:56:4a:03:37:ae:ff:
8e:b0:33:ad:87:d9:f8:2f:36:e6:3d:c9:72:74:1f:
8b:2e:dc:54:ba:f1:ed:da:28:92:a9:05:f7:60:2e:
a8:12:38:07:6a:c4:8a:2f:7f:82:11:e9:74:3e:33:
d1:10:ad:b2:fd:ec:85:97:30:b5:05:87:77:ba:0e:
80:cf:4d:8e:55:2b:e3:f1:10:8e:72:e1:e7:29:b6:
cf:f6:1c:38:29:b6:fe:09:7c:32:57:74:81:af:d8:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:10:DF:E4:C2:76:11:80:32:48:F5:41:CE:31:CE:26:C7:9B:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07D55A46122311F1B411B58EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.175.0/24
156.249.177.0/24
156.249.179.0/24
156.249.196.0/24
Signature Algorithm: sha256WithRSAEncryption
57:77:8a:c6:5a:80:01:18:95:f2:f7:40:fb:fc:31:a3:9a:45:
72:0a:e0:3e:c9:34:51:59:45:d2:d1:41:93:35:f9:1c:e9:61:
a0:ad:fa:aa:56:06:d2:eb:02:26:fa:39:11:d6:b1:59:07:e3:
f9:28:eb:19:f9:c5:e7:50:18:6e:52:f1:68:3b:d9:bb:d0:3b:
30:77:78:4d:36:1d:d0:cb:47:aa:e2:25:db:e6:2e:92:93:4f:
0c:df:e0:3e:34:c3:88:0e:5a:3c:0a:30:78:45:72:7b:1e:5e:
cd:cf:69:3a:42:38:78:9d:70:89:9e:88:94:a7:a3:81:70:43:
bf:32:83:d5:1a:6e:2a:df:40:24:cb:be:2c:9c:f0:9c:02:8f:
10:51:26:68:8e:8d:ea:d5:bf:fc:3b:13:02:27:c8:23:1d:20:
aa:96:ca:69:34:75:13:01:91:15:75:ef:6c:a0:a8:26:5c:30:
b5:60:fa:a3:07:25:f0:d8:97:3a:32:0d:84:7e:1a:3b:cf:4e:
06:39:44:5a:26:9b:f2:39:93:1b:86:bf:f1:9f:c3:bd:6d:9c:
b6:30:40:60:be:ab:85:a6:85:d0:33:83:40:dc:a7:4e:0d:71:
db:ef:ec:7a:1e:df:34:bd:9e:bb:dd:14:c0:8d:c5:22:ce:ad:
fc:93:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:29 2026 by rpki-client