Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1034F17012DB11F1A9F9CBF4DAE4EC9C.roa
File: 1034F17012DB11F1A9F9CBF4DAE4EC9C.roa (raw, json)
Hash identifier: KyWwNNhy005rkXbUS69aGk9G04fAPZNky/QQ7eBU/Cc=
Subject key identifier: 34:44:E3:E0:5C:90:B8:5D:4F:D2:A9:6C:01:EC:9E:47:1A:45:96:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A093
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1034F17012DB11F1A9F9CBF4DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:19:11 +0000
ROA not before: Thu 26 Feb 2026 06:19:06 +0000
ROA not after: Sun 28 Mar 2027 06:19:06 +0000
asID: 13335
IP address blocks: 156.243.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106643 (0x1a093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 06:19:06 2026 GMT
Not After : Mar 28 06:19:06 2027 GMT
Subject: CN=699fe5de-0a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:53:30:ba:6c:0d:86:f2:61:18:48:a0:5d:
46:4a:dd:83:3b:6d:f6:49:83:f2:e6:13:7e:58:ac:
ca:a8:53:c4:c1:7d:e9:ef:63:00:ca:af:3f:3d:85:
f4:d7:46:d6:9c:95:21:7e:83:64:8a:86:33:b6:d0:
96:95:93:90:34:a2:c1:0e:b4:c3:4b:7a:5b:1d:2f:
0d:d8:c6:f2:ed:36:34:56:c2:32:f6:39:7a:ca:ad:
3b:cf:2d:0f:c5:b5:be:6b:51:06:c3:5c:8f:58:12:
7a:77:d7:3e:d3:61:02:cf:35:5b:35:17:85:8c:ba:
dc:4d:1c:7c:b8:8e:91:24:8a:be:ef:f0:13:e5:02:
01:85:35:31:45:37:45:08:4c:7e:e7:3a:dc:d1:94:
64:ac:82:18:1f:48:ee:2d:dd:d1:3a:72:ec:2a:64:
28:00:74:a5:7f:37:4e:01:b6:83:ca:34:10:26:97:
d2:5b:be:e0:27:b0:a4:e9:95:9a:6c:93:81:8f:79:
de:14:0a:f4:6c:e3:c4:64:40:80:bb:91:1f:0d:8d:
96:6c:66:93:5d:87:44:ec:16:f3:60:90:65:6d:80:
8b:ed:35:f2:ba:19:86:4f:9f:0d:e9:1f:62:7b:23:
ec:40:c3:af:6b:98:09:e5:c0:33:04:c8:92:f8:c3:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:44:E3:E0:5C:90:B8:5D:4F:D2:A9:6C:01:EC:9E:47:1A:45:96:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1034F17012DB11F1A9F9CBF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.83.0/24
Signature Algorithm: sha256WithRSAEncryption
76:19:ff:5e:34:eb:c7:90:6f:6a:9b:9b:12:dd:83:ea:97:30:
27:18:63:9b:18:27:10:53:b3:a4:02:d6:db:74:23:1c:28:e1:
2e:37:1d:b6:34:69:d8:00:0d:f3:c9:7f:e1:40:04:f9:21:f7:
61:80:e9:71:83:d0:07:27:f1:f2:00:f3:c0:3c:eb:42:86:4b:
28:df:b2:db:97:f6:fe:98:9f:f3:80:3b:f1:09:4a:26:0c:4f:
02:b1:99:33:ac:d5:85:22:c3:0f:97:7e:ab:82:3c:74:02:f3:
57:f1:84:69:b7:fa:40:13:b7:aa:e6:85:8c:a7:aa:24:42:4e:
47:e6:58:12:80:3d:11:bd:0f:6b:23:03:4a:40:cf:f2:bf:10:
c1:cb:d9:9b:be:f5:4f:cd:9b:86:be:9e:6b:c7:2c:01:41:c0:
ef:88:c9:af:43:c8:8b:59:9a:e1:9c:1b:49:aa:65:78:4b:91:
ff:e2:06:d8:f9:f5:f2:4e:a5:b1:d7:fe:f5:0b:4a:93:e3:65:
03:00:41:eb:3d:a5:5a:7a:ee:3a:22:cf:1b:dd:3e:9e:4b:6e:
41:67:f8:13:73:b5:7e:ab:35:18:0a:ab:57:76:8e:73:e3:fb:
c6:c8:ed:43:04:07:11:27:97:2e:83:35:e7:ad:1c:1e:de:fc:
aa:c4:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:03 2026 by rpki-client