Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD66DC4058011F1B59DE2E4DAE4EC9C.roa
File: 1AD66DC4058011F1B59DE2E4DAE4EC9C.roa (raw, json)
Hash identifier: ZciaDxWrKn+409p1NCWf8JXYy0HS9aVf3SqZJh93IIU=
Subject key identifier: 34:1D:80:E0:7E:B4:F0:38:51:6A:92:6F:56:EE:8C:0D:54:E8:93:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD66DC4058011F1B59DE2E4DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 06:25:31 +0000
ROA not before: Mon 09 Feb 2026 06:24:58 +0000
ROA not after: Tue 10 Mar 2026 06:24:58 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105555 (0x19c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 9 06:24:58 2026 GMT
Not After : Mar 10 06:24:58 2026 GMT
Subject: CN=69897ddb-4fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:a3:a3:11:c6:60:f2:1c:eb:1a:31:75:f5:
09:79:cc:0f:2b:9a:c5:c7:f7:be:96:c9:bf:4a:d4:
45:7b:9b:73:d7:ec:5d:61:f2:9f:f0:2e:f2:07:53:
b8:53:a6:01:ed:4b:8a:47:44:24:20:30:d2:6e:15:
9f:bb:7c:4d:fd:9e:0c:6c:dd:c1:0f:2e:98:a0:92:
3e:ac:42:91:92:6b:9d:ef:a3:49:89:fe:70:b4:23:
8a:5d:f0:c3:97:1f:8f:6b:df:b6:b3:5b:f2:ee:c1:
49:ee:8e:c3:fd:6c:b1:77:ed:ea:80:5f:af:8d:a8:
f9:f4:a7:2c:74:ad:7f:97:ad:41:64:74:53:97:e3:
36:94:32:32:0b:e2:82:e3:09:b8:46:e8:e3:ad:84:
ca:94:65:a3:41:d3:d9:88:63:6e:be:73:0a:e2:84:
88:1f:4d:d0:32:56:64:81:cd:46:0e:47:41:56:bc:
dd:96:20:e9:c9:ea:a9:75:e2:5d:67:2c:a9:50:01:
61:a2:62:7c:29:c5:e8:05:88:da:6e:cc:7e:e3:35:
bd:ac:24:a7:ce:43:3f:11:82:96:a3:e1:fa:69:78:
ad:47:72:49:5b:a1:ff:fa:40:a7:1d:17:10:dc:c5:
90:02:27:f3:49:cf:de:9b:a9:23:8d:9b:e9:37:45:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:80:E0:7E:B4:F0:38:51:6A:92:6F:56:EE:8C:0D:54:E8:93:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD66DC4058011F1B59DE2E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:36:41:f4:b2:20:25:08:60:24:74:62:3e:cb:4d:b6:e5:7f:
80:4d:0d:22:53:ed:4d:5a:1f:f2:a1:cb:7b:c3:e5:3a:f9:12:
e2:35:dc:3c:96:17:c8:44:48:a5:59:c3:45:67:0d:73:48:c0:
41:13:7f:13:36:a8:4e:08:77:0d:49:a9:ca:63:7c:0c:b2:27:
e2:73:85:bf:ad:21:3e:88:fd:4b:d2:e7:24:bf:0e:1c:ab:b5:
1c:13:da:7d:f1:9e:5d:dc:e4:44:39:50:8c:3c:73:83:c1:57:
b3:99:a4:a5:d4:e4:9d:5d:74:36:4f:8f:ff:7a:ad:82:79:7a:
ca:94:00:44:a5:13:d3:56:c7:51:ad:4b:d1:20:d2:b5:9a:e7:
70:91:e0:9d:01:c5:62:3c:99:67:f7:0d:55:82:b6:ed:f0:a5:
e9:a0:77:6a:48:67:b0:a9:c3:e6:69:0a:fd:f3:3d:c2:60:fa:
e9:16:19:64:2d:3a:b9:96:22:d6:6b:27:56:eb:72:ee:ed:bf:
d0:3b:f8:d6:e5:4b:62:9c:eb:9f:8d:82:6c:da:e9:83:20:b0:
42:b7:56:2e:9d:1c:d0:92:ce:7b:fd:7b:9b:64:86:30:3f:7f:
b9:ae:2f:bb:60:6d:0e:d2:29:53:a8:63:96:de:30:55:37:c2:
ca:3a:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:47 2026 by rpki-client