Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E8E2B02FC3711F09CEF42D1DAE4EC9C.roa
File: 1E8E2B02FC3711F09CEF42D1DAE4EC9C.roa (raw, json)
Hash identifier: Sc02pRoGk5hFxvJ+h8rAoSB9Oed+fnQRnlN45ve3GNU=
Subject key identifier: CE:F3:E4:66:04:03:AD:51:05:3A:69:81:A1:7D:EA:78:31:5C:48:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E8E2B02FC3711F09CEF42D1DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 10:50:12 +0000
ROA not before: Wed 28 Jan 2026 10:50:07 +0000
ROA not after: Sat 07 Mar 2026 10:50:07 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105054 (0x19a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 10:50:07 2026 GMT
Not After : Mar 7 10:50:07 2026 GMT
Subject: CN=6979e9e4-0f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:52:04:4b:16:15:df:c4:7d:94:0b:e0:e3:
26:b9:2f:71:d1:56:2f:03:b7:5d:ef:63:28:b3:c7:
0b:61:e1:93:9a:31:b3:14:65:37:b1:2d:82:c2:ea:
7d:a1:f5:c4:e0:bb:0d:b6:af:71:b8:1d:f2:f8:3c:
4d:ec:d7:55:b2:1d:7c:11:e2:29:06:de:63:59:25:
84:96:01:34:51:d0:a3:9c:a0:d5:c5:f9:53:94:d8:
6a:c2:ea:11:af:6f:8a:64:a7:bf:ed:df:25:b7:5d:
06:3d:af:dd:05:04:ea:e4:9e:3d:e8:39:f3:e4:a9:
ee:64:45:8c:7b:1b:4d:57:27:76:76:13:5d:d1:8d:
82:61:ba:61:a4:f2:f8:10:30:66:cd:d0:6d:08:1a:
38:20:53:e0:83:86:68:57:9d:91:5f:0d:a2:cd:8e:
d6:b8:1a:db:d5:14:56:99:38:28:c9:4d:24:6f:81:
d8:a1:6c:d0:04:a0:25:30:37:2c:98:75:49:52:34:
c9:a4:c8:3f:4e:b7:e9:84:b2:aa:55:53:03:2b:e0:
45:8d:8d:6d:ab:f6:4c:6c:f4:05:57:7d:6f:63:f1:
e9:b7:c3:17:f5:50:26:15:b6:2d:7e:ac:b7:75:05:
e7:03:91:6c:c4:0a:c9:b1:ab:20:52:fd:a6:ed:69:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:E4:66:04:03:AD:51:05:3A:69:81:A1:7D:EA:78:31:5C:48:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E8E2B02FC3711F09CEF42D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b5:2b:db:53:db:f9:37:97:42:5e:08:7f:27:12:b8:9d:04:
09:44:1e:d8:61:af:f0:ea:98:d8:71:1a:e3:cf:6e:00:3b:1f:
85:65:dd:41:40:28:d3:b6:45:d1:8d:22:0a:6a:d0:10:e6:6e:
e2:8b:88:54:3a:fc:49:4c:b8:a8:1d:c4:99:f2:e4:67:0a:86:
de:2b:4f:1f:f5:0d:6e:3e:26:d5:b6:ac:09:8e:32:4d:99:ee:
d7:21:d8:3c:04:50:e5:47:ff:ee:fb:68:dd:2a:f8:18:02:3e:
68:42:67:f9:9b:75:bb:07:93:e2:d5:ad:94:b0:2f:52:ec:e4:
56:47:ca:05:02:38:be:b5:41:3f:1b:e6:77:ab:40:91:08:38:
a6:6f:c0:06:ed:e0:3f:7f:d1:2d:2e:9f:fd:c3:2f:3f:df:98:
7c:ef:13:3f:4b:fe:9e:ab:24:91:e2:0e:5a:f0:57:06:88:e9:
41:86:2a:fa:71:66:6c:2e:36:e9:39:99:37:9a:9a:3f:a0:63:
c8:57:15:b7:f7:1c:09:9b:d6:12:01:1c:62:98:7b:05:e6:6d:
e1:ea:91:6b:19:64:d4:51:21:33:6b:bb:a9:d4:c6:da:7e:e6:
17:13:9a:d8:a2:58:45:23:7f:c4:5f:34:c6:8c:fc:19:8d:40:
bd:6d:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:10 2026 by rpki-client