Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23571EAE2AE611F19138DAE3DAE4EC9C.roa
File: 23571EAE2AE611F19138DAE3DAE4EC9C.roa (raw, json)
Hash identifier: 2o6wTO2DDyLMQCiYUBGFTcSVELkLRTUys4QKRqujXQo=
Subject key identifier: 6B:62:3B:EE:BC:72:B6:BF:D3:F4:80:01:9B:FD:AC:63:79:86:0D:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A881
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23571EAE2AE611F19138DAE3DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:38:55 +0000
ROA not before: Sat 28 Mar 2026 20:38:50 +0000
ROA not after: Fri 22 May 2026 20:38:50 +0000
asID: 395886
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108673 (0x1a881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 20:38:50 2026 GMT
Not After : May 22 20:38:50 2026 GMT
Subject: CN=69c83c5f-b3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:14:bd:60:9b:19:de:80:4b:4f:b1:18:7c:
5d:de:4b:32:95:ab:0e:12:99:09:7b:e0:63:fe:bc:
11:d5:f5:f9:af:65:44:5c:d8:ca:61:ee:57:5f:54:
71:ee:dd:66:17:f3:13:33:68:0c:4b:bd:fe:b1:2e:
82:d8:29:1a:86:1f:91:4f:f7:c6:8a:1a:06:ac:08:
8c:ca:01:15:e0:22:6f:4a:3d:66:9e:2a:e6:f0:54:
0b:58:52:6a:15:a6:0b:13:ef:62:21:d0:73:40:43:
78:64:90:3b:89:8e:2c:47:35:18:12:67:ba:ae:00:
6d:59:6f:a5:d7:7a:3b:b7:b7:1a:14:13:74:cd:61:
0d:b2:d3:e6:be:85:5f:b5:79:63:a2:15:33:28:9a:
7d:78:1b:eb:9d:d0:29:a9:9c:b5:34:f7:af:39:11:
b3:98:b7:93:5c:e9:05:c1:73:89:55:5e:3c:23:f5:
a6:18:ed:7d:47:d6:b8:ca:0d:a2:95:59:81:f3:af:
5e:db:08:3b:2a:45:99:de:d8:82:36:a7:0e:15:b5:
66:0d:3e:0a:02:43:69:84:20:04:bd:91:d5:3e:3c:
87:ec:dc:48:34:34:43:26:65:fc:c8:cb:af:bf:52:
75:2a:aa:c2:c8:f6:d6:f3:1e:c3:11:f8:6d:9d:10:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:62:3B:EE:BC:72:B6:BF:D3:F4:80:01:9B:FD:AC:63:79:86:0D:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23571EAE2AE611F19138DAE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:1d:16:9c:fa:8f:a3:ac:81:dd:ec:6e:dd:e3:d9:db:09:b2:
ee:d1:35:20:ed:11:75:6e:4c:49:dc:a4:0e:39:a5:de:08:23:
64:be:60:8b:4f:57:16:3b:81:ab:90:40:02:94:eb:76:63:f3:
41:1f:af:18:df:e8:1e:24:eb:f4:2d:39:45:36:d4:64:cb:26:
9b:00:8a:87:b1:a3:5b:d3:51:a7:ea:15:fb:bd:92:36:f9:0b:
a3:24:85:7e:c3:9f:3a:ad:60:c8:74:a1:10:e9:91:c9:c6:cc:
48:ff:0c:82:45:f1:82:f0:8a:fd:41:54:01:f1:92:dd:db:22:
66:61:a0:8c:4f:23:83:8b:04:d0:2b:9c:f8:02:2e:ee:0e:41:
a1:34:d2:ea:dc:22:a3:66:87:86:79:8b:38:76:93:7d:62:15:
d0:f0:22:4c:a1:6d:2d:d0:0f:6b:52:8c:ea:de:9e:79:51:3c:
00:da:27:28:fa:75:e9:c5:b6:99:89:fe:1a:39:9f:ca:e3:ea:
f1:21:d0:cf:18:44:32:bb:cb:0a:87:2e:e1:63:6d:1c:e9:c6:
29:54:16:96:97:5b:2e:ca:22:5d:13:8d:5c:c1:91:96:fb:f2:
99:43:df:cc:8e:59:ab:04:a0:bd:7f:c7:c0:8a:28:d9:b1:5e:
92:f5:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:29 2026 by rpki-client