Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DAFE034066A11F1958F4D80DAE4EC9C.roa
File: 2DAFE034066A11F1958F4D80DAE4EC9C.roa (raw, json)
Hash identifier: v1saoHMOAzsSYwNkWRiMpKhNi4gLG9uZomeSPn0syM8=
Subject key identifier: 89:0B:B8:9D:45:86:09:77:28:06:5F:6F:C4:1D:7A:59:33:FC:41:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DAFE034066A11F1958F4D80DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 10:20:53 +0000
ROA not before: Tue 10 Feb 2026 10:20:47 +0000
ROA not after: Thu 02 Apr 2026 10:20:47 +0000
asID: 62563
IP address blocks: 156.233.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105625 (0x19c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 10 10:20:47 2026 GMT
Not After : Apr 2 10:20:47 2026 GMT
Subject: CN=698b0685-319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:f2:49:88:50:30:a5:b9:1e:14:ba:48:3a:
23:0b:a2:4e:44:e3:0e:71:0e:51:79:66:9f:34:82:
70:da:10:07:42:4d:2a:d4:8a:a4:27:31:17:f1:aa:
d4:62:f9:4f:8b:f6:41:6e:d0:17:3c:93:99:31:f0:
dd:35:14:b4:f9:51:5f:48:8c:fe:ac:e2:18:20:76:
ec:32:7f:6e:84:93:a7:6e:d2:cd:5e:67:fb:eb:d3:
68:91:09:e6:91:4a:ef:59:f8:1a:9c:ca:5e:00:a5:
a3:80:a6:11:c6:57:d4:db:a0:74:2f:0c:14:76:12:
0b:c5:8e:55:17:39:52:1f:73:82:55:62:66:91:f5:
e4:47:6d:4d:87:3d:4a:ae:34:09:e0:0d:2b:da:d1:
7c:0b:a8:5e:7d:fb:da:68:42:8f:29:ed:8c:a5:14:
cd:a4:8a:82:ca:5c:e0:a9:90:3a:d4:94:a7:3c:2f:
8a:b1:bf:ce:28:82:3f:67:58:e5:3e:5c:47:1c:72:
eb:09:12:4d:95:63:95:19:35:0b:1e:70:f9:3b:4f:
04:cc:f3:d3:7c:27:08:88:d8:0f:8f:d7:57:93:59:
5a:c9:06:ae:9a:ed:7c:ef:76:93:01:14:d6:d6:47:
41:bd:e1:69:99:9d:75:c9:3c:01:11:48:fc:83:8f:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0B:B8:9D:45:86:09:77:28:06:5F:6F:C4:1D:7A:59:33:FC:41:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DAFE034066A11F1958F4D80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ce:f8:34:94:0d:95:23:24:3f:1b:ff:a6:ab:8c:1a:a4:a8:
f6:10:5f:51:c0:82:72:92:d5:13:08:67:92:74:a0:2f:b4:a8:
61:96:3e:54:37:66:43:72:cc:c8:e9:e0:bf:4e:4a:ed:ef:6d:
53:8b:63:da:85:b1:35:f4:89:84:0a:05:a6:87:99:30:07:9c:
b3:2a:77:03:e7:90:61:f7:a3:6b:eb:62:31:6a:eb:a9:08:7f:
1d:33:74:e0:d9:b2:13:03:25:ff:63:21:98:a5:84:4f:5b:c4:
a0:46:d7:e2:78:22:28:ac:99:6b:0c:cd:84:b9:57:68:00:41:
35:8d:e8:90:3a:98:31:0d:f4:37:54:c3:05:77:4e:26:4b:bf:
e1:d5:e6:1c:33:d2:6c:52:8f:2f:63:03:3e:d6:3c:02:ed:8b:
18:b4:4e:f4:47:b1:4c:f8:ec:0c:c0:46:61:26:f5:fb:13:cd:
2c:ed:d3:4d:fa:0c:59:81:05:2b:1b:5a:8b:3d:f1:e5:39:19:
45:0b:98:e1:c9:5c:85:90:e6:55:34:4e:66:20:b4:03:f2:41:
9a:f8:5c:30:bf:a4:6b:73:4b:a8:6f:fc:31:cf:7a:b4:12:72:
8f:94:4f:d8:28:10:75:22:cc:37:fc:99:c1:0a:b6:0d:80:29:
2a:45:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:46 2026 by rpki-client