Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31FED3F8118611F1BCC9EFC2DAE4EC9C.roa
File: 31FED3F8118611F1BCC9EFC2DAE4EC9C.roa (raw, json)
Hash identifier: rONv3NB8iOEogXIq6/osahi9EPRhtdTF7d2k3ZP0xAM=
Subject key identifier: 45:2D:17:36:0E:A7:1E:EB:24:4E:E6:70:FB:07:12:EC:BD:87:6B:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A025
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31FED3F8118611F1BCC9EFC2DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 13:39:09 +0000
ROA not before: Tue 24 Feb 2026 13:39:03 +0000
ROA not after: Tue 31 Mar 2026 13:39:03 +0000
asID: 44559
IP address blocks: 156.233.35.0/24 maxlen: 24
156.233.40.0/24 maxlen: 24
156.233.46.0/24 maxlen: 24
156.233.49.0/24 maxlen: 24
156.233.50.0/24 maxlen: 24
156.243.227.0/24 maxlen: 24
156.243.231.0/24 maxlen: 24
156.243.233.0/24 maxlen: 24
156.243.234.0/24 maxlen: 24
156.243.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106533 (0x1a025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 13:39:03 2026 GMT
Not After : Mar 31 13:39:03 2026 GMT
Subject: CN=699da9fd-ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:d1:07:9e:e7:ea:15:87:2d:2f:d6:54:1e:
64:7e:de:43:66:06:7d:4e:a8:48:dd:9c:ff:d8:98:
73:45:b1:c7:d8:dd:bd:6c:77:ec:bd:4d:76:29:7d:
8b:4f:8d:91:f1:b9:e1:6e:92:1a:08:1c:f7:0c:2a:
4d:64:04:aa:39:d8:a0:1f:94:d4:6e:df:63:fd:7f:
00:0d:cc:09:76:ca:0c:39:5d:22:3b:96:df:91:ba:
13:e5:bc:b0:ef:d3:bf:b5:c2:35:6d:88:1f:88:d3:
08:c2:3f:74:64:b3:48:16:c7:27:ca:2d:a4:80:fa:
62:e9:46:d0:ca:ce:55:b9:46:1f:53:c3:8e:10:7a:
bd:a7:f6:5d:e5:79:c1:5d:39:ae:fd:43:e3:cd:ba:
68:ba:7f:db:4d:50:cf:ea:d6:89:b3:12:f3:16:9d:
53:b1:de:f2:38:8e:cc:4e:74:3a:36:d6:01:12:0d:
0f:cb:d2:a8:ec:1b:80:28:f5:50:c4:44:90:40:50:
fe:75:3d:d9:16:6e:c4:8a:10:7a:4d:2a:f2:c6:f5:
d1:3e:0e:59:aa:44:93:37:5d:da:63:33:79:f3:c7:
6f:43:c2:ff:4a:42:ba:7d:26:40:58:45:72:b7:5c:
e1:93:aa:c2:c6:b0:04:d0:c7:f9:e8:20:d8:a7:6e:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:17:36:0E:A7:1E:EB:24:4E:E6:70:FB:07:12:EC:BD:87:6B:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31FED3F8118611F1BCC9EFC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.35.0/24
156.233.40.0/24
156.233.46.0/24
156.233.49.0-156.233.50.255
156.243.227.0/24
156.243.231.0/24
156.243.233.0-156.243.234.255
156.243.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fa:15:69:5f:8a:bd:e4:cf:47:0c:53:57:0f:4b:64:20:e1:
7e:c8:1d:6e:df:2d:e5:b5:67:2a:dc:36:c2:34:13:9c:68:50:
fe:34:7c:46:6f:ae:16:a8:91:6e:51:f6:c7:56:35:96:8b:ef:
7e:a9:d0:68:dd:0f:78:98:5a:c9:ee:4a:07:99:26:23:6d:29:
13:a5:7e:58:a8:24:f2:87:22:3b:64:8e:af:78:3a:97:40:fe:
71:3d:b6:8f:c0:a2:38:33:02:96:f3:ae:0e:49:c9:1e:ea:fd:
7b:ed:c0:cf:34:e1:89:18:fd:30:9b:96:37:fb:8b:28:66:8a:
e7:9c:1e:05:98:bf:af:c5:4d:89:b8:5a:ee:41:10:2b:5a:21:
f8:34:39:90:30:04:62:99:a6:b9:a6:e0:6c:13:44:56:49:1e:
b9:e0:da:2a:6c:ba:ac:0a:fa:9b:e6:49:a1:02:1f:b8:47:25:
6b:71:9c:ef:0e:b9:89:a9:ea:a8:7a:58:54:da:1a:fd:5f:34:
da:7e:d5:20:3b:0b:2c:4b:e0:95:fc:73:6a:d5:55:14:f7:a9:
f4:d8:af:d8:72:c5:f6:b8:21:15:06:b8:e5:ad:e6:13:96:1a:
c3:1a:0a:f1:d6:c3:a0:67:7d:63:41:07:73:d7:5c:d9:83:68:
44:e9:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:50 2026 by rpki-client