Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34C9F8D612E111F19E58E899DAE4EC9C.roa
File: 34C9F8D612E111F19E58E899DAE4EC9C.roa (raw, json)
Hash identifier: QGmNVgRVgCQZgjkIknOE4BBKrDI7bzMhBuNvHGiiJ1c=
Subject key identifier: 43:6B:B7:7E:CD:A2:21:32:4A:AB:71:1A:87:4D:DE:A0:03:47:38:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A09B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34C9F8D612E111F19E58E899DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 07:03:09 +0000
ROA not before: Thu 26 Feb 2026 07:03:05 +0000
ROA not after: Sun 29 Mar 2026 07:03:05 +0000
asID: 214143
IP address blocks: 156.230.136.0/21 maxlen: 24
156.231.13.0/24 maxlen: 24
156.231.176.0/21 maxlen: 24
156.249.192.0/23 maxlen: 24
156.249.198.0/23 maxlen: 24
156.249.210.0/23 maxlen: 24
156.252.27.0/24 maxlen: 24
156.252.28.0/24 maxlen: 24
156.254.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106651 (0x1a09b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 07:03:05 2026 GMT
Not After : Mar 29 07:03:05 2026 GMT
Subject: CN=699ff02d-5f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:d2:db:e0:31:76:ff:32:fb:3d:5f:64:a5:
59:c0:d3:8e:fb:38:1f:3a:9e:cf:f7:e8:02:0c:f7:
71:ba:fa:15:33:1e:62:0d:55:12:5b:85:ee:a3:e3:
ba:07:93:bc:eb:d3:b7:2b:d1:2a:36:90:6d:84:60:
bf:ce:cb:8b:b5:8a:ed:ea:96:01:ad:5c:78:5d:4a:
e4:cb:ba:d3:d8:a0:eb:36:50:20:8c:91:46:a1:ad:
8d:9c:10:06:d6:7c:17:ca:cf:d9:de:8d:04:6e:bd:
9b:1f:14:22:f1:c2:4c:8d:3b:4a:83:09:25:c1:75:
9d:f1:b1:a6:eb:69:08:32:69:cf:07:75:e9:dd:9a:
20:17:e9:a2:25:04:4f:7d:91:54:68:3a:b3:8d:49:
2f:c7:5a:62:f3:78:9f:e1:3a:2d:a6:df:d3:e5:0e:
8a:5f:cc:fa:1c:ca:3d:26:fd:9f:a0:cc:6f:34:fb:
39:75:a3:b9:9d:d6:b2:98:81:5a:08:b7:26:8b:fb:
a7:3c:a6:1e:47:e0:4d:d3:f0:ce:4f:b8:01:99:ef:
db:ae:75:4d:80:37:bd:48:9e:6b:40:9b:f0:d6:5d:
cd:24:c9:b8:ff:75:9f:cb:ad:75:ac:f3:b6:12:77:
97:6c:6b:8a:e4:c2:9c:f5:02:e9:5b:97:eb:cc:f0:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:B7:7E:CD:A2:21:32:4A:AB:71:1A:87:4D:DE:A0:03:47:38:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34C9F8D612E111F19E58E899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.136.0/21
156.231.13.0/24
156.231.176.0/21
156.249.192.0/23
156.249.198.0/23
156.249.210.0/23
156.252.27.0-156.252.28.255
156.254.112.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:15:98:d8:38:d3:3c:fc:79:b9:2b:d5:a8:ed:4a:72:2e:f4:
33:f2:6b:8d:17:0e:76:c8:f9:c6:c1:70:75:13:27:bc:c6:e4:
6f:63:dc:1e:91:67:c3:78:e4:ea:9f:f9:bb:f0:09:cc:9f:96:
22:9a:ce:54:8c:40:c8:5a:e8:2a:13:69:0d:5f:88:d7:94:fb:
75:4a:aa:81:49:09:f1:8a:2b:63:30:00:7e:cf:8a:13:58:be:
92:1c:b3:f7:4e:d9:25:3c:e4:47:8c:96:4b:32:00:64:fa:ac:
4b:94:55:a5:6a:45:52:49:d4:47:f1:aa:27:95:1c:a2:74:5c:
d4:46:35:c6:66:7e:b0:26:3a:51:b3:c0:ba:1e:98:be:4c:69:
1c:d7:2d:74:6c:5c:16:d7:44:cf:25:6e:82:4b:54:1f:cf:ff:
e3:c6:f2:11:23:aa:27:3b:78:3b:f9:2e:72:49:44:04:f4:2c:
d3:ac:6b:75:fb:62:51:c0:f6:32:84:95:1c:c5:fe:ea:d4:26:
4f:d3:07:47:32:68:bd:1c:c6:99:c1:55:ad:6a:1b:24:11:a6:
62:59:3a:ff:03:6c:ec:e3:04:17:73:80:15:c9:6e:42:fb:23:
ff:33:0e:1d:b2:90:53:53:28:7e:04:23:34:ac:93:10:36:50:
17:d1:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:29 2026 by rpki-client