Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3698C36C2F3E11F1A6BFAD85DAE4EC9C.roa
File: 3698C36C2F3E11F1A6BFAD85DAE4EC9C.roa (raw, json)
Hash identifier: pK/piT+649up+8sY26CCpPcKc/6hqxX4VKc8PLBhg78=
Subject key identifier: 47:27:2D:C9:B2:7E:B7:73:F6:3A:70:8C:FF:0C:A0:09:B8:0C:83:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3698C36C2F3E11F1A6BFAD85DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 09:19:28 +0000
ROA not before: Fri 03 Apr 2026 09:19:23 +0000
ROA not after: Tue 03 Apr 2029 09:19:23 +0000
asID: 17561
IP address blocks: 156.225.60.0/24 maxlen: 24
156.225.62.0/24 maxlen: 24
156.225.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108977 (0x1a9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 09:19:23 2026 GMT
Not After : Apr 3 09:19:23 2029 GMT
Subject: CN=69cf8620-29dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:b5:f9:0a:e1:70:83:78:45:13:98:a1:28:
a7:c6:64:67:ef:37:38:ee:b9:a6:8d:1a:65:8a:79:
9c:7c:1a:47:dd:37:a9:ad:0d:3e:d3:a4:80:49:9e:
7e:13:35:a2:1d:4c:63:4f:16:96:7a:d6:f7:b5:cc:
a5:1d:6d:ce:37:8d:a2:50:42:b1:b3:46:b6:a8:43:
b1:d2:c0:a6:5e:65:5a:d1:d6:13:a6:43:6d:e1:e7:
4e:28:0b:83:0a:cc:26:dd:5d:33:e8:65:03:0d:c2:
3f:ea:9e:cf:4f:50:69:12:60:64:f9:71:75:38:c9:
0c:83:d0:80:12:4d:a3:47:dd:32:5f:52:8d:d7:1f:
f2:7a:06:05:ca:d0:d3:25:52:18:ca:2d:6c:6d:5c:
9c:d8:cd:72:bb:dd:fb:1a:6d:03:1e:ef:62:e4:0b:
58:19:d5:31:82:5e:38:a2:ab:1d:e9:9e:0f:a4:9b:
94:8e:62:84:82:73:e8:5a:e5:fc:03:2f:b0:44:fc:
52:74:bf:48:6b:b6:19:93:79:a9:47:fa:8d:8a:2f:
72:39:c1:4f:7e:30:c7:5f:a7:95:39:1b:3a:3d:be:
aa:f6:0b:50:f4:7b:ee:3b:5f:c2:dd:de:f9:c3:6c:
a9:ce:6b:fd:6a:fb:56:61:06:df:60:7e:0d:c1:cf:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:27:2D:C9:B2:7E:B7:73:F6:3A:70:8C:FF:0C:A0:09:B8:0C:83:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3698C36C2F3E11F1A6BFAD85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.60.0/24
156.225.62.0/24
156.225.190.0/24
Signature Algorithm: sha256WithRSAEncryption
71:34:6f:3b:4c:e3:01:2d:8f:bf:10:fb:e8:76:f5:fa:40:31:
07:71:fe:05:72:bb:1f:22:69:54:88:c6:9a:72:6b:a2:25:28:
08:45:83:d0:9b:98:ad:02:40:b1:0c:2f:d4:f6:68:9e:3e:93:
55:d2:8e:e9:d5:14:f7:fb:10:10:da:7a:6c:aa:21:3f:30:af:
1e:22:a5:91:90:90:1e:6d:5b:04:14:b3:f7:49:41:88:de:a4:
30:53:5c:27:78:f1:0d:5a:12:35:34:87:53:cd:cf:8d:f6:fe:
42:14:82:66:51:21:b1:58:c1:3c:06:9f:4c:77:0e:43:cd:0e:
a6:d9:4a:8b:e9:ec:1e:fd:b7:0d:4d:91:f0:c5:f3:a5:fe:6b:
31:d1:35:11:b9:6f:7b:31:21:82:1a:a9:fb:11:97:d7:2c:9f:
92:57:d7:32:01:0c:74:f3:93:5a:48:47:cd:07:15:ae:20:b1:
d6:07:90:79:04:cc:4c:3f:86:a3:0e:d5:2b:77:41:04:14:1f:
2a:aa:15:4a:30:a0:be:ae:ad:49:55:f1:b3:da:e6:73:51:47:
bb:d6:53:cd:da:ab:64:49:5c:94:f4:25:24:f7:bd:a4:81:bc:
77:03:ef:12:ab:01:8a:bb:fd:99:23:01:20:92:c9:6a:c9:3c:
35:67:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:11 2026 by rpki-client