Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3B7F5E13CD11F1B65778C0DAE4EC9C.roa
File: 3B3B7F5E13CD11F1B65778C0DAE4EC9C.roa (raw, json)
Hash identifier: LmlfEVZaVsQVVLZ8jNbudTEJaFdUsRgc1mq1LbU44NY=
Subject key identifier: 29:81:91:8E:F2:0C:F4:B3:0A:85:8E:4F:AD:33:A8:30:22:1A:B0:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A128
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3B7F5E13CD11F1B65778C0DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 11:12:41 +0000
ROA not before: Fri 27 Feb 2026 11:12:36 +0000
ROA not after: Mon 09 Mar 2026 11:12:36 +0000
asID: 9294
IP address blocks: 156.236.32.0/19 maxlen: 24
156.239.64.0/18 maxlen: 24
156.244.160.0/19 maxlen: 24
156.244.224.0/19 maxlen: 24
156.247.64.0/18 maxlen: 24
156.250.32.0/19 maxlen: 24
156.252.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106792 (0x1a128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 11:12:36 2026 GMT
Not After : Mar 9 11:12:36 2026 GMT
Subject: CN=69a17c29-6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:23:b4:ad:68:01:7c:0d:bf:44:fe:49:a8:
7f:8e:de:2f:1e:9b:4b:d8:37:d5:75:40:09:39:8c:
0f:93:48:b7:34:be:8d:a2:e9:b3:de:5c:0a:aa:08:
96:a3:90:49:82:1c:6d:ed:dd:25:a4:8b:97:1c:65:
46:14:61:f0:f8:38:36:f5:b2:eb:23:28:30:6d:2b:
40:5b:26:37:5a:81:c0:7c:2b:3b:2b:88:ff:55:e6:
64:60:18:b6:ba:ec:98:dd:8c:7d:24:08:75:e9:98:
24:5e:37:c6:85:ac:cb:8d:c5:99:c3:6f:f4:0b:86:
d7:8d:b0:c8:51:a3:ac:c6:fd:cc:d0:48:6e:ad:0f:
2d:12:50:e5:1c:b7:da:e4:bb:26:a1:ea:16:0b:52:
ed:ca:0b:71:df:62:d5:5b:db:de:9a:3d:10:99:01:
e6:8b:07:f2:7a:db:e0:5a:3b:6f:96:0b:8f:3b:7b:
5b:d7:b7:f5:c0:0e:72:99:3b:92:12:4d:ce:c1:2b:
da:e5:a9:ee:e8:a1:c1:cd:df:df:ed:82:e0:81:cf:
ef:37:91:29:25:90:b4:99:c4:33:cd:e9:a6:20:61:
f4:d7:5c:7d:18:e8:c9:83:9b:4f:f6:b8:18:12:2b:
4a:1f:42:3f:fe:fe:e0:83:44:dd:03:0c:b2:f7:9d:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:81:91:8E:F2:0C:F4:B3:0A:85:8E:4F:AD:33:A8:30:22:1A:B0:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3B7F5E13CD11F1B65778C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.32.0/19
156.239.64.0/18
156.244.160.0/19
156.244.224.0/19
156.247.64.0/18
156.250.32.0/19
156.252.32.0/19
Signature Algorithm: sha256WithRSAEncryption
77:0c:6a:46:20:6a:b4:c8:1f:bf:80:b0:53:e5:66:14:a4:c9:
17:25:83:65:78:41:ce:f4:52:f7:14:a4:d1:bb:2b:7e:03:31:
d9:b1:5b:c3:b8:ac:0b:ad:2a:44:43:33:fe:63:ab:f0:60:bc:
13:0f:85:65:df:c0:5f:34:97:a4:4e:36:49:d6:c6:e0:35:b3:
99:3b:64:ec:4a:c5:73:a6:3c:bf:07:2b:9f:5e:60:3b:e1:d6:
87:12:2d:62:2f:c6:69:b3:a1:02:da:09:f7:0b:fe:eb:b1:19:
2c:5f:78:06:71:f0:03:98:bf:1e:eb:ea:38:3e:26:02:b4:3e:
34:14:cc:c5:4b:29:7d:e1:67:5b:01:f1:46:83:e4:86:52:05:
17:c3:6c:38:c2:04:c6:7e:78:25:c1:c1:63:de:d4:20:01:ab:
a4:f8:3c:46:f1:7b:ec:e5:34:a2:96:bf:be:3d:72:9a:7c:04:
e4:77:4c:95:6c:5b:24:97:47:8f:55:02:60:f3:0d:22:0d:e4:
d5:9e:fc:b8:89:f0:cb:b2:b7:12:6d:b6:f7:fc:51:f0:6f:c5:
23:0c:65:f1:fc:84:61:1f:15:32:ef:35:e7:3d:de:09:55:ba:
c8:a6:57:2c:4d:f9:e0:46:73:8e:e5:9f:c3:64:b2:9e:cf:26:
52:74:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:18 2026 by rpki-client