Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A765F8413B911F1B47603CADAE4EC9C.roa
File: 4A765F8413B911F1B47603CADAE4EC9C.roa (raw, json)
Hash identifier: xkxjCUOSR768+YN/XCJxCEDB+JWhZxBOHvQHal2JfrM=
Subject key identifier: 8E:EE:50:D1:26:8E:24:21:04:03:A3:12:D9:19:55:BD:BC:C7:D9:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A10E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A765F8413B911F1B47603CADAE4EC9C.roa
Signing time: Fri 27 Feb 2026 08:49:56 +0000
ROA not before: Fri 27 Feb 2026 08:49:52 +0000
ROA not after: Wed 01 Apr 2026 08:49:52 +0000
asID: 11427
IP address blocks: 156.229.184.0/21 maxlen: 24
156.233.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106766 (0x1a10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 08:49:52 2026 GMT
Not After : Apr 1 08:49:52 2026 GMT
Subject: CN=69a15ab4-a7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:72:f2:4f:71:83:6a:fd:cb:74:21:3e:d3:
f6:d4:e5:3a:9c:4f:2a:98:87:97:96:82:f9:3c:5a:
fa:ed:6a:cf:73:ac:73:c1:59:cf:4a:8a:5c:ed:d9:
2f:a4:80:1c:b0:2b:e9:0b:20:e0:63:e8:49:1f:12:
fa:6e:fe:83:1b:32:48:9d:64:66:7b:28:c7:de:0a:
31:9f:68:b8:84:34:57:83:d7:fb:89:9a:a8:4a:ba:
e1:49:43:6b:f6:e6:dd:7f:ee:8f:43:a3:c8:59:e5:
3d:72:f1:22:9d:96:b3:b2:33:50:cc:d7:20:ee:98:
4e:f1:7d:a6:2a:d8:d0:89:68:f1:9f:02:29:12:58:
e8:18:b7:c0:9b:0e:d6:52:ff:f9:c6:70:a9:22:14:
1b:63:57:84:3b:ed:f2:b8:16:31:0d:8e:40:20:20:
c9:7f:66:f2:82:38:07:d9:a2:cb:aa:25:6f:1e:da:
49:11:b0:cb:f1:a8:63:a3:37:e3:bd:0f:7c:2a:55:
2f:ac:8a:07:f7:04:03:43:03:5b:0a:c7:07:fb:63:
d9:04:ab:fe:0b:c1:18:51:af:12:d1:86:d9:d3:11:
76:08:24:60:8a:a2:7d:b1:60:e7:d7:bc:e3:b8:b8:
9a:64:27:c3:91:e6:a5:64:48:0d:ca:9e:68:f4:4d:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:50:D1:26:8E:24:21:04:03:A3:12:D9:19:55:BD:BC:C7:D9:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A765F8413B911F1B47603CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.184.0/21
156.233.16.0/21
Signature Algorithm: sha256WithRSAEncryption
15:c6:4d:f2:23:81:ac:4d:37:a2:88:fb:08:a8:a0:1f:b2:e8:
33:f4:cc:cf:0f:b7:da:fc:a3:69:8c:28:97:13:ce:d8:a1:05:
75:9c:65:ad:16:85:6c:46:ac:01:be:25:3d:ce:dc:20:2e:83:
23:20:d8:9d:c2:0f:97:c6:24:89:14:4d:18:25:ba:07:ae:5f:
6b:85:74:04:54:14:51:35:f6:4e:b1:47:39:ae:e4:46:aa:63:
9f:8c:8f:45:7f:b1:92:b8:8e:c7:d4:99:83:64:ab:89:66:cf:
4f:3a:9c:a6:28:fb:d4:e2:0e:61:16:24:4a:25:7f:7f:23:1e:
6c:a3:d3:80:a2:a6:27:0b:6e:06:33:ab:90:51:15:0a:f2:ad:
79:4e:d2:0b:88:7a:2e:4f:92:de:d8:a1:b6:1d:f4:2b:b7:84:
05:a4:3e:f6:34:2b:de:2a:7f:56:60:f3:b6:1a:bb:69:b1:a2:
bc:3b:80:ec:e5:f5:e0:d8:d8:2c:dd:02:87:41:ff:4a:57:cb:
67:b0:ee:1f:b1:09:8c:4b:be:0b:c6:f2:b6:1b:37:60:7d:7d:
c4:cf:fb:1e:fc:8d:f8:64:04:68:07:f6:31:08:e0:2b:a0:88:
8f:98:09:7c:49:c0:b6:41:93:c0:c3:06:34:30:1d:0e:00:5d:
e3:ba:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:32 2026 by rpki-client