Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5429F632040311F1836A2CC0DAE4EC9C.roa
File: 5429F632040311F1836A2CC0DAE4EC9C.roa (raw, json)
Hash identifier: drWqjvPiV6WcnjvLrxQJmswYx4VFhRmIRLxyq4M+SYQ=
Subject key identifier: 73:37:DA:1B:C3:6D:B9:CB:F0:6E:59:4B:34:B0:9A:53:C3:3C:80:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5429F632040311F1836A2CC0DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 08:59:37 +0000
ROA not before: Sat 07 Feb 2026 08:59:31 +0000
ROA not after: Fri 13 Mar 2026 08:59:31 +0000
asID: 20473
IP address blocks: 156.231.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105513 (0x19c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 7 08:59:31 2026 GMT
Not After : Mar 13 08:59:31 2026 GMT
Subject: CN=6986fef9-15c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:4d:a2:ee:d4:91:ec:f9:9b:12:3f:fa:0e:
64:c3:08:c0:de:eb:37:bc:e8:e0:4d:f1:0c:b4:c3:
86:32:4b:0d:58:f8:d8:0e:c6:83:1d:eb:ac:56:58:
3e:55:66:72:35:52:12:9d:a9:cc:a2:04:8f:4d:b2:
cd:84:7d:70:10:cc:7e:49:c9:86:98:7e:c0:b9:92:
b6:50:cf:b3:99:80:fb:03:bb:df:94:97:84:58:43:
c2:32:b9:c8:cb:10:da:e5:02:88:c2:49:6b:26:d3:
70:f8:bf:2e:96:14:1f:81:64:49:cc:d8:52:e8:5e:
c7:3f:bf:50:7b:19:91:3c:1d:e7:d3:16:81:e0:84:
6f:de:67:27:60:26:ae:b7:a3:6c:d2:f4:bd:4a:fa:
88:b6:5c:3d:fe:7e:77:3c:c0:20:8e:51:1f:74:00:
44:09:77:cf:4a:47:18:8e:1a:fa:f8:5b:32:79:8b:
70:6b:03:85:c3:b8:e5:73:90:76:ce:75:dc:b6:4c:
ba:1e:95:d0:ca:81:f5:c3:6f:b0:5f:5b:2e:41:08:
e8:fb:08:53:46:61:bc:f5:fe:4e:55:61:92:9f:b1:
de:b9:7a:98:09:77:5b:17:f6:a6:04:bb:a8:db:af:
48:01:bf:32:ab:63:c4:53:62:48:11:17:72:7e:e8:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:DA:1B:C3:6D:B9:CB:F0:6E:59:4B:34:B0:9A:53:C3:3C:80:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5429F632040311F1836A2CC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.10.0/24
Signature Algorithm: sha256WithRSAEncryption
28:84:1c:b5:82:a1:e8:e2:83:d3:54:d3:90:7d:f9:9f:69:b4:
a6:31:ab:45:78:ec:c2:cf:59:97:75:3c:bb:0d:3a:4e:d2:06:
60:94:44:30:9f:db:0e:1c:74:df:ff:61:d8:c2:6c:69:4e:d9:
c5:9d:32:a9:60:a3:c5:11:61:7b:51:4c:2c:20:30:eb:1f:d5:
c4:ea:30:50:ec:64:aa:13:85:8a:7a:36:25:de:43:59:3e:04:
35:9f:a5:cb:c8:f1:38:5a:ac:da:44:82:02:4f:08:64:c3:8b:
97:31:29:93:0f:19:cd:b1:f7:e1:76:27:1b:16:c1:16:1d:c7:
4c:e2:31:ce:c1:63:d9:54:54:a6:a9:f9:de:dc:86:d1:7e:d8:
81:45:2f:e7:37:6a:6b:4a:09:ae:ed:8e:f4:8d:6c:4f:4c:5a:
15:7b:9a:5d:e5:63:eb:2b:30:10:47:f1:58:9b:b2:2b:14:17:
5a:85:97:85:5b:ac:13:e9:f7:1d:90:be:c8:87:e7:bb:b2:6c:
28:70:b9:5e:3c:dd:ee:48:5d:f0:fc:3e:9c:23:b3:8c:3a:af:
b7:e3:bb:fb:3f:a7:32:46:67:94:11:3a:98:24:2f:2b:60:17:
1f:86:31:1d:df:51:21:e3:8e:e4:bc:3f:44:16:19:f4:cc:00:
2b:48:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:35 2026 by rpki-client