Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586A2AB80EF411F1A2143287DAE4EC9C.roa
File: 586A2AB80EF411F1A2143287DAE4EC9C.roa (raw, json)
Hash identifier: 8Ehrz9L/OyiwmAQKZwwW6z2jIrMQhr13h0jcPchbp6g=
Subject key identifier: 65:62:B4:2D:1E:70:2D:F6:57:56:C3:FE:F2:7E:E6:93:3F:24:7A:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586A2AB80EF411F1A2143287DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 07:10:04 +0000
ROA not before: Sat 21 Feb 2026 07:10:00 +0000
ROA not after: Mon 23 Mar 2026 07:10:00 +0000
asID: 64013
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106256 (0x19f10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 07:10:00 2026 GMT
Not After : Mar 23 07:10:00 2026 GMT
Subject: CN=69995a4c-813c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:04:16:95:4c:31:1e:37:91:cf:95:c6:8c:
1d:70:85:6d:79:39:9b:16:2e:7f:9c:6c:30:6c:a2:
93:fa:a0:3b:9c:7c:a7:59:15:c5:ca:65:e3:ba:e2:
d2:d7:af:31:b4:39:f5:67:7e:7d:ff:2a:07:24:f3:
3e:f3:99:96:0e:3f:6a:92:fb:4c:2c:b0:72:14:6e:
6d:2e:0d:8a:44:07:4d:d8:5f:15:57:2b:34:27:50:
16:e8:7b:c6:0c:a1:6b:56:56:d0:e7:5e:f9:6f:d5:
0d:8a:d6:0f:67:9a:dd:a4:47:57:eb:d5:75:e3:98:
8f:d6:a0:64:1b:47:d9:33:24:a3:f0:52:58:a7:05:
f8:be:3c:f8:57:e3:48:98:1e:09:b2:97:b4:da:09:
40:f0:ad:f2:90:fa:74:70:a4:32:68:1c:2f:d1:4d:
95:8f:e0:45:7a:47:d1:db:fb:9a:d4:56:75:cb:fd:
bc:1c:46:2d:a3:0a:b8:b9:42:8c:88:cf:33:86:66:
a3:7e:53:6a:04:9c:1a:f5:7b:50:99:a1:e0:09:e4:
33:5f:2b:70:d9:dc:df:cf:f1:99:14:58:78:8d:30:
cb:23:92:25:0e:15:9e:38:b6:e9:1f:5b:6e:71:4c:
22:cc:78:20:ef:97:15:cc:37:9e:66:a4:82:ea:19:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:B4:2D:1E:70:2D:F6:57:56:C3:FE:F2:7E:E6:93:3F:24:7A:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586A2AB80EF411F1A2143287DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:64:76:46:f3:6a:11:3e:6d:fa:b5:65:88:11:94:4e:0b:d2:
5e:c2:9b:44:65:75:69:cc:b9:8e:ad:51:ba:41:f0:02:4b:5f:
ff:18:5d:b4:da:c5:c8:7b:9f:c0:66:5f:bb:e2:2d:86:5d:77:
c1:62:45:83:ad:d7:3f:33:c8:ee:04:27:97:c3:57:22:34:66:
fa:95:e4:ae:db:4b:86:24:51:a6:75:f0:ae:1e:fe:5b:c6:4a:
32:e9:1a:84:84:d6:37:f6:07:90:a0:a1:3d:b9:7a:9c:ca:d1:
39:ce:97:ae:ee:78:8c:f9:41:d9:34:14:68:ca:e9:06:20:0a:
a8:0e:74:12:57:7c:42:c0:09:24:72:3e:f1:44:89:ec:ee:b5:
62:96:59:00:bd:80:9c:98:ed:79:91:82:7a:7d:41:11:3c:44:
09:1b:9d:01:6b:a3:69:26:19:dd:64:03:03:e3:7b:26:2e:b8:
ae:03:06:ed:5d:fc:62:b1:ed:5c:52:2f:27:a1:98:a2:bd:29:
72:3c:d2:a5:6c:0c:d3:f0:62:5d:44:cd:a2:65:91:18:a2:d8:
65:57:fa:59:be:90:86:69:00:c4:60:74:b1:05:6f:70:f0:55:
83:d5:ae:b1:20:85:0a:e9:3f:9b:e6:06:b2:14:ee:4d:3e:c5:
37:1e:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:38 2026 by rpki-client