Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5952BDC6071711F18313B9ACDAE4EC9C.roa
File: 5952BDC6071711F18313B9ACDAE4EC9C.roa (raw, json)
Hash identifier: IUtvwjVMyEmqMG8fXvW3wPcExmLdUO7emgSPNkP+EHo=
Subject key identifier: C0:02:F2:C1:39:58:A7:D9:BF:BC:DA:27:C2:03:D9:5D:CE:A5:6A:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5952BDC6071711F18313B9ACDAE4EC9C.roa
Signing time: Wed 11 Feb 2026 07:00:29 +0000
ROA not before: Wed 11 Feb 2026 07:00:24 +0000
ROA not after: Mon 16 Mar 2026 07:00:24 +0000
asID: 150706
IP address blocks: 156.255.2.0/23 maxlen: 24
156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105668 (0x19cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 07:00:24 2026 GMT
Not After : Mar 16 07:00:24 2026 GMT
Subject: CN=698c290d-54a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:ae:e1:51:2e:87:c8:df:4b:03:1d:0a:7a:
07:d8:d8:55:4c:28:8a:1c:c2:ed:c7:a8:16:7c:50:
3d:9f:9b:46:a4:18:6b:43:fa:64:af:e9:98:47:64:
03:89:2f:02:8b:48:de:c6:45:82:33:01:a2:f2:16:
63:04:2f:ad:3c:0b:11:3c:d3:c0:26:20:20:4a:a7:
c8:78:13:d2:08:92:86:b7:cb:f5:38:50:1b:55:98:
f4:be:54:c0:de:d7:83:3f:84:45:0a:3e:4b:df:1f:
b0:d2:f0:74:f2:be:7d:e5:8c:3d:0e:f9:7b:2e:f0:
33:76:09:3f:d4:83:f0:41:c9:f7:46:c7:b9:2f:45:
dd:fb:ba:cb:2c:86:3c:8b:a9:54:d8:f9:81:cb:67:
5c:ea:89:86:0a:30:36:43:0e:bc:32:f1:c2:e5:b3:
9e:da:ea:20:98:61:e3:7e:5e:1f:38:fe:ea:8b:ca:
28:35:64:4c:a1:cf:b2:e7:4a:02:cd:75:a8:a8:97:
3e:60:c1:d8:c6:ed:1f:a9:f5:40:d6:d2:0a:a5:52:
48:bb:ef:82:54:5b:d0:2a:37:20:16:b0:4c:cf:f0:
ea:54:9f:2b:d8:6c:30:40:a1:49:8c:63:b5:55:16:
7b:64:2e:8f:74:ca:ac:e7:e1:aa:c4:a4:67:59:57:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:F2:C1:39:58:A7:D9:BF:BC:DA:27:C2:03:D9:5D:CE:A5:6A:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5952BDC6071711F18313B9ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
23:50:ca:be:70:f4:70:53:bf:eb:11:cf:76:f0:8e:e7:cc:19:
1b:2b:b7:e3:78:a6:fb:30:45:9a:9f:51:ca:17:c5:82:00:05:
9b:36:fb:b1:89:79:97:0b:88:bc:43:be:9c:9e:f0:c0:ae:e4:
56:3e:5a:03:50:b1:ee:97:7d:29:a3:93:61:a0:de:19:b7:cc:
1d:e6:55:e3:a3:d0:53:be:86:40:52:4b:b0:6c:87:f2:c2:6e:
15:ff:49:4f:5e:11:c0:be:cf:2c:30:94:03:4b:63:4d:c5:70:
87:57:f9:89:0a:12:5b:5b:bb:a3:89:3d:8b:88:db:70:03:ef:
93:e6:d3:ce:67:05:1b:81:2f:9e:fa:51:b2:74:d7:38:f4:2a:
7f:53:13:19:02:88:ca:b1:9b:02:bc:f0:06:73:fb:d4:21:8d:
48:76:56:6b:42:cf:b9:fb:22:75:6a:8e:8e:f9:cf:03:40:91:
f0:98:91:b2:00:26:b3:95:9d:fb:5f:ad:4c:13:64:19:12:25:
db:2d:10:c0:2f:5d:a0:c9:b8:8c:80:2f:b7:a4:28:7a:36:2d:
93:79:06:7d:aa:7c:43:8e:fc:0a:64:d5:f5:08:7d:7b:63:95:
34:cf:9c:bb:30:9d:c0:a0:15:ff:d2:e2:4d:8e:c7:2d:02:9a:
54:64:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:43:52 2026 by rpki-client