Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6304B7AC065E11F1B21285B8DAE4EC9C.roa
File: 6304B7AC065E11F1B21285B8DAE4EC9C.roa (raw, json)
Hash identifier: aGRtnTMtnauCJbe/WIKNNaqJYkH/lCvPY4xjlUz4I74=
Subject key identifier: 94:99:90:09:5D:73:8E:23:6E:2C:76:EE:B4:58:14:D6:78:E8:1F:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6304B7AC065E11F1B21285B8DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 08:56:29 +0000
ROA not before: Tue 10 Feb 2026 08:56:23 +0000
ROA not after: Mon 01 Mar 2027 08:56:23 +0000
asID: 152920
IP address blocks: 156.231.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105609 (0x19c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 10 08:56:23 2026 GMT
Not After : Mar 1 08:56:23 2027 GMT
Subject: CN=698af2bc-8379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:bb:b1:7f:aa:d7:66:41:8e:b0:15:03:37:
da:d7:4c:8b:b3:84:dd:f9:9b:18:19:6f:64:e0:3e:
73:51:e0:82:f4:4d:1e:b2:33:42:fb:d4:ec:92:ea:
f1:71:a8:22:7d:19:b4:ed:1e:b7:aa:d1:a0:b6:6b:
71:9e:89:91:8d:19:fa:6c:a5:76:18:83:40:31:74:
18:df:3f:93:0b:15:45:f3:b9:6b:ea:fe:de:33:7c:
19:49:a5:ac:13:f6:cf:79:e3:c2:6e:57:63:61:c1:
d8:5b:11:93:96:3a:1d:b1:32:0f:72:08:ac:16:02:
7a:9c:00:7a:0a:c1:ab:8f:07:71:bc:f3:1b:4b:ac:
43:b3:13:6f:cb:c2:75:53:98:38:d2:6e:d7:41:fc:
3e:6f:1e:b0:a0:30:af:43:bb:d0:85:1a:a3:d7:4b:
86:b7:c5:a9:4a:4f:1e:b6:c4:be:3b:95:0c:a8:2f:
af:fa:d0:b1:14:7b:64:3e:2c:18:45:85:33:00:a0:
24:7d:1b:cd:a7:c2:c1:f1:c5:60:cd:0a:51:8e:8e:
a1:94:83:a2:e8:70:ff:f8:25:14:c4:67:01:75:09:
10:72:87:00:98:9d:70:aa:ca:0f:0f:c1:02:4b:65:
ab:6d:d9:43:3d:98:4d:c7:44:50:e5:91:b7:46:e6:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:90:09:5D:73:8E:23:6E:2C:76:EE:B4:58:14:D6:78:E8:1F:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6304B7AC065E11F1B21285B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:70:b7:61:39:13:1d:78:ea:13:b4:0f:57:33:0f:62:b2:42:
54:5a:50:54:e6:2f:2d:f1:cc:67:32:d3:1e:01:f3:e4:83:dd:
6d:79:9b:47:9a:2f:b6:3b:50:a0:47:17:bc:3e:39:ce:8c:6d:
93:d2:6e:89:39:cf:69:28:84:56:09:16:b4:ab:94:27:4f:8b:
53:7e:00:12:20:d4:50:b8:0c:4b:36:29:e4:93:bc:2a:b7:b3:
92:8c:ee:fd:27:60:ae:7d:1c:ba:6c:d8:12:f8:90:bb:59:41:
ac:41:78:3e:d2:73:b3:43:1c:0a:73:db:37:95:b3:e0:c8:43:
a0:2e:7b:3e:92:e9:01:60:5c:25:ec:90:7c:25:6d:91:fe:da:
23:c8:75:87:17:9b:c6:e6:b1:c2:ad:41:0b:57:7e:e7:92:9f:
43:24:6a:da:5b:60:43:75:e9:8a:45:ec:61:32:b3:08:8c:81:
8c:d4:46:95:b0:5a:3a:b7:e0:e8:e3:1c:e5:86:72:f3:85:4b:
a2:da:db:f3:b1:b5:43:0f:9e:f8:d6:be:e0:ef:59:d2:19:5d:
79:48:73:63:9f:b0:ae:02:28:5a:49:bc:64:62:4f:9b:81:a9:
df:c2:66:b1:b0:60:a2:b5:58:22:7c:23:30:67:b3:e7:d7:b9:
22:e8:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:21:10 2026 by rpki-client