Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69037414072F11F1B8D406BCDAE4EC9C.roa
File: 69037414072F11F1B8D406BCDAE4EC9C.roa (raw, json)
Hash identifier: Bc55oGdQ3ZRrlXRubgs1V1rCu/KHt0Jou6SN1TZBJ+U=
Subject key identifier: 62:8E:B9:40:63:83:E6:96:3C:F2:9A:33:A4:08:B4:FC:60:C3:23:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69037414072F11F1B8D406BCDAE4EC9C.roa
Signing time: Wed 11 Feb 2026 09:52:45 +0000
ROA not before: Wed 11 Feb 2026 09:52:37 +0000
ROA not after: Mon 08 Mar 2027 09:52:37 +0000
asID: 152920
IP address blocks: 156.231.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105729 (0x19d01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 09:52:37 2026 GMT
Not After : Mar 8 09:52:37 2027 GMT
Subject: CN=698c516d-f267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9b:fa:01:2f:db:8f:6c:30:88:3c:42:0b:0d:
ce:21:81:d3:ea:3f:46:b3:7e:a6:a5:af:22:d8:c2:
f3:a7:b6:51:fb:30:9d:e9:af:1d:03:b0:32:47:0c:
3a:0f:ff:18:58:ba:a5:e5:a5:9d:a5:9f:e5:70:d4:
38:a5:68:95:72:ac:ca:ae:9d:4d:bd:50:11:95:2a:
3c:1e:ba:af:3d:dd:e7:96:d1:09:96:4b:51:73:4d:
d3:06:ed:d6:c6:a9:e1:86:7b:e6:56:b3:bf:0e:1f:
3e:db:ef:69:9c:6b:b3:0a:ad:72:51:fa:40:69:ca:
67:ce:1c:67:00:c8:49:7d:8e:c1:c4:6a:d6:a8:72:
30:11:d4:23:32:a7:0f:2c:99:5a:de:cc:d1:52:ff:
ef:c0:5a:1a:3d:12:64:ee:a5:f6:78:0b:d8:df:18:
8e:ec:01:78:3b:54:c2:3c:31:1c:ba:ef:5a:24:a2:
39:87:b8:43:63:3b:c0:04:b7:16:23:e4:6d:76:72:
9f:94:67:d1:85:03:8d:2f:77:d6:b9:92:7c:6b:8b:
5d:58:42:58:8c:9c:ef:e0:ba:50:a6:26:a4:96:4a:
28:04:6a:07:ff:05:97:74:84:5e:33:4d:46:82:44:
01:86:81:34:87:1e:9e:b9:b8:9d:da:d5:44:d3:ff:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:B9:40:63:83:E6:96:3C:F2:9A:33:A4:08:B4:FC:60:C3:23:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69037414072F11F1B8D406BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.7.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5f:2e:d3:b2:10:fe:73:c1:24:c8:ce:6a:98:97:d4:3f:2d:
8b:ef:53:e0:5c:f7:e0:3e:92:e5:be:ce:0a:fe:57:37:c6:8c:
51:dd:c0:89:e0:73:6a:61:4d:c5:f1:6b:a5:93:97:c7:00:8b:
fa:af:39:11:60:73:1c:2f:52:d4:85:e6:a0:11:98:f6:a2:08:
f0:c4:87:f4:89:b3:9f:0e:95:42:2e:ce:00:d1:07:97:7c:c6:
f7:06:01:14:96:ed:2a:40:c4:bc:13:f4:69:d1:6f:74:ed:32:
cc:37:b2:36:bc:00:a2:76:c4:52:6f:06:44:c2:a3:f9:f5:29:
91:61:8e:fe:05:96:f4:d6:e2:9c:bc:68:b9:57:7e:d3:e3:2d:
41:8a:10:b2:bd:b8:5f:ab:88:2b:e1:3a:20:91:e4:0f:19:a6:
ec:ba:89:29:5e:f5:1f:fb:fd:f6:10:78:07:c3:e0:7c:29:25:
59:6e:24:dc:b6:83:ef:1f:6a:9d:25:c3:0e:f2:55:94:1a:2b:
59:8d:f7:91:3c:4c:c2:2c:68:92:81:3d:19:af:81:5e:ed:72:
d6:f1:fe:21:53:04:ac:1d:fc:28:da:c6:e7:2a:0e:9f:59:a9:
2d:88:bf:b9:1d:59:a2:3e:f3:d7:76:f3:fd:d9:0b:9a:e7:85:
87:98:50:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:40 2026 by rpki-client