Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/793A284E2AD611F1BD57E488DAE4EC9C.roa
File: 793A284E2AD611F1BD57E488DAE4EC9C.roa (raw, json)
Hash identifier: cCsttGjk9igT7pVB82FEMPnPmZuQLgX9RUJlPb2D6dU=
Subject key identifier: FD:98:A4:B7:7A:E0:4F:60:7C:87:1F:0D:3B:7B:E8:BF:8C:64:8D:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A838
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/793A284E2AD611F1BD57E488DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 18:46:48 +0000
ROA not before: Sat 28 Mar 2026 18:46:43 +0000
ROA not after: Tue 05 May 2026 18:46:43 +0000
asID: 211961
IP address blocks: 156.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108600 (0x1a838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 18:46:43 2026 GMT
Not After : May 5 18:46:43 2026 GMT
Subject: CN=69c82217-8d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:8a:3a:3b:3c:a2:ab:b0:8d:32:39:5a:b3:
aa:d1:87:0f:bc:2a:a9:64:3f:30:88:81:61:96:e0:
fd:74:d1:18:08:f4:38:2b:31:3a:07:b3:36:97:01:
6b:8b:2c:7a:8e:bc:ba:43:26:f3:b9:39:4c:80:68:
9d:5c:99:09:29:1e:d9:b4:7b:04:ee:75:f5:18:1b:
26:1d:a5:10:c1:84:99:fe:a8:58:de:71:81:d2:75:
3b:46:65:7e:3a:e9:2e:ea:7a:68:fb:19:c7:93:37:
f1:7a:96:29:ee:3e:51:f3:02:aa:cf:1b:09:67:97:
8e:67:e7:30:95:5d:cf:f9:c5:d2:ad:a7:f8:56:21:
ca:db:2e:9c:83:5b:5b:03:e6:7d:01:da:84:eb:9e:
eb:71:50:a1:23:a1:3e:34:6b:79:6f:9e:a1:d5:f8:
55:8f:b1:e9:9b:d6:ba:ab:7f:92:93:02:d4:85:17:
39:71:bf:b5:8d:8a:16:cb:4c:5d:16:8a:f9:f6:91:
35:21:ea:c3:9b:8b:c4:70:22:75:94:77:32:b8:71:
7e:93:be:9a:0d:44:c3:21:5b:62:2b:2a:2b:11:fc:
66:67:13:50:11:1b:0e:02:3e:7c:ff:dc:0c:a8:bc:
a6:02:0b:fa:f5:d6:87:44:25:c4:cc:f8:7c:89:24:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:A4:B7:7A:E0:4F:60:7C:87:1F:0D:3B:7B:E8:BF:8C:64:8D:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/793A284E2AD611F1BD57E488DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:23:18:de:b1:a2:56:96:90:cc:11:6d:70:ff:aa:9d:3e:02:
7a:2a:c6:d1:d5:81:fe:70:d0:8c:6b:9e:79:c9:ee:7f:5c:ef:
b0:2f:ff:2d:af:e2:36:e9:37:e1:00:fd:b4:93:76:71:51:ec:
6d:2d:77:ca:ae:3c:c5:b4:ab:01:f5:59:a7:8d:8d:80:cb:b2:
09:98:60:96:d4:4c:fe:0a:f3:94:0e:d9:78:7f:47:ca:14:ba:
27:0c:71:28:f2:52:50:17:84:83:29:51:3c:d0:08:b9:3e:90:
54:58:8b:71:5e:ed:be:f4:ae:6c:80:52:aa:dc:22:f3:12:d9:
a1:60:0e:5a:8d:66:a9:75:a5:fb:1c:41:0c:b5:82:61:4b:7b:
60:10:91:a1:18:df:fb:80:f7:35:58:07:9f:2e:ce:7c:ea:00:
54:b8:fc:12:6b:3b:17:91:6c:5b:87:f0:da:51:cf:0f:13:69:
a7:ec:f3:d7:1d:46:ba:d5:92:3c:89:59:85:49:58:2b:c5:4e:
89:6f:4e:ad:0e:9c:ba:fc:4c:c8:dd:52:44:bb:4e:43:21:be:
d9:1c:58:c7:12:4c:be:7b:68:4c:f5:7d:93:ba:46:79:9c:36:
e3:c5:05:7b:e6:ac:11:26:86:6f:86:0b:2b:d9:a9:1c:9b:d9:
4b:c3:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:31 2026 by rpki-client