Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EFE657A118F11F1AA2D537CDAE4EC9C.roa
File: 7EFE657A118F11F1AA2D537CDAE4EC9C.roa (raw, json)
Hash identifier: rp1Yhmcry0ORkQHZARrgjNtnj8vWyyDtxCp7KH8tWrg=
Subject key identifier: 7B:13:38:EC:35:C6:98:21:75:EA:68:9C:45:84:53:1E:BB:5F:64:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A037
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EFE657A118F11F1AA2D537CDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 14:45:43 +0000
ROA not before: Tue 24 Feb 2026 14:45:39 +0000
ROA not after: Tue 31 Mar 2026 14:45:39 +0000
asID: 62240
IP address blocks: 156.233.0.0/24 maxlen: 24
156.233.1.0/24 maxlen: 24
156.233.100.0/24 maxlen: 24
156.233.103.0/24 maxlen: 24
156.233.104.0/24 maxlen: 24
156.233.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106551 (0x1a037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 14:45:39 2026 GMT
Not After : Mar 31 14:45:39 2026 GMT
Subject: CN=699db997-7927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:e7:d0:9e:03:fe:5b:fe:c6:85:2f:d6:88:
56:a8:62:67:40:54:da:8e:37:21:ed:a2:c6:5b:13:
1d:a7:b3:ea:a8:7d:99:de:cf:53:84:18:a7:93:93:
ab:f0:ed:94:8c:9c:56:78:e6:22:d3:33:ee:ea:6e:
66:c0:66:11:48:95:88:c2:99:a3:04:92:5e:c9:85:
24:cb:8e:c6:40:f0:13:0c:77:a3:29:a9:a5:97:ae:
d5:d2:2b:2b:34:88:0d:80:bb:f4:1a:8d:63:c1:61:
e5:42:c4:2f:5e:5d:82:2f:e5:21:09:9a:e3:b9:39:
3c:e9:ea:ac:df:a2:c9:ae:86:9f:23:51:8f:0e:b1:
c2:ff:1e:87:73:55:f2:e7:6b:bd:15:66:f7:c6:e6:
27:bf:42:3a:13:8c:a2:84:46:55:4a:af:b2:28:a5:
fd:66:40:61:5a:84:ea:2e:f7:51:72:44:75:cc:bd:
35:ed:47:17:08:a4:2e:de:99:5d:db:41:fa:81:da:
38:d0:94:ae:47:a0:22:c0:13:2b:85:3e:e9:32:ad:
f5:b2:f6:6c:2d:6b:4c:37:4e:ed:5a:c7:3e:bc:31:
94:12:99:f7:12:83:c1:cd:1f:c2:0f:e0:78:dd:d3:
c2:3d:0c:18:02:84:57:52:27:ba:1d:90:5f:81:24:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:38:EC:35:C6:98:21:75:EA:68:9C:45:84:53:1E:BB:5F:64:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EFE657A118F11F1AA2D537CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.0.0/23
156.233.100.0/24
156.233.103.0-156.233.105.255
Signature Algorithm: sha256WithRSAEncryption
8a:b8:96:7f:1b:5d:f9:04:c9:77:9a:c2:5c:cd:57:37:12:df:
c8:73:ed:fc:ac:83:5a:7a:fc:c8:96:55:85:67:4f:fb:31:ec:
56:54:94:53:cb:1c:f8:8e:d2:71:25:f9:9b:f9:96:ba:83:54:
d6:fe:99:48:70:aa:64:23:8a:a0:70:da:ab:fb:e0:08:bf:66:
1d:72:67:41:45:9e:b0:de:35:35:da:73:b8:b8:4e:78:63:23:
76:df:fb:89:67:3d:4c:55:4a:53:85:1b:87:14:f7:32:09:f5:
e7:70:fa:45:ac:5f:40:16:89:94:37:22:fd:69:1f:1c:4c:f0:
94:0e:b3:0d:d7:b9:b4:ad:11:b4:31:a8:8e:36:20:58:fe:7b:
94:7c:91:c8:f0:ce:34:59:13:54:f9:84:28:01:af:cc:c2:4f:
35:0a:bc:87:00:34:e8:dd:91:76:25:bb:ee:3b:25:fd:6a:4c:
91:5e:5c:50:89:fc:de:28:6f:c6:6a:9d:0f:6e:16:45:bf:96:
47:da:7d:f1:71:85:2b:9f:1b:a2:4e:b7:8f:36:2a:17:7a:d0:
36:4a:4c:4f:ed:ec:9c:a0:52:d2:d8:2e:28:69:70:d7:64:05:
3b:82:d7:c0:25:63:03:7a:a0:56:7e:9d:6d:f9:d9:4b:cc:c1:
7c:16:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:42:45 2026 by rpki-client