Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DAE0BC157B11F19F43288CDAE4EC9C.roa
File: 90DAE0BC157B11F19F43288CDAE4EC9C.roa (raw, json)
Hash identifier: GSx2DPzSk7OfRNPEDXtXActTjo35A74Vgkmvx/CZkfU=
Subject key identifier: FF:6B:84:D6:7A:CA:55:C9:00:F4:98:25:0D:8E:14:21:3E:84:26:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A184
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DAE0BC157B11F19F43288CDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 14:33:08 +0000
ROA not before: Sun 01 Mar 2026 14:33:04 +0000
ROA not after: Tue 31 Mar 2026 14:33:04 +0000
asID: 61461
IP address blocks: 156.231.192.0/18 maxlen: 24
156.236.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106884 (0x1a184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 1 14:33:04 2026 GMT
Not After : Mar 31 14:33:04 2026 GMT
Subject: CN=69a44e24-a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:a9:cf:c3:72:b6:03:29:a2:05:eb:5f:a7:
9a:8e:a1:9f:63:b5:f9:42:5b:df:7f:2a:21:7b:aa:
60:08:80:73:1f:a8:49:d5:86:f2:30:43:bc:d3:5b:
ee:03:33:9f:f8:2a:5b:11:4f:57:79:34:38:e4:67:
2f:99:e4:7c:6b:5c:e8:67:3a:d6:63:cf:e9:d5:ca:
a9:bc:3b:bb:2f:1d:8e:dd:03:3c:62:d2:fd:09:1e:
27:4d:dc:39:cb:4f:9c:53:56:fd:e4:09:11:9d:8d:
8d:cb:31:de:0a:5d:d2:8f:cd:bf:ca:b7:4e:8b:56:
32:13:b7:37:14:0e:e9:c1:6f:76:d8:29:fd:52:f6:
ff:cc:3b:ca:64:2c:7a:13:c4:e5:d1:c9:73:72:7c:
9a:b6:7f:6a:66:a6:26:2d:ff:57:f1:69:5f:e9:1f:
a1:06:c5:c0:4d:31:90:d4:e3:5f:60:ee:a7:2f:46:
97:72:a1:9f:ad:03:89:2d:5e:f8:03:68:8d:18:f7:
64:93:d8:a1:3c:7a:08:25:41:7c:1a:4b:c2:e9:13:
b1:83:e3:e9:e9:09:28:3e:13:47:30:46:f0:37:55:
e5:e4:23:14:00:e3:40:e8:f3:d9:cf:65:f5:9e:70:
b4:06:5e:4d:b2:fe:7c:19:0a:16:fd:2b:8c:4d:8d:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:84:D6:7A:CA:55:C9:00:F4:98:25:0D:8E:14:21:3E:84:26:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DAE0BC157B11F19F43288CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.192.0/18
156.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:17:cd:4f:d1:d2:d3:95:1d:b3:17:34:67:af:29:e0:db:3c:
e3:06:b2:64:ba:1a:00:a9:35:7b:4e:7d:c7:6d:9c:86:df:58:
b4:f6:ad:b4:9f:12:88:45:21:8a:ae:e2:a0:72:40:2d:f8:07:
6b:f4:7c:05:c6:c5:1b:62:ed:04:06:85:6b:41:f0:d4:c6:f8:
f5:34:6a:f2:1a:09:69:8b:cf:0c:07:bb:5e:95:6b:72:b7:d3:
06:0e:8f:e6:d9:40:54:b3:c5:70:98:36:84:2e:3a:0f:3c:62:
c3:15:48:45:05:19:42:8a:4f:0a:81:16:5c:d8:be:6e:6f:cb:
dd:8b:93:d6:45:f7:32:47:b7:80:ea:d6:46:0e:4b:af:1b:c8:
33:35:67:09:dc:ad:3e:ad:fe:d4:97:3f:32:25:81:bd:b2:53:
c3:fa:0b:ae:d3:9b:73:20:af:f6:0c:4b:ac:9a:f5:17:49:15:
ad:95:28:2b:78:8e:21:cc:c6:ba:c2:15:15:e0:b1:77:26:86:
b3:e8:ea:c9:f4:00:2e:17:da:6a:95:21:0e:aa:be:43:dc:af:
06:7f:49:26:a5:6f:78:a2:be:8c:9d:28:c2:f7:65:13:cc:43:
c5:93:a7:da:50:4c:d2:2b:a7:e9:d7:ab:8e:a8:07:45:ff:a3:
8d:bd:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:33 2026 by rpki-client