Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/913B7E1EFC2011F0876910C7DAE4EC9C.roa
File: 913B7E1EFC2011F0876910C7DAE4EC9C.roa (raw, json)
Hash identifier: MmmEVfiarJcPgZFMdpHw2W9LtsnfswIxJ7yL9/F22D0=
Subject key identifier: C4:B7:F6:77:D0:1D:B7:43:AD:DA:4C:49:75:F4:FC:C9:58:0A:78:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/913B7E1EFC2011F0876910C7DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 08:08:46 +0000
ROA not before: Wed 28 Jan 2026 08:08:41 +0000
ROA not after: Mon 02 Mar 2026 08:08:41 +0000
asID: 9304
IP address blocks: 156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 08:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105024 (0x19a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 08:08:41 2026 GMT
Not After : Mar 2 08:08:41 2026 GMT
Subject: CN=6979c40e-8f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:6f:9e:45:ba:1f:d2:97:ea:54:a2:4f:36:
96:05:94:9a:01:1a:46:f9:37:f3:fc:1d:76:ab:d4:
1f:ea:89:37:2d:45:a6:9a:e5:0d:f7:3e:6f:7e:20:
a4:c4:30:61:04:c3:af:4a:72:b2:85:cf:f3:31:7b:
64:1c:a5:04:55:e4:bd:bd:6f:93:bd:bb:60:d6:4a:
35:15:f5:58:d5:ac:8b:ee:3f:6d:dc:7d:d2:9a:13:
db:6a:c2:44:ac:bc:61:37:30:ce:87:e5:40:18:1b:
7e:7c:7e:45:8c:c1:4a:b7:cf:3c:6e:9d:4c:02:e8:
c6:50:31:82:0f:8c:7f:e6:21:24:22:2d:54:1f:60:
eb:f0:8a:54:55:d0:af:91:58:eb:f1:e3:9f:fb:58:
ea:f3:72:e9:b3:a4:9f:2a:93:42:38:1f:f8:16:0b:
18:e0:17:3e:ce:8d:7c:21:30:7a:6c:27:2d:c2:73:
1b:46:e8:74:09:1d:40:f3:5e:d4:7a:6f:d2:f9:7c:
86:5d:75:e9:a1:b3:a2:9d:dd:bb:0d:74:5c:8a:65:
b2:77:ba:b5:e3:7e:a9:70:96:b0:e1:de:54:f8:95:
58:11:1c:f6:c3:10:ae:92:9a:85:9c:61:ba:84:8a:
6f:10:75:d5:25:f9:a4:0f:d7:5a:e3:c8:0e:77:c2:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:F6:77:D0:1D:B7:43:AD:DA:4C:49:75:F4:FC:C9:58:0A:78:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/913B7E1EFC2011F0876910C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.249.183.0/24
156.249.185.0/24
156.249.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ff:3c:4f:e1:9e:08:ab:c5:68:d0:4a:40:95:13:42:c4:ec:
d8:92:ae:74:18:a6:87:46:fd:51:5a:80:87:9a:d2:b6:dd:c2:
84:fc:0a:59:d5:a7:e9:47:1a:fa:38:d7:96:2c:ad:ff:65:18:
fb:ae:0c:da:24:e8:c8:f3:11:16:37:24:1e:7e:61:a6:9e:e0:
e1:d9:70:29:9e:50:46:e5:3f:36:d0:63:0f:7b:e4:d8:b4:4e:
cb:d1:fe:81:12:ad:0c:90:94:df:db:b1:4f:0f:d7:d4:71:9f:
c1:84:ec:3b:cb:35:f8:58:61:2d:ac:df:08:4a:d7:01:97:e6:
f0:7b:ca:34:e2:32:be:be:21:df:4c:5f:ad:94:a2:c0:fd:64:
6e:46:14:b2:f0:bd:5c:04:bd:db:82:ad:0c:74:ad:2e:ac:10:
02:fe:c2:7d:9e:e6:19:3a:99:9d:21:9d:8a:45:3a:1b:99:f4:
b6:74:1b:fc:2b:c1:0a:fe:bb:2d:59:fa:99:68:bb:ff:da:f6:
13:c0:51:8b:d1:2e:f9:d0:44:3e:67:09:e4:3b:45:12:a2:d0:
27:0d:5f:3a:5a:56:71:21:93:68:fe:f9:ea:e6:57:1f:37:ea:
06:f9:1b:b5:9c:e5:b8:4e:1a:e9:6d:0c:50:df:7f:07:44:ba:
3c:99:3a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:57 2026 by rpki-client