Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CC128E2CCE11F1A612E2CFDAE4EC9C.roa
File: 95CC128E2CCE11F1A612E2CFDAE4EC9C.roa (raw, json)
Hash identifier: dd2X52X0PxDQEbqiGISy/K+aZkYWq63OtS3HTtDVhB8=
Subject key identifier: 7B:56:29:59:A7:34:B5:59:21:7C:DE:37:55:83:8B:E7:C9:6E:7A:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CC128E2CCE11F1A612E2CFDAE4EC9C.roa
Signing time: Tue 31 Mar 2026 06:55:22 +0000
ROA not before: Tue 31 Mar 2026 06:55:16 +0000
ROA not after: Wed 20 May 2026 06:55:16 +0000
asID: 63018
IP address blocks: 156.233.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108759 (0x1a8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 31 06:55:16 2026 GMT
Not After : May 20 06:55:16 2026 GMT
Subject: CN=69cb6fd9-9618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:d0:cb:b9:8f:6f:5d:3e:65:ab:fc:60:44:
91:c0:45:b7:f3:d4:c3:84:a7:be:72:10:d4:f4:b6:
63:8c:0e:66:76:52:b9:32:9e:f9:bc:7f:11:0e:ab:
ce:93:e4:73:f0:84:10:d5:89:f3:e3:2e:9b:43:0d:
96:99:b0:e4:b3:69:81:ae:49:13:bc:e4:48:0b:1d:
f9:7f:3d:8d:5a:99:b9:07:90:45:91:1c:5e:ff:08:
9c:a7:44:79:03:3d:c4:ae:ff:2b:89:dd:a2:6c:88:
45:c7:9c:61:39:9f:3e:d4:61:b9:80:97:ab:0c:71:
36:b8:26:b2:b6:7f:4c:15:ae:71:85:e2:09:a2:0c:
b1:96:d2:b5:ec:7d:08:5e:b7:a4:2f:99:f4:ec:b3:
1d:31:2d:eb:63:2f:a2:dc:1a:e9:de:72:8d:39:44:
05:fe:cc:04:e7:63:cd:f7:2e:ac:82:7f:3e:72:5e:
3a:1b:28:e7:a1:2e:b8:b0:47:2e:59:95:76:4c:cb:
dc:2f:27:0f:d0:2d:73:bf:31:71:66:93:13:8d:13:
a2:6e:b1:a6:9d:7f:60:4a:31:67:46:a0:ea:08:51:
0d:c0:b8:55:dc:50:ca:c8:b7:d0:77:0c:36:74:97:
60:83:30:7d:61:73:e9:03:7b:0c:32:67:98:80:b4:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:56:29:59:A7:34:B5:59:21:7C:DE:37:55:83:8B:E7:C9:6E:7A:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CC128E2CCE11F1A612E2CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.80.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a4:12:cc:ae:f2:17:d9:f5:e2:a5:42:63:10:5b:ac:23:a7:
89:3f:12:0c:e1:0a:b8:db:fb:26:20:c8:67:01:16:38:36:a6:
c0:5f:ec:fc:aa:45:44:69:5f:4f:fb:32:b8:42:4e:1b:0f:ae:
3b:25:08:c5:49:fe:82:14:7e:42:98:30:ca:d9:eb:34:76:4c:
a1:92:3f:1a:6b:bd:ac:35:45:d6:f2:5e:07:0b:2e:4b:0c:4c:
14:4e:ec:d6:96:b8:28:b3:69:46:0d:98:d1:d0:26:04:a5:19:
e0:9c:d1:de:69:af:95:33:8e:82:31:1b:3e:b1:74:a4:48:b8:
4f:b1:43:38:a3:19:ff:9d:73:81:04:6d:ec:cb:a1:80:6c:86:
fa:fd:d8:e9:2e:d4:1b:af:ea:2c:2c:3b:11:04:af:1d:88:8e:
97:a8:0a:64:b5:75:89:e6:fb:e1:ae:16:04:83:01:e2:c6:c1:
eb:61:ee:fe:8c:1a:21:aa:15:6b:6d:e4:76:34:84:3f:d5:b3:
93:5d:d1:be:13:3b:06:86:f5:d6:93:d8:93:3a:0d:e2:59:64:
9a:88:ec:46:7e:db:df:e7:92:c0:65:a2:9a:c9:f4:a4:29:a3:
64:ca:b1:a5:66:98:00:bb:7f:c5:45:0a:7b:cd:78:6d:9b:d8:
7e:38:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:32:04 2026 by rpki-client