Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A9CB2E6154A11F1B90AEFE5DAE4EC9C.roa
File: 9A9CB2E6154A11F1B90AEFE5DAE4EC9C.roa (raw, json)
Hash identifier: h+xfRAi7dDofaVM5kqDHqAB/T4XHOwj1t/AQCtsbaFQ=
Subject key identifier: 7F:89:35:9E:E3:C9:2D:4F:4D:52:93:22:F9:84:D8:EA:F2:C0:A3:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A174
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A9CB2E6154A11F1B90AEFE5DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 08:42:39 +0000
ROA not before: Sun 01 Mar 2026 08:42:35 +0000
ROA not after: Wed 11 Mar 2026 08:42:35 +0000
asID: 38193
IP address blocks: 156.238.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106868 (0x1a174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 1 08:42:35 2026 GMT
Not After : Mar 11 08:42:35 2026 GMT
Subject: CN=69a3fbff-872c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:0b:f0:36:a7:9d:83:32:68:82:b8:da:ee:
f1:4c:3f:67:84:72:a3:1a:08:63:28:f9:cf:88:6e:
ad:f7:52:d0:55:b5:ea:4b:a6:2c:93:88:fd:f0:48:
cb:78:56:e3:d9:e8:d8:83:65:97:20:c2:da:b4:09:
25:a2:9b:2a:51:bb:e2:4f:12:c0:2e:cf:e5:06:4e:
0f:0b:6a:78:58:46:a7:b9:20:3c:42:a0:a2:df:b1:
2c:6a:46:5d:84:ca:df:b1:e2:a6:8c:d1:81:70:4f:
56:c0:d1:d0:13:5e:38:11:d8:a8:c7:b5:5c:1e:62:
40:81:12:18:b8:c1:a5:ba:38:4d:e3:28:63:37:b1:
46:71:49:82:48:4d:04:cc:08:e3:33:2e:d4:7d:6f:
cb:a5:84:fd:c7:38:5d:37:b6:79:14:8c:60:a2:3b:
9e:89:ef:ba:01:33:e7:19:94:3c:67:58:07:92:7d:
5a:75:17:00:63:70:96:0b:0e:21:fb:13:35:2b:c3:
3d:79:e4:f6:e0:5b:d1:e1:cd:46:76:49:59:93:05:
f6:32:19:00:d6:2e:78:b8:18:a4:b4:5b:4a:a1:8f:
f3:b7:f1:c9:b4:cf:ef:19:22:11:98:1d:7b:3c:2f:
df:00:72:31:0e:73:3c:0e:96:a9:a0:d5:82:aa:75:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:35:9E:E3:C9:2D:4F:4D:52:93:22:F9:84:D8:EA:F2:C0:A3:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A9CB2E6154A11F1B90AEFE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.80.0/24
Signature Algorithm: sha256WithRSAEncryption
63:40:bf:93:fe:d6:b5:dc:78:21:b2:ac:9f:e2:9a:fd:45:35:
fc:1c:c9:da:f5:0d:be:c4:1a:67:d8:42:7d:16:10:43:fc:17:
0d:db:da:2a:55:ca:3b:90:62:93:58:4e:be:1d:7a:74:c4:38:
79:f2:35:99:57:29:53:dc:4b:51:2a:d7:79:1c:f4:41:db:ad:
33:57:dc:bc:97:a7:b5:2f:21:1d:96:e2:aa:dd:04:5d:d0:ce:
73:a0:cb:64:4d:1e:10:cd:98:0f:a4:b3:e7:8f:f3:38:1c:bb:
b8:31:ac:6d:0a:5c:35:3f:7b:f7:f7:f2:ae:a4:72:a3:1d:ad:
98:89:50:d1:9a:76:59:ec:eb:d9:4e:c0:13:2c:4f:bd:45:3c:
8f:38:7d:e2:bb:d2:92:7b:cc:6e:9a:ea:5c:f0:ee:69:54:61:
94:d3:a4:f2:fd:3f:c8:16:64:ec:02:62:8b:95:a0:5c:a0:c3:
ef:6b:a3:08:6f:36:a6:3b:27:cf:13:97:d3:0b:13:5f:ca:d4:
3d:b7:e2:63:9e:73:79:55:17:61:a4:9d:03:2e:30:99:16:65:
a4:be:94:1a:49:92:e7:b0:bb:27:49:bf:dd:5e:f2:7b:56:c3:
50:9b:7e:fd:d0:71:c9:72:7a:83:9d:2e:5e:25:bc:8b:78:97:
9a:03:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:52 2026 by rpki-client