Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A451DC2CFFFF11F087EE7196DAE4EC9C.roa
File: A451DC2CFFFF11F087EE7196DAE4EC9C.roa (raw, json)
Hash identifier: OcXtjjQcuwM/DmYJ1KSDgDDKEZvKsVfePrYeHlOI1XQ=
Subject key identifier: F7:02:48:0F:2F:82:6F:85:C2:78:14:5F:9B:58:B8:82:53:23:FF:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A451DC2CFFFF11F087EE7196DAE4EC9C.roa
Signing time: Mon 02 Feb 2026 06:23:09 +0000
ROA not before: Mon 02 Feb 2026 06:23:03 +0000
ROA not after: Mon 09 Mar 2026 06:23:03 +0000
asID: 62610
IP address blocks: 156.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105297 (0x19b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 2 06:23:03 2026 GMT
Not After : Mar 9 06:23:03 2026 GMT
Subject: CN=698042cd-886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:0e:7b:be:cc:13:13:f2:e3:1c:41:a3:ab:
38:fa:6e:d3:f4:69:7f:94:e9:6b:10:85:4b:69:ad:
c0:2b:7d:ac:a1:79:82:57:99:fa:39:7f:ce:8b:ec:
0c:e5:34:18:e2:b1:77:2b:de:ae:81:71:53:a6:7b:
e6:b1:ef:2f:58:c3:e1:94:e7:1b:4a:17:67:b8:82:
1c:8f:14:f5:a2:12:52:e2:45:1d:ff:7a:2f:82:a5:
96:ca:c4:e7:1b:58:e2:5a:7c:1d:c8:e8:eb:3f:b6:
ba:a4:4f:44:55:9f:bc:31:3e:b7:b3:94:2b:06:a6:
38:e9:99:36:43:53:6c:0c:19:fa:d2:08:81:f8:c5:
ab:73:d9:ed:6b:e5:90:89:e7:b7:dc:e2:c7:4f:39:
f4:fc:0b:8d:ce:44:a3:c8:8b:33:a2:17:e5:32:11:
cb:70:1a:aa:09:78:45:e4:1b:b9:76:12:a1:8e:08:
ee:ff:37:b0:85:7a:dc:9b:fa:97:0a:49:9d:7d:cc:
11:c5:59:98:37:88:95:ec:45:f8:3f:90:8c:13:29:
a5:0f:b1:e3:eb:b6:2c:8a:b9:8f:b5:70:ca:1b:82:
8b:0d:53:63:11:55:45:26:69:c8:2f:1c:fd:99:eb:
dd:42:7b:f7:e7:15:a7:c3:99:49:39:4b:6b:70:70:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:48:0F:2F:82:6F:85:C2:78:14:5F:9B:58:B8:82:53:23:FF:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A451DC2CFFFF11F087EE7196DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e2:91:f1:90:47:33:15:fa:3b:b6:45:25:72:7d:77:19:ef:
bd:60:ab:cd:26:65:6b:10:fa:f3:4d:19:f5:43:9b:0c:7d:d0:
0e:dd:95:a3:12:a4:16:a2:c9:5d:91:d8:09:79:08:b9:2f:b1:
e8:3f:8d:af:09:6e:28:b1:71:d0:45:7f:cf:54:e7:29:0f:0d:
1b:66:97:eb:03:3e:9d:18:4d:62:59:92:79:d4:95:79:ee:38:
00:d4:14:e8:8d:8d:c7:06:f8:16:41:17:28:22:a4:2e:38:2e:
5a:6f:ed:c1:32:19:60:10:c0:b0:c6:79:73:8b:ca:5d:1d:b9:
6a:87:c5:cb:41:5c:1a:6e:b9:cc:35:38:bb:4c:86:5a:7a:c9:
72:e7:8a:f6:c7:15:4a:ae:bd:c6:1e:33:89:67:77:c3:f7:0e:
ae:e2:a2:4b:e0:00:00:f4:ef:9c:81:65:8f:4c:c3:63:46:16:
8d:23:71:5c:1b:38:ed:e3:2b:76:0f:99:1d:64:2c:c9:67:bd:
76:b6:c1:fb:b3:19:5b:aa:d4:c3:91:ae:42:94:3c:15:83:ef:
74:22:cd:7c:79:eb:93:5b:fc:c2:81:aa:6d:2f:c3:13:58:18:
3f:bb:81:ab:7c:3a:7f:27:48:0c:17:1a:6b:a9:c2:75:ed:c8:
3e:57:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:35 2026 by rpki-client