Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63F760A114F11F1B4EDDB79DAE4EC9C.roa
File: A63F760A114F11F1B4EDDB79DAE4EC9C.roa (raw, json)
Hash identifier: 5u5l7iyWhOudpZJSwJVIsAnQTx8+vFs0PQu0aWdIJJ8=
Subject key identifier: F7:FD:43:CE:8E:7B:A7:E9:FE:5A:87:AB:FA:1A:6F:D6:19:FA:89:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A005
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63F760A114F11F1B4EDDB79DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 07:08:41 +0000
ROA not before: Tue 24 Feb 2026 07:08:37 +0000
ROA not after: Wed 11 Mar 2026 07:08:37 +0000
asID: 214143
IP address blocks: 156.231.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106501 (0x1a005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 07:08:37 2026 GMT
Not After : Mar 11 07:08:37 2026 GMT
Subject: CN=699d4e79-ca87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:94:23:b3:6f:ba:9e:75:33:7b:15:08:34:
67:6c:25:65:50:ab:09:82:1e:f5:6f:04:55:e3:df:
a0:c1:6b:5f:58:8b:04:6d:51:59:74:1b:e4:7e:97:
13:1b:2d:43:4f:de:8f:2c:9f:a2:d1:a5:f3:bf:7c:
d6:b9:6c:6c:e8:7f:7e:b6:7e:bd:14:57:d3:26:18:
e6:4c:3f:b4:55:9d:c2:24:44:b8:9a:81:5e:41:5e:
d1:45:5e:d2:db:70:66:26:26:48:4c:9e:57:b1:2d:
5d:b7:80:23:02:7b:e0:17:6c:d7:b2:4b:4d:01:61:
df:84:67:77:17:f4:df:f8:9d:e4:1d:49:2f:ba:6b:
c1:fa:bd:03:f2:16:ef:9a:cd:d4:2c:08:5c:67:5d:
f7:bd:9a:51:97:b5:42:2c:b0:2c:b4:40:49:c1:a3:
f9:92:48:81:dd:89:fd:53:8b:87:47:dd:57:9e:e5:
90:dc:6a:fd:86:1b:0e:c4:2f:e6:2c:fe:4a:7b:4d:
9c:88:71:5a:70:c0:87:da:97:ee:fd:c6:3a:32:ab:
94:47:01:be:16:7f:1a:d3:28:62:eb:61:b1:eb:76:
2d:f2:ad:49:b8:f9:93:2f:e7:3d:d1:87:25:49:f0:
e2:ad:0e:38:17:5d:fa:09:d1:5c:73:ec:a7:ff:7e:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:43:CE:8E:7B:A7:E9:FE:5A:87:AB:FA:1A:6F:D6:19:FA:89:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63F760A114F11F1B4EDDB79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.108.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:a1:23:76:51:64:47:6d:a0:8b:a3:40:09:d5:4e:41:cf:2c:
cb:13:8d:18:11:1b:2b:f5:6c:2d:45:9a:0b:db:f3:e0:2c:39:
b9:98:4c:8b:84:5a:28:14:5a:c9:69:62:fe:e1:d5:f7:a1:d4:
a1:f7:24:8a:14:b6:ff:73:cd:de:c5:cf:d5:fb:86:0c:59:7f:
b8:10:d8:f9:38:93:76:94:a3:dc:d8:87:bf:64:b6:3a:02:97:
a4:63:87:c7:2b:79:00:88:93:51:d5:72:2e:cb:35:57:a4:12:
06:2d:1e:ab:80:b8:9c:df:2a:85:25:e4:11:36:95:d9:7c:85:
37:00:73:0d:90:dc:e2:40:57:10:82:08:9f:cb:2b:f7:9f:99:
6c:a3:5d:b6:2e:f7:67:db:0e:ff:f4:e7:c8:55:3e:18:4a:79:
7a:df:1a:15:8a:91:87:3f:c1:55:06:88:b5:3e:a6:7d:a2:6a:
25:bd:25:34:4e:12:c3:f2:db:df:fd:08:c5:54:a1:5a:51:f5:
bc:b1:71:eb:5e:5a:32:86:63:86:b1:f1:f6:4d:40:8b:8e:cb:
9f:5f:b6:ff:84:f3:1d:12:49:47:f2:65:27:a1:30:ae:17:ec:
de:55:12:50:26:f4:59:e1:7d:99:73:19:70:48:9b:cb:a9:13:
c7:e8:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:37 2026 by rpki-client