Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5473EEA149111F1A79134F5DAE4EC9C.roa
File: B5473EEA149111F1A79134F5DAE4EC9C.roa (raw, json)
Hash identifier: GBDjKjsNtX/VeSO8eBENwu3EDGnzXKtRqnUQbsCDzIU=
Subject key identifier: 5C:37:45:67:96:7D:06:C1:4B:F2:0A:E7:83:44:D7:9E:F0:AF:58:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A155
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5473EEA149111F1A79134F5DAE4EC9C.roa
Signing time: Sat 28 Feb 2026 10:39:07 +0000
ROA not before: Sat 28 Feb 2026 10:39:03 +0000
ROA not after: Sat 04 Apr 2026 10:39:03 +0000
asID: 136800
IP address blocks: 156.234.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106837 (0x1a155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 10:39:03 2026 GMT
Not After : Apr 4 10:39:03 2026 GMT
Subject: CN=69a2c5cb-24af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:1b:a7:42:b7:d3:8d:ff:22:e4:9d:5f:bf:
fe:77:f6:0b:62:fa:91:b4:6d:57:b6:be:02:20:3a:
39:9f:1f:6c:69:82:3a:9b:a1:14:82:5e:e1:45:96:
57:cc:63:2a:23:5e:96:3b:52:88:cc:87:31:fe:00:
e1:02:be:b2:61:86:38:98:74:1a:a7:f7:1a:2d:e6:
32:60:46:74:da:44:70:35:cc:cb:55:c4:19:b6:5a:
40:9d:dc:d8:17:c2:32:b0:cd:91:6a:d3:e0:f1:3a:
e6:18:ff:9d:31:fc:2d:f1:b8:42:2e:66:ae:d8:2e:
3f:dd:33:2c:c7:ff:07:dc:f3:19:71:b8:e0:5c:7b:
29:f4:22:61:0b:55:c6:48:49:53:3b:1c:62:e8:a4:
0c:43:8e:be:12:f2:d4:0d:25:1a:e3:48:0e:9d:4f:
9d:eb:95:e0:a7:1e:f9:dc:fa:89:b4:9f:5d:53:1b:
2b:6c:9b:f4:80:71:fe:7c:bd:4c:d6:16:a4:5e:7a:
d9:b0:29:bc:6d:7d:7d:32:f6:f9:d0:9e:81:e4:c2:
25:64:0f:7d:e8:7c:0a:8e:cc:70:2b:38:0b:5f:e1:
a4:46:6e:4f:48:cc:15:fc:a5:4a:4c:07:7b:ed:9b:
da:7a:85:7a:6b:c6:c3:63:ad:f3:dc:78:2b:85:96:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:37:45:67:96:7D:06:C1:4B:F2:0A:E7:83:44:D7:9E:F0:AF:58:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5473EEA149111F1A79134F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b8:46:e6:96:4b:15:1c:07:ad:60:97:7f:3d:a5:33:fe:13:
2d:a2:43:14:e2:db:67:5a:44:50:2a:fb:00:5e:75:53:cb:f8:
64:c8:d9:b8:29:57:2f:fa:39:0a:ca:9f:53:2a:21:16:09:49:
57:b7:c9:e9:d9:0e:1a:bd:e0:a6:e6:7e:b2:cd:f4:86:18:ed:
da:cd:e1:3c:a7:70:00:d9:e8:9e:f9:95:16:d8:3b:84:fc:f6:
08:2e:e0:18:fc:f1:0a:ea:09:72:3e:67:99:01:c4:27:36:d9:
a4:31:4d:5b:dd:33:18:a8:5f:cc:4c:cc:9a:f9:ea:48:51:d1:
1c:ca:21:fb:54:63:92:6d:4e:fd:83:84:bd:56:00:c1:fe:f0:
a9:0a:b4:da:88:94:5d:60:b2:bd:f1:d2:f7:47:13:b5:15:a8:
55:d9:4b:f5:d7:f2:15:f3:45:66:1f:c6:31:40:4f:c9:c1:e3:
87:f7:c1:5a:60:d4:76:84:74:df:63:c5:78:c2:fa:ec:13:db:
92:ca:f9:1f:3d:a9:6e:eb:e4:4c:26:96:29:da:81:20:2b:44:
5a:fd:5a:eb:cd:a6:5e:d2:fd:fe:43:4a:65:49:e0:a3:11:3f:
a9:61:b1:76:fd:f2:ab:59:73:69:18:e0:53:e4:ea:02:ec:9a:
b1:38:34:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:33 2026 by rpki-client