Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3A183BA5F1E11F1822950D8CE1D38B0.roa
File: C3A183BA5F1E11F1822950D8CE1D38B0.roa (raw, json)
Hash identifier: hNqX79N1nTRLnmA+dbXZ2Yh3IqHP2anR+yRyZJnW2Uk=
Subject key identifier: 2F:DB:72:AB:B3:1F:F1:AE:DA:68:70:6B:75:58:75:F8:9A:2D:57:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3A183BA5F1E11F1822950D8CE1D38B0.roa
Signing time: Wed 03 Jun 2026 07:35:16 +0000
ROA not before: Wed 03 Jun 2026 07:35:12 +0000
ROA not after: Thu 09 Jul 2026 07:35:12 +0000
asID: 44477
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 14:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113533 (0x1bb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 07:35:12 2026 GMT
Not After : Jul 9 07:35:12 2026 GMT
Subject: CN=6a1fd934-b102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:1d:61:2d:a8:f2:c2:17:04:c2:26:f6:75:
0b:63:e3:86:da:ea:4f:ad:e8:aa:fe:0e:aa:54:49:
ee:b4:a7:73:fb:01:ff:9c:5d:00:4e:fe:b1:ed:5b:
0c:34:b1:97:a1:d6:b0:03:3b:b6:ac:82:1a:93:91:
a3:08:7d:c4:51:46:40:f5:56:69:4c:2c:ec:86:2c:
8b:1e:37:8c:55:b5:fb:dd:6c:e9:d1:d2:83:15:45:
54:c2:e7:03:e6:9f:0d:a5:3d:81:b4:d4:5b:7b:49:
8e:19:3a:7d:d1:b1:37:8b:47:f8:56:c9:47:95:c1:
51:c4:7a:3e:9e:09:a4:83:f4:64:97:56:6d:85:b7:
7d:36:0c:c1:bc:0e:2f:c5:63:c3:6d:48:e5:18:81:
4d:ce:86:81:17:c6:c5:e5:5b:6f:c9:55:f0:b8:26:
ff:d5:1a:d4:bd:0e:cb:db:7c:7b:c1:53:11:45:5b:
d8:4c:f8:c7:4a:25:13:6a:35:ec:5a:06:6c:0a:d3:
db:fa:00:47:f7:bf:ad:5c:a4:1b:41:60:15:17:a7:
f7:11:00:8c:58:f3:f3:62:84:f9:ae:ac:00:b1:89:
70:96:b3:28:fa:15:e6:50:90:57:17:41:48:9b:ea:
ed:21:c9:01:9f:cc:d6:e0:be:0d:dd:96:e9:3a:e6:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:72:AB:B3:1F:F1:AE:DA:68:70:6B:75:58:75:F8:9A:2D:57:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3A183BA5F1E11F1822950D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7b:04:91:d5:4f:96:0f:38:e4:b9:a7:03:6e:59:6f:83:7d:
50:0b:c9:6f:27:ea:42:94:35:e0:ae:e8:f2:22:50:20:f8:81:
3c:82:6c:db:91:6f:95:c0:6c:e2:63:89:bd:36:ff:86:35:13:
9f:80:30:3d:b2:37:49:36:c6:7b:6c:8c:c8:d1:58:c4:1d:e2:
5e:f8:c0:ba:f3:81:c3:35:90:df:be:86:82:26:dd:44:48:27:
97:ed:45:61:3b:51:a9:42:d9:57:6c:5b:b9:7f:9e:52:af:f8:
64:ab:17:42:2f:9a:97:a3:88:dc:98:1f:65:7d:48:89:e1:7d:
19:52:2e:c7:21:96:8f:d6:b9:9a:55:d4:02:73:31:24:c3:81:
57:e2:d8:ed:24:64:5d:d8:55:1a:7e:30:c7:e7:d0:a9:51:75:
cf:79:c9:a9:61:8f:0d:42:7c:48:13:78:1c:d9:f5:00:af:fe:
de:9b:23:69:93:b4:dd:f9:13:30:10:4b:39:43:70:5d:65:fb:
c3:ec:bf:c7:b1:58:a7:b6:36:12:aa:b9:76:4c:f8:90:16:ea:
95:24:c0:e8:ba:79:df:11:15:45:23:ab:c4:3c:53:4d:6e:85:
b9:c5:8f:84:db:47:5f:da:11:fc:2c:fd:25:a1:23:46:4c:3e:
37:7c:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:24:55 2026 by rpki-client