Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C63107AE148C11F18DF3C7D6DAE4EC9C.roa
File: C63107AE148C11F18DF3C7D6DAE4EC9C.roa (raw, json)
Hash identifier: lAV/XIvsySJ6YafftgXvSnKz6e+e4247aXcKEd7+4Y4=
Subject key identifier: C6:5F:F4:D7:39:51:E5:9D:29:78:D7:84:67:81:E8:7D:08:06:96:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A149
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C63107AE148C11F18DF3C7D6DAE4EC9C.roa
Signing time: Sat 28 Feb 2026 10:03:48 +0000
ROA not before: Sat 28 Feb 2026 10:03:43 +0000
ROA not after: Sat 04 Apr 2026 10:03:43 +0000
asID: 395886
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106825 (0x1a149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 10:03:43 2026 GMT
Not After : Apr 4 10:03:43 2026 GMT
Subject: CN=69a2bd84-c488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:48:b7:00:be:d0:26:71:d3:52:2c:7d:6c:
9a:f7:9c:02:23:18:5f:f9:af:e2:b4:85:ed:ec:84:
53:cf:f4:ad:98:04:07:2e:01:4d:99:98:8a:c3:1a:
1e:ca:c5:47:f1:4e:00:3e:00:e1:0f:88:6d:79:d4:
6b:46:f8:4a:d7:b0:16:0f:77:d2:43:54:8a:d3:c8:
9d:5d:83:c3:45:e1:04:c9:cd:1c:97:c3:92:29:ea:
c4:2a:f6:c7:26:e3:33:c3:64:e2:eb:f2:da:56:1e:
70:54:b4:fa:02:fe:db:44:ec:c2:38:b5:1c:6f:ae:
39:58:3a:75:3d:79:44:0f:4d:3a:37:bf:b8:74:4a:
25:c3:f8:97:ce:02:d3:01:a3:5a:fa:31:15:c5:0f:
1a:d3:a7:f8:52:02:e3:84:fa:fe:ce:d5:1b:f4:30:
14:12:23:3e:e1:b8:88:44:53:e5:58:08:46:ef:ff:
09:d5:60:77:65:00:53:e1:1d:3d:a4:7b:61:93:c3:
ab:bf:5f:bd:cc:b5:b8:37:9b:86:62:6a:e3:bc:0a:
46:50:0d:a6:2d:1c:37:8f:34:03:0a:b3:bc:f6:f8:
07:46:a7:77:49:59:63:19:76:cf:4b:7c:cc:1d:0e:
bf:0d:f0:42:3a:63:63:66:2b:10:9c:56:a0:6e:0a:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:F4:D7:39:51:E5:9D:29:78:D7:84:67:81:E8:7D:08:06:96:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C63107AE148C11F18DF3C7D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
31:9a:78:69:c1:22:c1:75:78:74:b6:f5:23:e2:46:30:1b:fb:
13:53:74:7c:e6:6e:29:9c:b5:2b:3e:58:6c:c9:c9:36:1a:55:
5b:cf:cc:f1:61:29:25:77:66:d4:76:cd:28:fe:4e:9e:8b:d4:
31:d3:a5:d1:6a:94:16:db:99:5a:54:9d:99:0d:42:38:88:49:
54:14:18:0e:60:dd:77:30:f1:4b:39:78:0b:cf:ab:81:35:dd:
81:6c:4a:bb:1c:66:7e:32:10:cf:aa:48:81:28:c4:f4:da:d7:
55:2a:88:5f:13:99:78:58:d7:f7:ce:14:af:6d:da:66:2f:90:
5e:53:12:96:31:51:57:d2:5f:e8:4e:eb:8e:3c:cd:7a:8c:1e:
21:8b:97:6b:5a:98:af:34:45:fa:44:4e:31:71:25:aa:78:92:
9a:87:66:a6:91:74:6f:05:c6:89:b3:c2:4a:da:ce:b8:04:a0:
39:62:19:75:b0:40:fd:ec:77:9c:a7:1e:8e:f4:72:39:c6:83:
8a:2e:c5:c6:2c:ed:cd:3e:56:b2:ba:78:e1:40:28:3f:46:50:
49:e2:40:45:ff:04:3a:0e:55:35:f7:68:d8:a8:fc:46:7c:bd:
23:31:6b:a6:6b:b2:bb:be:f7:be:43:5c:fd:ae:10:e8:23:4c:
95:64:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:17 2026 by rpki-client