Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9645B0EFC3211F0B0CE9EB6DAE4EC9C.roa
File: D9645B0EFC3211F0B0CE9EB6DAE4EC9C.roa (raw, json)
Hash identifier: 0NW1SSFWVOEacQairpokAKpEmQwFCqOatAhtX90RA/s=
Subject key identifier: C3:0F:A6:59:DD:FC:0D:9C:28:13:BC:67:82:4C:D3:51:E7:95:A2:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9645B0EFC3211F0B0CE9EB6DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 10:19:38 +0000
ROA not before: Wed 28 Jan 2026 10:19:33 +0000
ROA not after: Wed 04 Mar 2026 10:19:33 +0000
asID: 3257
IP address blocks: 156.228.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105046 (0x19a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 10:19:33 2026 GMT
Not After : Mar 4 10:19:33 2026 GMT
Subject: CN=6979e2ba-2309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:0e:59:db:c0:24:a3:66:08:7a:37:2c:29:
d3:05:38:7c:e0:11:b3:a0:93:8d:13:6a:a1:e4:05:
8f:47:c9:f1:36:f5:5e:1e:e6:d3:b7:75:08:bb:86:
6d:ee:bc:1b:9b:08:b6:19:4d:19:65:7a:4a:10:93:
5a:80:49:bb:24:55:a3:08:2f:51:3f:33:9c:82:f5:
c5:0e:9a:28:1e:03:99:a5:84:33:10:ff:d1:84:fe:
03:00:a5:0d:42:5c:de:14:de:da:af:b4:80:6a:9c:
82:2b:2a:f8:fd:0d:3f:99:29:7d:ac:d1:3f:ad:00:
ee:fe:6d:ee:a9:3d:c7:53:98:8c:b8:b1:31:3e:f8:
a8:5e:a3:95:fd:dc:06:a1:fc:c0:6f:26:c9:94:62:
e2:b7:82:02:c5:06:54:4d:b3:4e:3e:02:79:71:9e:
fc:88:bc:f9:ba:f2:80:eb:8b:40:4a:c7:b9:51:9c:
61:b1:a8:55:a2:5f:bb:3e:44:ef:20:ff:da:34:39:
ff:f0:a9:54:8a:d6:2d:48:79:83:73:00:73:bd:94:
1e:f2:42:a1:ce:61:04:bd:c9:d6:8a:bd:ea:2f:72:
ca:08:c6:27:3b:d0:f0:8e:6b:f9:0f:30:7e:92:8f:
21:6d:17:35:38:78:2c:49:92:bd:8e:0d:49:d1:77:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:A6:59:DD:FC:0D:9C:28:13:BC:67:82:4C:D3:51:E7:95:A2:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9645B0EFC3211F0B0CE9EB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.16.0/23
Signature Algorithm: sha256WithRSAEncryption
05:59:b1:0f:bd:43:48:93:63:3f:bf:7e:7b:89:22:e4:d2:a0:
ad:af:15:02:2d:f1:c8:b2:99:10:54:6c:06:6c:a4:a9:04:3d:
1e:3b:df:8a:97:93:f0:37:23:94:6d:34:c1:a9:3d:9d:65:7a:
5e:93:ca:8a:01:92:48:f7:3d:19:09:a4:f9:76:fe:ef:4d:f5:
72:5c:4c:ef:bd:f4:d0:a5:c5:58:ef:12:e0:62:e3:be:ac:d1:
67:f5:c7:82:29:be:64:83:a9:8a:0c:14:f0:fa:17:ef:85:5c:
3a:9c:5a:8f:6e:7f:dd:e5:5c:98:31:02:92:3a:d8:8c:11:40:
93:7b:fd:6f:6b:c1:e9:e8:47:b5:40:89:f8:f5:72:c5:9a:a0:
1a:fb:7d:61:d9:d5:03:16:73:ea:a2:31:67:d4:64:81:17:9f:
5d:3b:b9:34:cc:21:b0:8c:10:6c:b5:3e:bb:52:93:6f:c7:39:
5a:1e:f6:57:84:bb:62:4f:5d:92:72:ac:88:55:59:e5:d6:f0:
37:74:63:5d:6b:c4:73:fa:5c:43:49:e6:a4:06:59:0a:2f:3c:
a2:29:32:79:6f:ea:fc:bd:a3:bc:23:59:be:ce:61:77:b2:fb:
0c:a0:05:4a:ec:9a:91:1a:a2:74:ca:38:ee:9d:5f:eb:4a:94:
73:40:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:21 2026 by rpki-client