Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9A007342CB711F1851ED7C8DAE4EC9C.roa
File: D9A007342CB711F1851ED7C8DAE4EC9C.roa (raw, json)
Hash identifier: zthVmJwKsvCXGurGtdZ3KfCMMEg6rNr9mKfhr9CMCrU=
Subject key identifier: E0:6C:95:68:D9:06:98:19:DF:64:78:00:9B:C8:8C:7D:A3:B7:42:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9A007342CB711F1851ED7C8DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 04:12:37 +0000
ROA not before: Tue 31 Mar 2026 04:12:32 +0000
ROA not after: Tue 05 May 2026 04:12:32 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 32
156.234.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108755 (0x1a8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 31 04:12:32 2026 GMT
Not After : May 5 04:12:32 2026 GMT
Subject: CN=69cb49b5-5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:f8:24:83:77:9f:e1:f9:81:55:4e:a5:d9:
64:58:e6:51:30:d8:ed:b1:19:d6:71:0e:98:ad:19:
b3:e0:df:6b:a7:5a:d0:b0:00:d2:bb:06:79:1b:b8:
52:1d:8b:6c:6b:aa:92:98:c6:d7:56:5f:0c:7c:84:
bc:42:8b:f4:c1:a0:d9:cd:41:3d:25:40:1e:23:56:
03:e6:32:17:c9:05:71:e1:81:a4:5e:fb:a8:7e:cf:
95:02:a9:24:a5:a6:65:5d:78:26:69:6a:8c:8b:9e:
86:c1:82:7b:d7:0e:d6:8e:2b:8f:11:a1:be:9e:c0:
a4:a5:23:78:78:4d:e7:f2:b3:8c:db:13:f4:2a:da:
5e:60:7a:91:59:17:a8:7d:e1:5e:44:c7:f6:40:93:
b7:07:0b:0a:db:e1:c3:91:cb:2f:31:9a:d8:a1:18:
b1:24:30:7b:44:67:4f:80:73:70:43:66:e6:be:b0:
4c:ae:0b:32:2b:af:7f:cd:10:1c:30:ee:fb:30:c0:
e0:51:12:3a:8e:58:29:56:57:65:31:ca:3c:03:ff:
27:37:0a:fb:b5:49:db:52:0d:17:f7:fd:90:ac:c6:
c4:af:0c:0c:bb:3a:6b:2a:01:3f:c8:97:42:50:8b:
32:ec:59:d1:13:76:29:f7:61:dd:b4:d8:1c:bb:20:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:95:68:D9:06:98:19:DF:64:78:00:9B:C8:8C:7D:A3:B7:42:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9A007342CB711F1851ED7C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
95:73:d9:c7:5e:1f:53:42:e8:64:5a:e0:bc:d8:44:61:89:b5:
29:60:e5:e0:90:c7:69:20:be:78:b7:c3:ce:63:f4:13:b1:d5:
2f:88:40:b7:dd:0f:59:4a:64:dc:9d:cd:ff:e5:3a:45:22:d3:
45:72:8d:23:c3:a2:03:a9:99:79:6b:fc:a3:3f:16:13:9e:b9:
60:03:9f:7d:c9:91:b9:c7:fc:04:b1:d5:44:9a:a1:8b:bb:56:
82:1d:b1:b0:4e:4a:2d:9c:aa:50:2a:54:c0:9c:e4:29:2b:d4:
f3:a6:05:a6:4e:ca:6a:eb:5c:e2:9e:05:76:94:a4:20:94:91:
d1:8b:ef:7c:e4:3b:f3:6b:20:88:d7:1e:e0:28:d7:22:4b:b9:
2b:8e:f5:1f:91:c7:36:0a:e4:9b:87:e2:45:34:39:84:5a:1c:
0e:0a:d1:89:f1:00:eb:a1:7d:ff:ac:04:dc:f4:8e:3f:37:28:
4a:5c:b5:3f:87:2a:d8:6a:12:74:5d:95:7c:38:ce:8f:7a:40:
ba:08:22:6f:d2:1b:fd:19:d3:b5:41:a5:19:cd:51:5d:5a:34:
3f:a2:92:d5:dd:1b:c9:11:f2:9f:6a:b2:ae:45:e6:31:c7:55:
21:f4:53:b8:32:1c:42:66:11:f5:15:37:b8:b6:0a:3c:a5:6f:
9e:d4:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:44 2026 by rpki-client