Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBD4C52109511F18219B785DAE4EC9C.roa
File: DDBD4C52109511F18219B785DAE4EC9C.roa (raw, json)
Hash identifier: emlFbw6MDJjoqBzyPdEhuR99ZallIOqowt266SHL2xo=
Subject key identifier: B2:F6:A6:B7:F0:D7:F7:B2:6C:7D:4F:5D:C0:49:3C:F1:C6:3D:F7:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBD4C52109511F18219B785DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 08:58:48 +0000
ROA not before: Mon 23 Feb 2026 08:58:44 +0000
ROA not after: Mon 30 Mar 2026 08:58:44 +0000
asID: 152092
IP address blocks: 156.245.135.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106484 (0x19ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 08:58:44 2026 GMT
Not After : Mar 30 08:58:44 2026 GMT
Subject: CN=699c16c8-01bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:42:a8:c1:26:44:9f:46:0d:07:4b:38:eb:
15:ed:74:38:4b:07:4e:f4:64:ea:76:ed:45:a8:97:
08:3b:ab:08:9a:49:e6:a2:d3:2e:8c:5d:2a:0c:27:
ae:02:3f:00:dc:a7:e2:d2:dd:eb:6e:89:ab:83:24:
80:e7:09:0a:0a:b3:1d:d8:e2:a5:3a:45:6e:8e:f7:
f2:0c:84:6d:e1:39:f9:81:69:9e:05:fc:e0:c3:06:
f8:34:ee:35:f2:af:02:06:e3:c3:1d:15:89:61:92:
65:47:38:ef:89:85:83:6b:48:57:b3:f7:2d:04:ce:
8a:3e:71:f0:92:d5:26:f7:a0:8d:e8:c4:37:a7:14:
31:e9:0b:da:4b:28:db:f7:0a:2c:7f:5e:73:2c:b9:
b6:53:79:e6:20:7e:16:2f:4a:3a:b2:7b:6d:f4:ca:
8b:64:84:87:c5:e8:06:b6:38:88:80:3e:3e:26:ae:
58:72:70:89:66:70:84:b7:45:48:ef:db:6f:55:74:
13:40:be:18:47:b9:b8:93:c0:8b:c1:80:d0:69:5e:
19:b7:89:09:5d:db:e8:fd:c0:33:e5:c7:94:56:f7:
52:e2:bc:d5:49:9a:75:69:15:15:0a:d1:c9:79:ed:
2b:8d:53:58:84:d5:cf:1d:0d:c1:43:15:6d:49:c7:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:A6:B7:F0:D7:F7:B2:6C:7D:4F:5D:C0:49:3C:F1:C6:3D:F7:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBD4C52109511F18219B785DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.135.0/24
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:32:5c:20:22:74:40:0a:38:2d:3e:35:13:ac:e8:6c:a0:d8:
d7:61:e1:12:db:34:f8:0a:59:9f:67:64:96:07:a3:aa:e1:e6:
92:73:18:cb:dd:5c:db:60:5b:4f:f3:e0:29:37:e7:2b:0f:ae:
02:ca:5f:b0:f7:f8:c9:62:d1:23:7d:6f:9e:98:a0:68:8b:06:
3b:53:71:a6:d7:de:73:78:04:34:59:1b:e2:2b:62:9f:6c:f8:
54:1c:36:47:09:23:47:76:43:68:1c:e8:66:14:f2:c1:5e:b8:
16:48:0e:48:1e:6e:1e:eb:e4:e4:b6:37:7b:1f:ad:97:b2:f0:
47:ba:3e:e7:0b:0a:a5:aa:61:4f:76:6f:45:67:05:2f:80:28:
e5:30:e0:15:7d:5e:1d:3c:8f:ba:40:6c:60:6b:eb:4c:de:d3:
18:be:3b:11:44:03:46:45:5f:e0:18:a4:b8:74:75:7f:46:ef:
d0:3c:6d:75:d5:4b:a4:8a:0e:18:f8:0b:00:d8:bf:34:b9:0a:
a1:d0:42:6e:7f:d3:8c:80:bc:56:ef:dd:5d:e5:f2:d3:4e:1c:
b1:99:a6:0b:aa:e6:55:ba:18:67:70:c2:4b:66:ef:81:2f:05:
a1:25:8e:50:ca:e9:1f:65:b6:59:f4:03:38:e8:9f:e7:96:5c:
01:2e:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:13 2026 by rpki-client