Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE327B28FC2F11F0823A63A4DAE4EC9C.roa
File: DE327B28FC2F11F0823A63A4DAE4EC9C.roa (raw, json)
Hash identifier: 3AmTiwi4CxHmwLfmlOrD9YhObilghN1Nh5OIABW9e1o=
Subject key identifier: EA:E7:46:90:CF:53:0E:1A:7D:6E:93:1F:5D:3C:B7:43:80:70:49:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE327B28FC2F11F0823A63A4DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 09:58:17 +0000
ROA not before: Wed 28 Jan 2026 09:58:12 +0000
ROA not after: Wed 04 Mar 2026 09:58:12 +0000
asID: 32043
IP address blocks: 156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105040 (0x19a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 09:58:12 2026 GMT
Not After : Mar 4 09:58:12 2026 GMT
Subject: CN=6979ddb9-6dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:2e:af:7f:b9:43:e0:e3:38:47:db:08:ab:
5d:eb:8d:d8:3e:0f:0a:91:58:02:40:bd:06:f9:55:
b7:fc:5d:c3:0b:0b:2b:fa:5b:21:57:4f:ae:6d:01:
b5:a0:6e:67:f0:8e:c5:e7:c2:20:d8:21:95:d1:18:
f6:1a:41:0b:e9:9a:e0:28:68:a7:a2:01:82:7e:9a:
4e:9a:94:a0:20:8e:9b:2a:30:4e:ab:17:ab:33:68:
82:06:38:0c:49:5d:96:95:12:c3:f1:d5:6b:58:cb:
c4:f3:85:e6:7e:8b:d6:11:16:91:b6:4f:9c:bb:52:
1b:92:28:bc:45:48:85:a6:8d:87:72:8b:85:c5:bc:
f8:97:c5:e1:68:05:c6:88:97:99:a3:06:b4:e1:d7:
cd:3c:df:f9:7c:b2:20:b0:09:ef:43:ff:0e:3e:cb:
18:31:45:c1:00:c5:bb:62:41:0d:4d:d6:5f:74:3c:
9c:68:01:e1:2c:80:7b:8f:d6:94:52:9f:21:fd:5d:
b6:5c:dc:7b:c4:c0:12:99:bf:34:c3:3f:fe:dc:5a:
af:a0:82:32:e8:de:f9:34:68:7c:73:58:99:a3:f2:
ed:00:6e:e3:c3:38:58:67:a1:2c:5b:79:a5:8d:58:
1a:10:d8:43:32:d2:48:24:ab:e4:c0:97:fc:a4:1e:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E7:46:90:CF:53:0E:1A:7D:6E:93:1F:5D:3C:B7:43:80:70:49:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE327B28FC2F11F0823A63A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.48.0/21
Signature Algorithm: sha256WithRSAEncryption
31:45:d7:86:34:cc:92:1a:df:8a:b3:44:1e:bd:73:2d:cb:65:
a6:bc:de:d5:7d:95:67:7f:28:f6:48:8c:6c:ea:ec:07:d8:bb:
07:c6:6c:45:2a:83:e4:34:32:cf:2f:cd:d7:3e:c9:53:25:8d:
83:02:7b:8b:02:7a:e5:b7:94:86:45:36:7a:90:33:d7:80:be:
5c:9a:66:e9:e0:f3:03:70:63:65:b5:12:8a:a7:07:7c:98:47:
90:5b:f5:03:ba:0a:4e:59:65:f0:d8:56:2f:11:a3:f1:2f:80:
f0:c5:ec:3a:23:44:9b:c7:16:4b:21:01:bb:99:d7:7b:20:61:
2f:72:f9:a5:d3:83:9c:c7:93:bc:8b:78:c7:69:9f:11:3e:13:
e2:8a:86:ea:f9:1c:98:72:fe:b0:bc:80:44:f9:97:fe:de:c8:
ba:19:da:09:b9:1d:1f:2f:60:fc:7d:60:a1:0b:df:5a:48:62:
c7:e8:e1:7e:e4:ba:17:e3:bb:f5:04:b2:59:8c:ef:46:94:c1:
35:53:9c:2b:e4:bd:6d:f9:3f:bb:29:3b:90:95:46:b3:bf:94:
33:87:8c:df:e7:52:52:33:d4:e0:8e:fa:0e:ca:86:1f:7b:23:
e3:2f:bb:f4:dd:58:b7:24:ce:56:92:cb:54:95:a2:65:30:a2:
4d:ed:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:31 2026 by rpki-client