Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B6B24E2CB511F1B1FB79B7DAE4EC9C.roa
File: 23B6B24E2CB511F1B1FB79B7DAE4EC9C.roa (raw, json)
Hash identifier: bjqVBzrQEISVfo+mymLnR8gAL9BsDdhTOYBznqMM+VA=
Subject key identifier: 1C:DA:58:01:C6:57:15:29:F6:BE:95:73:3E:42:69:A7:40:10:D3:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B6B24E2CB511F1B1FB79B7DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 03:53:13 +0000
ROA not before: Tue 31 Mar 2026 03:53:08 +0000
ROA not after: Tue 05 May 2026 03:53:08 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108747 (0x1a8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 31 03:53:08 2026 GMT
Not After : May 5 03:53:08 2026 GMT
Subject: CN=69cb4529-8977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:a6:6d:96:3a:3c:23:ba:90:dd:59:c7:49:
09:2c:0e:1e:4c:7a:a0:b8:3b:65:3f:6b:da:f6:7a:
fa:09:62:01:4f:13:a8:7b:d3:d1:03:32:e3:e2:9a:
2d:dd:99:98:6d:cc:e8:53:63:13:d0:14:4e:98:ec:
b6:d7:61:bb:ee:38:84:e4:0c:bc:98:24:bf:68:85:
ba:c1:97:ef:17:85:a0:a2:3f:47:6c:1f:a6:d6:13:
10:63:da:67:47:c3:05:5b:95:77:e0:0a:86:e6:63:
38:ef:8b:84:73:36:75:b0:8d:8b:a0:0e:cf:bc:0d:
dd:dd:56:48:c0:45:b5:72:3e:75:b2:09:54:47:bd:
83:59:83:3d:73:f6:2e:f8:47:5e:e9:e6:75:c3:27:
57:72:d8:d2:58:0c:77:1b:c1:84:a9:d6:82:16:b8:
34:c4:d3:ce:1e:fe:3b:8a:b3:75:04:6e:7b:a5:a6:
71:e3:7c:56:cf:01:ea:00:26:dd:f9:d2:c8:19:d7:
12:8c:65:88:d3:f5:da:d3:c9:db:d3:87:75:29:ac:
48:b4:8e:1c:fa:3b:b5:92:5c:8f:8b:38:6e:f8:88:
07:5e:13:24:d9:c2:50:df:5a:39:0c:66:b3:c2:0b:
31:08:88:88:34:e4:89:02:e0:a5:fc:4b:15:ed:7f:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DA:58:01:C6:57:15:29:F6:BE:95:73:3E:42:69:A7:40:10:D3:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B6B24E2CB511F1B1FB79B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:8f:cb:0f:62:e9:81:31:48:cf:a7:32:f2:29:b6:64:ea:b8:
3e:5d:9f:19:7b:5a:be:88:6a:4a:88:d5:78:dd:13:d2:87:e6:
80:35:ca:11:d4:44:8d:a3:34:ed:8e:db:eb:62:a5:df:cc:e2:
74:10:f0:6f:9c:52:14:73:55:e3:16:c8:5b:7e:c8:71:30:ac:
2e:eb:17:67:c6:55:6d:cd:b9:b4:e5:52:0b:0b:32:a1:98:74:
32:45:21:9d:67:b3:18:ae:3f:87:2c:25:5f:83:58:63:21:70:
92:f7:b1:96:05:72:39:3c:98:01:e1:7e:a9:6b:af:84:1c:a2:
79:22:d8:b6:53:62:f9:3f:b2:ed:93:b7:06:fa:55:92:91:2e:
9f:5c:40:8e:6b:be:f9:81:4c:f5:83:a6:59:24:6e:ba:34:65:
d9:3a:46:ad:01:73:d7:b3:93:db:92:2c:2c:48:59:68:b8:14:
72:e5:d8:04:17:a1:b5:18:59:23:93:c9:48:c5:86:5a:f9:d5:
50:14:eb:34:8c:44:f9:fe:1f:87:a2:53:df:8c:6a:b4:18:97:
82:27:4e:16:d7:38:65:39:a0:7d:cd:8b:7c:6b:4a:14:e0:c6:
f4:f7:3b:41:1a:29:08:4d:11:e4:5d:09:5b:18:d1:5c:44:80:
f1:48:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:10:34 2026 by rpki-client