Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0437CA841B9911F19130D8A9DAE4EC9C.roa
File: 0437CA841B9911F19130D8A9DAE4EC9C.roa (raw, json)
Hash identifier: eZYgq4OqaR8sN1PCdnmPmK0VV5VuoRejYACBmQxRhOM=
Subject key identifier: CC:BA:81:41:26:71:04:7A:98:45:FF:06:E7:C6:AE:D2:F3:4D:76:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A379
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0437CA841B9911F19130D8A9DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:19:05 +0000
ROA not before: Mon 09 Mar 2026 09:19:00 +0000
ROA not after: Wed 18 Mar 2026 09:19:00 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107385 (0x1a379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 09:19:00 2026 GMT
Not After : Mar 18 09:19:00 2026 GMT
Subject: CN=69ae9088-0e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:a5:26:48:08:1e:b6:c1:d0:20:82:2b:51:
6d:fb:67:3c:51:fd:d6:b3:99:b1:99:6b:fd:49:be:
0c:67:78:6b:05:3e:a2:d4:ac:5c:f0:1f:45:5d:1b:
f8:e0:39:64:a3:47:1a:21:24:44:a4:71:a4:67:e0:
fa:6f:1f:12:9a:9e:e9:8d:40:99:80:df:80:e8:9e:
61:39:0c:11:09:3c:23:32:65:56:f9:0c:d3:ed:4f:
fb:1f:9a:14:47:c0:d2:18:38:08:a7:82:03:e1:82:
ab:cf:63:6e:4d:36:f8:7c:82:17:40:9d:37:da:bb:
b7:02:e0:52:98:b3:aa:11:68:f4:6d:dc:d2:5d:91:
6b:85:22:31:72:76:59:67:1a:b9:fb:b5:6d:9c:4b:
81:05:6e:6c:02:19:fe:39:a7:1c:67:3f:8e:29:2f:
e3:83:e3:01:93:12:79:13:cf:41:2c:dc:f2:53:c2:
01:3e:19:b9:1c:7b:e6:6c:60:bf:2c:10:9d:dd:e1:
b0:15:5c:53:b1:ae:79:64:a0:33:5b:6e:9e:fa:2c:
af:5a:2d:5b:8a:83:22:06:e7:4b:22:ba:d0:89:7d:
06:fe:02:56:bc:8d:d9:7f:75:bd:24:93:b1:0a:c2:
7a:17:7f:e3:f7:6c:f4:cb:75:96:f1:49:e9:19:f6:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:81:41:26:71:04:7A:98:45:FF:06:E7:C6:AE:D2:F3:4D:76:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0437CA841B9911F19130D8A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:97:a2:77:25:0c:52:da:6f:6f:2b:42:b8:35:56:0a:4e:ab:
2b:d5:ad:7d:29:4d:05:a3:b5:47:7d:58:29:3f:6e:c1:bf:c3:
72:59:39:7f:b8:69:10:69:51:e2:ea:25:05:58:8b:84:53:32:
a9:b3:27:2d:89:c4:8f:b8:20:13:6e:dc:ed:d9:66:a3:fb:99:
18:cf:3f:30:e9:e0:64:29:e4:c2:02:49:87:70:88:54:21:09:
9a:21:e6:48:a8:11:f8:73:f0:f5:07:c6:96:80:49:d8:b8:e3:
2a:96:16:99:85:11:82:1c:76:ad:23:f5:74:d4:00:1e:63:9b:
35:f3:b9:d4:0b:4e:9e:d0:af:83:cb:ef:a8:af:65:0f:21:9d:
6e:d3:76:9e:c4:95:ff:da:08:5c:d0:d3:d1:1b:27:9f:9f:61:
a9:59:d5:be:6e:f2:31:39:ce:71:54:ac:93:13:43:63:bb:c3:
05:e2:f1:2e:f5:5d:76:4f:2e:4f:77:67:70:14:77:4e:d7:36:
c2:be:ff:41:12:f5:36:a8:c8:8d:b8:f4:88:2a:29:75:18:85:
53:f1:9d:aa:80:1a:1d:71:95:b8:1d:58:bc:e7:bc:a2:1b:9b:
82:72:6d:da:5d:23:83:c8:9f:48:23:a9:e2:3d:1c:55:0b:90:
67:28:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:19:52 2026 by rpki-client