Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22BF98361D1711F1BA39FDE6DAE4EC9C.roa
File: 22BF98361D1711F1BA39FDE6DAE4EC9C.roa (raw, json)
Hash identifier: j5vuW9GXFJTXiJ1K04Rbq8fUIK+8L5bPZl2Fxe48/nU=
Subject key identifier: 7D:A0:95:9C:7E:D6:D1:D4:E6:6D:11:E5:11:06:0D:25:CC:2A:C3:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22BF98361D1711F1BA39FDE6DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 06:54:23 +0000
ROA not before: Wed 11 Mar 2026 06:54:19 +0000
ROA not after: Wed 13 May 2026 06:54:19 +0000
asID: 135097
IP address blocks: 156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107510 (0x1a3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 06:54:19 2026 GMT
Not After : May 13 06:54:19 2026 GMT
Subject: CN=69b1119f-a3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:36:fb:f6:a3:83:3d:44:6f:97:f6:5d:ab:
60:3c:bd:cd:29:a7:aa:09:81:ee:38:ba:a3:72:b9:
74:d3:dc:4e:dd:a4:c6:2e:c3:67:14:92:fd:77:1b:
07:e2:17:91:6a:10:15:6e:86:f6:d5:b3:d5:aa:87:
3b:9d:b7:d3:88:e2:65:92:23:39:eb:ff:ad:5a:75:
37:25:62:87:b2:f8:5a:4e:1c:c3:bb:9c:94:0c:dd:
5e:93:e7:aa:2f:63:73:62:d5:42:3a:80:00:13:0f:
88:ee:52:d2:ba:83:c1:bc:e8:61:7f:ac:9d:5e:65:
f5:2d:eb:48:39:d1:b3:a2:9f:54:d2:57:ce:f5:0a:
14:2f:2d:85:b1:70:ca:87:84:d5:10:66:e3:04:e4:
e6:18:86:c3:24:91:b0:98:e5:27:b8:a4:12:27:30:
27:04:ef:35:e5:5b:13:2b:47:d4:74:00:9d:03:74:
ce:13:fa:7b:12:bf:d8:aa:85:ed:96:6f:ea:12:4b:
e1:b2:ba:f8:90:e8:2d:7f:4a:e7:93:78:03:f7:52:
d4:d9:f2:69:40:1c:69:eb:56:c4:6d:a4:df:eb:e7:
3f:4b:de:82:a1:13:c1:09:d2:2b:5f:71:d7:ec:9e:
d2:20:3e:0d:c2:19:43:39:1a:17:a2:f3:df:59:07:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:95:9C:7E:D6:D1:D4:E6:6D:11:E5:11:06:0D:25:CC:2A:C3:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22BF98361D1711F1BA39FDE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:7f:32:77:f0:6f:5a:5a:84:9b:c6:a8:c2:46:fd:70:2c:1a:
a9:80:e6:4d:de:42:f2:08:a7:69:ad:76:cf:67:fa:87:69:85:
65:d3:27:e1:c6:e0:35:a1:67:af:a6:8a:78:4d:c5:f6:74:32:
d0:1d:63:d4:94:2c:3e:d5:4a:c1:81:bd:6c:58:bc:53:63:de:
10:d3:ca:c3:40:fa:8f:40:67:40:c2:93:04:45:9d:08:94:6a:
85:47:91:54:ca:cf:1f:45:e2:5a:63:04:cd:90:79:94:62:a7:
09:34:3e:9b:75:f0:ae:6d:7a:07:b6:a6:69:45:85:91:08:e0:
cc:55:73:db:c5:eb:a1:48:18:a6:7c:79:88:17:06:a4:1d:f0:
c0:a5:eb:f3:ff:f8:da:cc:2e:55:a8:08:93:dc:b5:b2:ce:3e:
e0:9f:7e:95:4e:4d:14:a7:e4:b4:ac:d0:78:c1:2c:50:52:2b:
b2:6e:10:54:e7:20:e1:41:43:99:c1:d7:94:e9:00:07:84:e8:
4c:0e:e6:7e:6b:83:d6:45:7a:9e:00:d4:74:2c:44:ff:5f:70:
3d:8e:1e:57:c3:cd:32:e5:02:fa:7a:e4:bc:f0:3c:d8:dd:a0:
62:67:00:46:ff:1a:7c:88:ba:7e:24:4f:2c:f9:dc:e0:14:ee:
58:8a:97:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:23 2026 by rpki-client