Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29C73B5A162011F199466786DAE4EC9C.roa
File: 29C73B5A162011F199466786DAE4EC9C.roa (raw, json)
Hash identifier: MtKXXGqfubUMS85TJ4Fq+d3ucTGh/ZOV+dMVG/w4KB8=
Subject key identifier: 06:F2:12:33:8B:6F:A9:B7:A2:B6:A1:E8:0E:70:9B:C1:32:6D:A4:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29C73B5A162011F199466786DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 10:11:22 +0000
ROA not before: Mon 02 Mar 2026 10:11:17 +0000
ROA not after: Sat 04 Apr 2026 10:11:17 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106956 (0x1a1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 10:11:17 2026 GMT
Not After : Apr 4 10:11:17 2026 GMT
Subject: CN=69a5624a-ac85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:25:56:bb:6d:43:e2:69:f8:32:92:3e:dd:
b7:18:87:d3:7b:7b:30:e7:59:1f:60:f3:6c:81:36:
e5:41:a0:f3:16:4b:33:81:0b:0b:1c:c6:89:2b:a2:
81:31:45:89:c8:6c:9d:f2:06:4d:9b:1a:ed:77:69:
11:e0:fa:8c:d8:eb:c9:df:6e:88:63:a6:15:76:a4:
a7:9f:bf:b5:55:f4:d9:62:1f:8b:82:09:b6:84:0b:
75:05:3e:09:df:57:5e:f6:52:e1:3d:7f:ce:f2:2c:
a9:a9:59:d3:72:4e:4d:5c:1a:ae:57:64:6c:e0:7f:
28:d1:58:96:3c:6b:41:6e:2c:01:b8:d2:52:2a:c2:
57:9f:75:92:c9:74:99:94:37:4b:46:d0:9a:f8:27:
90:89:7b:3a:a0:98:ff:ad:4c:f4:83:4b:48:9a:49:
5e:ca:b2:48:9f:ff:f4:13:ed:2d:e1:4e:3f:a4:51:
06:a0:2d:08:3f:c8:94:cf:86:27:1c:62:58:e9:64:
79:f5:ee:cf:4f:cc:5b:02:f5:a0:02:d0:df:fa:7a:
be:fe:19:33:62:0e:d5:72:a5:a4:0b:2f:b3:b3:ed:
1a:eb:56:56:6c:31:10:38:3c:37:fe:e6:ae:37:59:
3b:0d:a2:43:40:bd:1d:0b:18:68:ae:95:ee:e3:29:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F2:12:33:8B:6F:A9:B7:A2:B6:A1:E8:0E:70:9B:C1:32:6D:A4:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29C73B5A162011F199466786DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
63:82:6f:72:ae:01:d5:11:31:26:e2:6b:4d:19:5e:18:10:3c:
fb:b6:97:20:15:1a:f2:23:0b:0f:79:d6:17:30:37:91:cb:ce:
6b:f1:c0:f7:57:58:6e:6e:43:e2:08:92:29:0f:44:61:0b:b0:
dc:5c:6e:93:23:88:56:1d:4f:11:53:39:5a:38:9c:f4:39:fd:
b7:1b:3d:f1:e9:08:55:f4:4f:2d:d5:10:2e:d5:e7:12:1f:39:
c3:59:84:63:98:36:19:d2:76:71:ab:4c:67:7a:44:88:02:b0:
14:b4:6a:de:31:c7:f8:60:26:a8:81:43:dc:14:7e:b2:c5:33:
90:57:81:ca:d0:61:31:37:ba:26:e2:79:25:fc:6f:65:66:7f:
b5:39:a8:60:84:a8:68:67:1f:54:c4:42:e5:90:02:ed:65:f0:
9c:9a:61:79:64:0d:60:ec:f3:b8:85:e3:b7:46:23:db:19:2b:
16:9e:d3:b8:9b:2b:f8:44:dc:e7:85:19:cd:f9:55:18:0a:6d:
9f:08:d6:9d:5b:dd:18:48:ff:e7:c9:ed:72:d2:e4:01:8d:ea:
1e:f8:45:4b:c8:98:ad:de:9a:98:b1:b5:4b:46:05:cc:84:d6:
76:ca:12:3e:5e:8c:5b:b3:4b:e4:38:37:46:36:93:62:7b:6d:
78:5c:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 12:39:44 2026 by rpki-client