Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BB027BC2A8C11F1BF0D91E1DAE4EC9C.roa
File: 2BB027BC2A8C11F1BF0D91E1DAE4EC9C.roa (raw, json)
Hash identifier: uXwetWiZGxl1g+awp0rA41D/zTUD0ksuODlJADwrhqI=
Subject key identifier: F1:1E:21:5A:27:C7:D5:78:EB:D2:C5:C3:AA:C7:C5:E2:61:61:C3:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BB027BC2A8C11F1BF0D91E1DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 09:54:55 +0000
ROA not before: Sat 28 Mar 2026 09:54:49 +0000
ROA not after: Sat 25 Apr 2026 09:54:49 +0000
asID: 271355
IP address blocks: 156.236.195.0/24 maxlen: 24
156.236.196.0/24 maxlen: 24
156.236.197.0/24 maxlen: 24
156.236.198.0/24 maxlen: 24
156.236.199.0/24 maxlen: 24
156.236.200.0/24 maxlen: 24
156.236.201.0/24 maxlen: 24
156.236.202.0/24 maxlen: 24
156.236.203.0/24 maxlen: 24
156.236.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108511 (0x1a7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 09:54:49 2026 GMT
Not After : Apr 25 09:54:49 2026 GMT
Subject: CN=69c7a56f-1158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:71:69:7f:d9:e2:7f:fd:7b:eb:db:11:27:
8f:2c:5f:eb:52:26:40:5e:bd:71:92:6d:ff:92:d1:
b2:16:2d:17:f5:55:96:d0:60:7b:12:dc:15:9c:0a:
e4:de:76:f0:36:51:0c:81:9e:68:94:8c:c7:5b:2a:
2f:de:50:68:c1:8f:77:8b:69:fc:46:c2:01:0e:86:
57:46:12:9b:d0:f3:7c:48:c0:b5:6e:18:d4:c3:49:
19:f1:09:ab:bc:ab:5d:7f:7e:3f:3f:03:3d:86:60:
61:63:a3:b0:61:e7:0e:14:a1:17:63:4e:02:c8:fe:
c9:f5:2f:c2:d9:96:b2:87:78:21:c5:7c:75:0e:b8:
ba:e3:49:53:d5:4d:3a:50:e3:38:87:ff:97:7d:3c:
fb:f9:17:33:c9:44:66:50:2c:5a:45:3a:9e:f2:8a:
5c:4d:dc:15:03:ab:0e:c7:93:7e:02:da:8c:ab:6e:
b9:11:7c:e1:34:a1:18:20:d1:7f:90:0b:e6:3f:16:
03:57:5a:fc:49:9b:7b:e9:e8:66:14:95:72:20:a4:
11:78:fb:44:d3:a5:76:21:ee:85:5a:dd:87:e1:50:
c4:d0:c1:54:87:38:46:43:87:0d:5a:dd:a1:4a:7f:
6a:9d:2e:91:9c:4b:97:44:41:07:69:f1:64:f8:50:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:21:5A:27:C7:D5:78:EB:D2:C5:C3:AA:C7:C5:E2:61:61:C3:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BB027BC2A8C11F1BF0D91E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.195.0-156.236.203.255
156.236.207.0/24
Signature Algorithm: sha256WithRSAEncryption
32:36:f2:e4:ee:25:d0:b5:80:18:02:03:01:8a:4f:02:60:d0:
29:65:1f:68:a0:47:64:86:0f:a4:8d:c2:f5:cc:c7:c7:0f:35:
6e:ee:6f:41:9b:5f:92:35:f7:88:de:ed:ad:9e:4c:00:0c:d9:
f8:61:15:75:0f:29:a9:c3:09:7e:4c:91:00:e8:29:dc:7f:ab:
a7:9d:16:ff:17:22:f5:7c:24:76:2c:21:cb:71:53:ae:9c:c9:
49:a9:b8:a2:75:fb:1c:5d:bb:8f:4e:94:60:7e:f0:5c:bb:33:
44:7e:69:b8:4b:d1:3f:91:61:bc:c1:f5:fc:e2:30:c5:2f:e2:
5d:08:c8:ba:90:6f:e4:0a:89:1b:a6:81:88:0e:7d:f6:f4:c4:
34:99:81:5f:76:5c:d8:52:dc:42:34:f3:8f:c5:1f:b9:aa:81:
d5:7a:af:2a:79:6e:08:49:77:e3:08:4e:5e:d6:ea:2b:95:0a:
b9:0e:06:c4:bb:68:cd:2c:b1:c7:81:cc:ed:33:79:cc:24:e1:
b0:99:05:f8:6a:2a:b9:2f:b9:3b:a6:1b:4e:7c:eb:bc:66:10:
82:de:4e:17:f6:76:36:4f:ec:c5:ac:18:d4:20:4c:31:04:8d:
de:23:e4:be:ab:22:85:0a:b3:75:0d:04:2e:6f:02:8f:f6:8c:
e1:1c:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:35 2026 by rpki-client