Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/392624B2177911F1AF395CD4DAE4EC9C.roa
File: 392624B2177911F1AF395CD4DAE4EC9C.roa (raw, json)
Hash identifier: 03vjuy9q6PWQsl+Mt3Q6rQXfHXnd9HI6EvwqY3DnNaA=
Subject key identifier: 91:1C:86:FC:53:66:46:14:4D:47:61:35:57:AB:69:9B:E4:37:CD:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A21C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/392624B2177911F1AF395CD4DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 03:21:24 +0000
ROA not before: Wed 04 Mar 2026 03:21:20 +0000
ROA not after: Wed 01 Apr 2026 03:21:20 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.227.143.0/24 maxlen: 24
156.227.145.0/24 maxlen: 24
156.231.98.0/24 maxlen: 24
156.231.101.0/24 maxlen: 24
156.232.32.0/24 maxlen: 24
156.232.33.0/24 maxlen: 24
156.233.109.0/24 maxlen: 24
156.242.66.0/24 maxlen: 24
156.242.67.0/24 maxlen: 24
156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.172.0/24 maxlen: 24
156.249.173.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
156.249.177.0/24 maxlen: 24
156.249.179.0/24 maxlen: 24
156.249.196.0/24 maxlen: 24
156.252.8.0/24 maxlen: 24
156.252.11.0/24 maxlen: 24
156.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107036 (0x1a21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 03:21:20 2026 GMT
Not After : Apr 1 03:21:20 2026 GMT
Subject: CN=69a7a534-b935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:a4:f7:93:30:1b:a0:ac:05:5d:d3:50:09:
b9:41:21:1a:65:62:6f:cc:b7:c6:1d:90:63:07:59:
e3:10:10:85:5f:fb:8b:5f:08:3c:2e:f9:cd:19:b5:
c0:44:56:cc:a5:84:b0:73:de:e9:d5:7e:b7:22:b8:
9c:a5:6d:52:96:15:98:9e:ef:41:b8:9b:4b:2c:10:
9b:29:9e:db:9c:24:40:ec:0c:7a:76:e0:98:01:8b:
ef:4a:d5:5a:cf:76:af:14:c7:4d:2d:4d:c1:2f:d4:
30:1c:a0:f6:a3:84:7f:71:ae:46:8d:c7:49:d8:67:
68:ee:92:5c:ef:a6:ff:83:1b:65:07:b6:83:1b:8a:
2f:0b:74:65:52:06:85:97:a1:37:44:79:d0:68:4c:
f0:7e:58:3d:06:73:25:f3:bc:9b:da:a9:c4:bd:45:
de:3a:a5:15:47:64:74:41:04:53:93:b1:bc:cb:49:
22:0f:ef:cc:27:7d:82:46:af:13:a3:f5:42:33:8c:
24:75:e2:30:ff:4f:f3:9d:d8:24:1c:8c:f5:23:84:
f2:1d:de:ef:f0:13:c7:cd:b1:70:5f:45:59:cf:85:
2d:8e:62:a6:39:8f:d4:cf:67:2a:41:d0:a7:d2:f8:
58:90:fa:57:25:46:98:5d:17:25:1c:19:f0:4c:4c:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1C:86:FC:53:66:46:14:4D:47:61:35:57:AB:69:9B:E4:37:CD:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/392624B2177911F1AF395CD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.227.143.0/24
156.227.145.0/24
156.231.98.0/24
156.231.101.0/24
156.232.32.0/23
156.233.109.0/24
156.242.66.0-156.242.68.255
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.172.0/23
156.249.175.0/24
156.249.177.0/24
156.249.179.0/24
156.249.196.0/24
156.252.8.0/24
156.252.11.0/24
156.253.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6c:62:75:ed:2d:67:8b:0c:7f:2c:50:05:64:04:36:63:5c:
b3:4f:1f:c9:f5:ec:1e:6e:03:c6:3c:5f:bb:39:0e:16:55:48:
dd:10:65:8f:5a:da:36:b2:02:55:3e:cc:a4:c3:8d:ae:fa:d6:
4b:f2:6e:04:af:cc:4b:fb:f4:d6:99:2d:22:c6:93:d4:29:fe:
4a:00:61:86:81:2e:28:d1:b7:32:86:19:59:3a:40:9f:12:44:
cf:c0:55:66:cd:ef:5d:68:d9:5d:20:04:3e:ea:9d:89:72:a0:
cb:6c:8d:5c:84:23:ac:c9:6c:d9:2f:77:40:f7:46:05:d8:bd:
fb:fa:11:04:23:3a:31:20:4d:f3:bc:da:e3:71:da:11:ed:7c:
74:19:83:68:c3:fb:31:ab:18:e2:bf:ee:44:ae:83:2a:d4:84:
90:b1:3c:d7:e9:a4:09:23:9b:7c:fa:16:56:51:59:5c:6e:42:
39:0d:29:7a:d9:88:c3:47:f9:f9:d1:af:4e:88:91:d9:1e:90:
93:dc:7c:0f:d4:c6:e4:d9:ad:cb:15:0b:48:cf:1a:86:a7:e1:
2e:da:67:b4:78:64:7b:c9:ab:94:be:fc:83:af:84:27:b0:59:
ec:b0:44:ba:a0:6a:21:49:c3:ed:48:27:93:34:2f:36:53:aa:
75:cb:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:22 2026 by rpki-client