Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D7AB3FC19FE11F18E27BFD2DAE4EC9C.roa
File: 3D7AB3FC19FE11F18E27BFD2DAE4EC9C.roa (raw, json)
Hash identifier: Lg9ljKOen6OtycHYB9t387nqjkSxWThHqhEpwE/a61I=
Subject key identifier: 5F:01:CE:A8:1D:1F:2C:DE:54:CC:02:F7:0E:52:B3:66:69:26:6A:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A328
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D7AB3FC19FE11F18E27BFD2DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 08:18:37 +0000
ROA not before: Sat 07 Mar 2026 08:18:33 +0000
ROA not after: Mon 13 Apr 2026 08:18:33 +0000
asID: 20473
IP address blocks: 156.231.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107304 (0x1a328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 08:18:33 2026 GMT
Not After : Apr 13 08:18:33 2026 GMT
Subject: CN=69abdf5d-71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:4f:00:df:de:15:fd:63:d0:21:d1:b4:38:
c2:92:f6:02:c7:ee:75:ca:09:7b:22:05:0e:d5:40:
60:4d:ad:ab:ac:26:a6:17:df:de:83:07:b1:e1:94:
39:db:61:52:ef:9c:45:40:14:f5:24:79:3f:0b:e2:
b6:5f:aa:f9:be:1c:34:75:f4:44:99:c7:ac:97:7d:
f7:c1:6d:fd:17:2c:77:6e:d5:f2:9f:ac:5b:5c:ab:
30:22:18:2d:9e:4a:aa:a7:02:7d:40:f2:64:d2:ac:
ad:84:47:9b:a4:4c:7f:02:31:5c:92:03:e3:bb:2c:
09:b7:fb:92:d1:0d:8d:ec:f2:f0:01:4f:a1:52:cb:
31:2c:6f:ab:dd:c9:54:77:02:f0:f1:c4:5c:05:6c:
28:c0:13:c6:c5:89:8d:7e:0b:7b:5a:e6:b2:7f:89:
aa:b9:f7:2f:d0:e0:29:b8:5e:e3:3b:9b:8a:21:8f:
b0:dd:64:db:61:0a:0d:28:b8:0b:74:14:f4:03:df:
16:15:f1:7a:ad:d2:02:7d:60:01:f0:e2:5f:9c:ae:
83:ef:de:7e:ba:9a:ad:13:d7:85:96:e9:0d:7c:1a:
38:ff:21:68:ee:cf:b1:5e:99:c4:d0:bc:67:1c:4a:
02:4d:bb:8a:25:8c:af:5f:c3:c9:c4:8f:06:e3:d4:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:CE:A8:1D:1F:2C:DE:54:CC:02:F7:0E:52:B3:66:69:26:6A:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D7AB3FC19FE11F18E27BFD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.10.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a3:d2:fd:da:ff:b4:57:7d:b6:5e:3c:9e:82:25:fd:a2:39:
42:b1:96:02:d0:69:d1:37:b3:5c:13:0d:9a:4a:46:b3:6c:74:
21:ec:90:f8:37:45:6d:8c:87:9d:80:be:77:5b:d4:c0:dc:87:
c6:63:9d:d7:e4:db:f6:e1:b7:3a:e6:0d:d3:60:0c:e5:f7:e2:
31:0e:a7:77:6e:a7:f7:51:99:a9:c4:45:8c:4e:fd:b1:60:73:
8a:c7:ec:63:ae:b7:16:89:b1:c7:ab:66:2f:1f:27:c9:b2:8b:
7f:39:c4:6c:61:4d:bd:da:f5:be:3d:dc:6f:cb:69:3b:ba:10:
5f:7e:32:f8:b2:50:98:56:ea:d6:46:64:f6:c0:98:84:9b:24:
96:99:b4:c9:c0:0c:df:57:ad:a6:f5:27:9d:ea:f7:5c:cc:49:
4e:82:08:7c:09:f6:5a:e8:1d:1d:01:9a:db:f4:93:32:73:ba:
ee:84:f7:34:fe:1d:03:ed:77:99:11:4a:bd:f6:e4:ec:87:77:
f9:9a:bc:ea:4b:26:87:7a:0f:8d:09:5d:2f:bb:03:b8:82:88:
9b:4a:c3:12:11:90:13:a3:75:bc:18:a9:03:d3:1c:3e:38:f5:
3e:dc:ba:e3:79:9d:be:92:ce:a5:81:2a:ba:28:a5:b7:eb:56:
e4:5f:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:39:51 2026 by rpki-client