Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634540FE237A11F1BF90D7ADDAE4EC9C.roa
File: 634540FE237A11F1BF90D7ADDAE4EC9C.roa (raw, json)
Hash identifier: VZ16GD6ekaTs1sirseVv30IW5dONStFaTaUjp80nvIw=
Subject key identifier: F4:8B:2F:CE:9A:5B:1C:30:57:A5:05:9D:DF:A0:5A:B0:24:7F:CD:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634540FE237A11F1BF90D7ADDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 09:59:59 +0000
ROA not before: Thu 19 Mar 2026 09:59:54 +0000
ROA not after: Fri 24 Apr 2026 09:59:54 +0000
asID: 395886
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108018 (0x1a5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 19 09:59:54 2026 GMT
Not After : Apr 24 09:59:54 2026 GMT
Subject: CN=69bbc91f-9dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:65:54:28:30:98:42:bd:4b:23:a7:a6:38:
fc:53:4b:c2:ec:4a:43:27:fe:4f:d4:67:8e:05:1c:
71:22:27:14:93:5d:5b:c6:fe:a5:4d:53:e1:cf:59:
c0:57:55:9e:83:18:ff:2b:91:c6:0e:fc:ba:1c:72:
33:2d:f0:03:8b:f0:7f:05:53:34:c4:86:94:22:0c:
2f:33:ac:02:5e:ac:ac:48:17:cf:9b:26:f8:2f:69:
e7:b8:93:e2:34:3e:08:9c:f1:ac:a5:91:47:09:40:
25:a4:28:b7:7d:77:d6:8a:94:b7:40:d2:a1:08:d4:
8e:4a:1f:12:c6:03:e7:ca:a0:48:b5:99:b8:51:06:
bc:43:a1:e1:fb:40:13:89:f7:76:2b:84:67:4b:73:
cb:00:ac:99:4a:35:dd:c4:8c:86:30:d1:32:8e:f7:
97:6e:bc:58:62:96:8c:32:86:70:fd:84:32:82:17:
60:79:22:3c:cc:1d:29:9c:03:2a:ac:60:ec:2e:f7:
38:bb:9a:e2:f0:0c:50:6e:05:75:ab:55:f2:e8:0e:
27:bc:70:0d:49:09:a8:85:d6:2b:e1:af:b6:b4:84:
60:82:79:e7:8a:4a:25:8c:a0:0e:ae:35:8d:2d:b7:
58:62:82:b2:6c:58:39:ee:52:a3:bd:4c:4e:47:97:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8B:2F:CE:9A:5B:1C:30:57:A5:05:9D:DF:A0:5A:B0:24:7F:CD:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634540FE237A11F1BF90D7ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.51.255
Signature Algorithm: sha256WithRSAEncryption
78:0a:cb:c1:1b:b8:7f:bf:72:4d:dd:e8:bc:e2:ae:78:34:e9:
15:b4:bb:e7:7a:e9:5d:89:27:46:aa:20:35:6e:a6:b6:6d:4f:
68:11:71:f6:45:6e:19:df:16:2a:06:88:12:eb:33:0a:8a:98:
2c:96:09:a0:06:4b:5c:81:d9:3a:4c:a9:6c:b6:2e:41:2e:38:
62:b7:d2:dc:ef:9d:fb:f4:ac:27:f1:fc:d0:d5:d3:74:35:e6:
1c:26:94:25:9f:84:ad:e3:cd:52:57:b4:e7:f3:3e:4d:4f:50:
0b:06:d2:c8:33:42:6a:d6:c3:8b:5c:ff:d8:d7:dd:59:44:fe:
7e:2a:a4:10:b3:13:3e:d3:94:62:03:1d:ea:a5:3e:f6:77:f0:
e4:ab:0d:5f:e2:96:75:73:d1:22:2e:e0:20:e4:c9:45:fc:64:
cd:a9:6c:17:32:c2:5b:cd:6b:c8:2c:be:fd:13:2a:ff:23:3e:
12:72:ac:0a:5f:00:3b:7f:91:6a:e3:cd:6c:78:ab:14:8c:ee:
80:ea:81:de:a1:f9:d8:77:cf:b7:59:46:da:89:8b:95:37:70:
c7:bd:33:b9:e7:dd:ba:99:bb:91:0c:ed:e8:9a:84:74:b8:ab:
73:60:e1:5e:0b:75:5a:a8:37:4d:7b:75:f5:16:b7:9b:6a:fe:
63:3d:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 20:17:48 2026 by rpki-client