Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64B3FCF03A9511F1B1EF4DB7CE1D38B0.roa
File: 64B3FCF03A9511F1B1EF4DB7CE1D38B0.roa (raw, json)
Hash identifier: JvrMOxmib5S60cKo+dSjQX3XFESxKO3sxzrJlPQzYYs=
Subject key identifier: 1C:29:92:1B:AF:61:02:6E:43:22:6E:C0:52:46:0F:8C:B7:27:64:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64B3FCF03A9511F1B1EF4DB7CE1D38B0.roa
Signing time: Fri 17 Apr 2026 19:41:14 +0000
ROA not before: Fri 17 Apr 2026 19:41:09 +0000
ROA not after: Sat 23 May 2026 19:41:09 +0000
asID: 150706
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109961 (0x1ad89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 19:41:09 2026 GMT
Not After : May 23 19:41:09 2026 GMT
Subject: CN=69e28cda-5dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:fc:d8:60:42:de:df:19:cf:28:ec:d5:d8:
6d:4b:0d:a9:14:50:a5:38:64:ca:03:b6:af:f6:b4:
91:dc:63:0d:84:17:f4:67:3d:f0:40:05:58:a3:be:
25:46:5e:73:0d:b8:ed:b9:21:91:68:31:83:9f:30:
c0:d2:17:29:8e:84:17:9b:84:74:c4:68:37:61:08:
aa:3f:a1:80:c2:dd:f6:56:a1:df:fb:26:46:2b:09:
ca:79:9e:5c:78:00:ca:f2:a6:e7:57:17:bd:b9:2c:
8e:75:00:4a:c4:25:f3:a4:5a:27:93:ed:e0:9d:37:
39:88:2d:4b:5f:f9:fc:60:c6:c6:6d:c3:66:39:f8:
9a:f2:84:c8:0d:d5:7f:fa:c8:6a:ae:70:09:b0:a3:
1a:b6:fb:71:d1:a0:40:de:cd:7f:e1:5f:08:0b:03:
f5:b8:8b:6f:94:d5:e5:f3:f7:76:e8:0a:0c:5d:c2:
b1:fa:02:69:2d:2b:ae:86:13:5f:de:cd:64:79:8d:
56:60:0b:b0:21:db:03:8b:93:c5:9c:ce:2f:31:e4:
e0:df:59:f2:7b:23:e4:32:a2:9e:83:cf:15:57:da:
08:40:25:21:cf:51:fd:27:ea:ab:7d:31:b8:6a:d1:
1f:4a:55:85:52:02:37:c5:5e:fe:3c:5f:4a:b1:15:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:92:1B:AF:61:02:6E:43:22:6E:C0:52:46:0F:8C:B7:27:64:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64B3FCF03A9511F1B1EF4DB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:d4:06:92:1c:c3:58:1f:99:1f:10:22:0a:75:fb:6f:44:3f:
c3:9c:1b:44:2a:44:a8:46:36:c8:a5:74:18:67:30:64:2e:55:
51:59:77:9c:84:d5:73:17:e8:12:5c:d5:f8:9b:50:af:2e:65:
bd:5c:be:e7:4f:9d:fb:1f:aa:f2:e2:f1:ac:9e:ad:c8:ca:2b:
eb:47:24:c9:e5:d5:c4:fa:50:24:5a:da:12:26:61:40:aa:79:
92:88:23:26:47:1a:05:67:8a:2f:06:a7:fd:5f:14:60:7c:2d:
70:e9:1b:84:12:6c:a3:55:f9:99:99:27:e2:e5:88:20:7d:fb:
74:8e:9e:35:c2:73:cb:0d:b3:65:1a:1a:2c:c2:f9:53:a5:8f:
3f:a9:6f:e7:fa:87:d5:92:99:ae:e1:60:9e:13:4b:54:39:42:
25:ba:f9:b5:0e:f4:21:8b:e7:a6:d5:89:27:93:b0:00:ba:f2:
3f:b7:c5:b0:11:99:3b:dc:bb:60:96:a0:62:f1:bb:54:98:94:
c6:f9:c5:c4:31:24:f8:da:a2:e1:07:f7:e5:b0:db:50:bc:12:
1d:26:90:a9:a4:92:5e:50:3e:11:50:a8:71:9f:6f:c0:0a:2d:
8b:47:0d:e7:36:01:10:50:f9:b1:6e:5c:d9:31:ad:98:60:d4:
57:0d:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:33 2026 by rpki-client