Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74ED5A3E1D2C11F1BB846DE1DAE4EC9C.roa
File: 74ED5A3E1D2C11F1BB846DE1DAE4EC9C.roa (raw, json)
Hash identifier: kKIOhtqO/4NmUY11C0h+plWV5ZiTARetx7AabL7wmj4=
Subject key identifier: 85:39:B8:6F:FC:0E:71:6D:34:26:EB:44:35:27:9B:D7:E8:D8:DF:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A42D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74ED5A3E1D2C11F1BB846DE1DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 09:27:00 +0000
ROA not before: Wed 11 Mar 2026 09:26:55 +0000
ROA not after: Wed 02 Dec 2026 09:26:55 +0000
asID: 209242
IP address blocks: 156.243.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107565 (0x1a42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 09:26:55 2026 GMT
Not After : Dec 2 09:26:55 2026 GMT
Subject: CN=69b13564-9b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6d:38:c3:22:12:76:d5:37:5a:d1:b5:c9:fd:
35:d3:c7:24:5d:97:e2:3b:b1:48:c7:a4:7e:f3:a3:
33:dc:05:1c:2d:61:2d:86:60:2d:de:12:c2:dc:50:
f3:ca:1c:4b:ba:11:3e:cf:fc:8e:15:94:b2:0d:91:
94:ba:bc:31:f4:2f:e7:0c:fd:bb:0d:36:35:37:5f:
b9:37:6c:b6:06:7a:21:d9:ee:5a:1d:04:f6:75:64:
c5:4f:01:94:8b:d2:dd:01:64:d1:07:9b:ca:f1:c1:
75:fc:40:e2:12:b7:1b:4e:64:2e:b9:7e:24:00:3b:
87:96:7d:cb:09:be:67:7f:a7:11:68:23:80:6d:92:
94:18:4f:60:0a:df:5d:9d:0d:4d:90:3a:85:76:ff:
2d:53:70:ee:90:77:a4:f8:7a:ed:36:56:76:a9:b1:
6c:f7:c7:f2:3e:19:3c:e8:6a:5d:4a:b7:72:9e:9c:
26:0e:c8:b9:71:b7:f8:56:9a:7b:3c:64:0e:6b:7f:
78:41:c0:8a:2a:b0:9b:f2:cc:c8:ea:35:b6:9b:c4:
83:d2:f6:19:32:71:78:a2:ab:e3:02:93:12:8b:da:
9b:34:2a:2e:48:db:47:ab:1c:63:5f:2e:5a:fd:c3:
99:18:4b:43:a4:3f:d1:ec:b4:eb:9b:85:52:cf:2d:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:B8:6F:FC:0E:71:6D:34:26:EB:44:35:27:9B:D7:E8:D8:DF:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74ED5A3E1D2C11F1BB846DE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e2:f6:40:66:38:b4:1b:5d:30:4b:a6:51:03:5b:e7:76:60:
09:e8:d8:2e:76:60:cc:4f:ea:44:15:1d:8d:bc:12:00:78:28:
49:78:b1:83:e6:54:2f:ad:f5:74:a8:34:94:2b:7f:da:b4:29:
7a:bb:83:68:f1:7e:ce:d1:7f:b6:f6:e7:87:f2:50:32:a7:9c:
48:4d:c8:6e:05:0b:91:de:8e:69:01:e7:7f:2a:3a:ae:e6:2b:
de:f3:4e:73:0d:a1:86:53:78:ad:6b:91:4c:57:ed:3a:ce:58:
bb:d5:5f:cb:39:e9:b7:cf:90:51:9d:87:1f:84:79:b5:4d:ef:
6f:f3:52:78:3b:50:90:5d:c6:f6:4d:c5:6e:9a:dc:a3:94:c8:
bb:27:de:03:23:01:7e:db:c6:b2:5e:4d:87:5b:ef:d6:b2:ac:
e4:cc:a0:01:e9:46:99:4c:19:59:05:a4:f4:02:50:2e:ab:f9:
e2:c8:01:05:c5:77:9e:e7:3a:de:ee:14:3f:7b:ac:ec:10:ee:
09:17:66:2a:38:2e:d5:a2:b7:aa:5d:cf:af:0e:b3:95:bf:95:
09:b6:31:e0:b4:26:8d:75:a3:32:90:bc:e1:61:2f:cd:8f:8e:
35:97:5b:fa:b2:5f:2e:88:23:6f:2d:67:90:18:90:11:45:3d:
e1:77:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 11:50:51 2026 by rpki-client