Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A1689A17B911F1A96F85D9DAE4EC9C.roa
File: 88A1689A17B911F1A96F85D9DAE4EC9C.roa (raw, json)
Hash identifier: qWOKscob3rg7eP2L21+NvFtzvKh7Jst9lQIC3ArUvY8=
Subject key identifier: 79:6D:9D:22:67:9C:FF:2F:09:A0:52:5E:9B:F7:E6:C1:18:2F:1A:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A238
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A1689A17B911F1A96F85D9DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 11:01:45 +0000
ROA not before: Wed 04 Mar 2026 11:01:40 +0000
ROA not after: Fri 08 May 2026 11:01:40 +0000
asID: 149014
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107064 (0x1a238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 11:01:40 2026 GMT
Not After : May 8 11:01:40 2026 GMT
Subject: CN=69a81119-8126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:dc:7f:c1:65:69:e8:cb:3d:28:7d:83:55:
e4:f9:b8:3e:23:4d:86:2b:90:33:1d:ca:6f:4d:26:
7a:f0:e8:64:dc:d6:55:42:96:74:cb:b2:f2:bb:94:
83:8d:2c:76:cf:fd:8c:dd:69:b8:4e:14:91:c8:57:
a5:86:0f:d1:ff:04:4b:a3:eb:70:32:fc:12:8f:52:
33:ba:83:5e:6b:f2:d7:6f:14:38:77:6d:d8:cc:76:
b4:82:24:fe:7d:2c:c2:5b:d4:6d:e3:55:8b:f7:5e:
57:a1:16:d3:ee:2c:9b:1c:cf:0e:cc:c9:3c:fd:3d:
c4:fe:19:40:dc:58:22:42:c8:7a:ca:0f:1c:0e:dc:
31:0f:2a:fb:c4:c7:17:59:25:a5:df:63:b0:82:27:
d7:a8:c5:24:31:9a:86:e1:2e:65:b7:71:a7:ce:2a:
ec:e1:75:53:c2:15:8b:1c:cb:87:4c:a6:ad:d6:cf:
10:dd:42:32:ca:53:a0:68:22:8f:b2:0f:e2:b4:6f:
41:be:d6:32:10:8a:46:f8:71:5f:aa:0e:70:f8:18:
96:65:cf:15:d7:b9:4e:cc:5e:6f:d3:5b:ab:32:cf:
c3:11:ed:4e:6a:cf:15:ab:f9:96:12:d0:90:6f:9c:
f4:d0:80:37:64:e3:bf:9e:0f:a1:a0:9f:b9:ca:0a:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:9D:22:67:9C:FF:2F:09:A0:52:5E:9B:F7:E6:C1:18:2F:1A:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A1689A17B911F1A96F85D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
16:ff:75:64:b4:f8:06:35:a2:6f:8a:07:de:8a:e6:a5:4f:bf:
eb:3b:79:cb:05:fd:77:47:d8:7f:d4:02:72:2a:33:9b:62:26:
89:d1:d3:13:97:95:bd:46:3b:51:5e:5d:a1:8c:f1:23:73:95:
23:fd:1d:40:71:bd:fd:e1:b8:cc:c6:59:79:e4:be:70:74:15:
2a:00:df:7d:a9:1b:9c:90:02:72:33:3f:d6:5d:25:1b:05:1a:
e4:7d:ad:f4:50:76:dd:0f:96:df:e7:86:43:fc:19:36:58:77:
6d:e9:fe:a0:40:9d:55:d6:e5:76:26:e3:26:28:d0:c3:2f:2b:
3a:1d:e1:ca:8a:c7:e8:59:b4:35:c0:a6:a1:1c:bc:28:f5:79:
00:c4:ab:1b:b2:1a:64:e2:78:bf:03:31:de:d6:6f:85:77:c8:
d6:6a:37:0b:f3:cb:59:28:55:b5:0c:5a:95:93:24:fe:89:e8:
46:56:f8:97:c8:00:be:0a:0e:96:43:31:bb:17:1c:51:c5:0b:
a5:d6:af:b1:d7:de:f6:38:db:8c:03:60:04:e1:fb:f4:b5:34:
69:cf:6f:1c:80:06:dc:18:f9:f0:a4:9b:a5:5c:2f:9f:cb:e8:
6e:0a:b0:b3:15:3b:47:a9:09:48:fd:b8:31:b9:fb:49:77:71:
5e:14:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:54:32 2026 by rpki-client