Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CD769616E011F189A5E0A4DAE4EC9C.roa
File: 90CD769616E011F189A5E0A4DAE4EC9C.roa (raw, json)
Hash identifier: G6OYtQyi8PqjAVMKrjpDPl8EgVi82YrbhssJpwnU5j0=
Subject key identifier: F0:D6:BD:1B:76:BE:AD:47:68:A1:52:9E:2E:29:6D:5F:D4:9D:BC:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CD769616E011F189A5E0A4DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 09:08:38 +0000
ROA not before: Tue 03 Mar 2026 09:08:33 +0000
ROA not after: Thu 12 Mar 2026 09:08:33 +0000
asID: 149014
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106991 (0x1a1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 09:08:33 2026 GMT
Not After : Mar 12 09:08:33 2026 GMT
Subject: CN=69a6a516-6981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:0b:e1:5c:37:0f:57:01:4a:d3:a4:33:78:
10:9c:32:44:c3:fa:1c:4c:9e:ad:bf:d0:29:eb:8a:
a8:f4:ee:b1:bc:e2:35:5b:c4:2f:e1:7b:7c:c5:bc:
22:3a:f2:c3:08:61:65:79:35:88:07:a4:84:4d:29:
bc:16:6b:93:9b:de:b9:c4:89:e6:01:9b:bf:03:4e:
20:0a:87:ad:f3:98:fd:64:70:be:de:a5:35:20:6c:
fc:19:c8:df:76:98:48:a4:20:f8:3b:65:ce:db:86:
de:23:0e:25:0b:e5:41:a9:dc:17:40:56:63:51:fb:
92:07:c8:c3:f0:e6:14:b5:43:3c:b1:4b:d4:18:8c:
de:c1:e3:bc:a4:e1:9d:76:f3:35:f0:4e:02:1f:a9:
e8:2c:81:a4:ca:08:e2:99:f1:9d:fc:cb:32:9a:a2:
4c:d3:76:4f:69:08:c3:98:f6:b6:8e:60:13:9b:01:
bc:f4:c7:2e:8d:cf:05:c2:66:6f:99:19:a5:2b:2a:
36:b7:96:c4:78:3c:23:5f:dd:e7:7a:5b:45:6a:b7:
0c:93:fe:07:1b:3c:e1:4a:fd:d2:c8:3a:3e:3b:20:
42:be:8c:21:31:b5:9e:af:82:ae:84:35:79:a3:0b:
dc:e6:52:24:30:0e:df:66:5e:8e:8d:f1:d1:26:65:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:BD:1B:76:BE:AD:47:68:A1:52:9E:2E:29:6D:5F:D4:9D:BC:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CD769616E011F189A5E0A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
99:eb:75:32:24:63:3b:06:47:74:c8:fb:bc:d1:33:56:5c:c6:
af:70:45:2c:9b:e1:e5:af:5e:bb:46:77:f8:c8:4c:53:64:e2:
72:5f:b2:3a:9c:21:95:c7:4b:a3:a8:4d:43:cf:8f:15:7d:1d:
f3:f9:d4:74:63:a9:45:64:66:4a:80:81:39:e7:4a:ea:06:da:
0c:85:e7:6e:70:14:e2:78:ef:b9:21:2d:fb:20:b2:3b:85:a6:
30:04:74:91:3e:81:00:cc:6d:f6:a9:8e:ef:6b:da:25:50:84:
55:1b:53:d1:57:24:9c:c7:ed:60:a4:fd:3e:9e:f4:90:30:59:
e8:03:db:fc:da:d7:ba:54:61:8c:f8:e5:d8:5a:84:a9:1c:73:
33:02:ff:9f:55:2d:12:13:18:8b:b1:35:02:50:fe:db:92:76:
b0:4c:9d:61:9f:ef:d5:31:59:d0:64:19:f2:c0:91:ef:da:8d:
b5:80:f3:a4:93:a4:e3:fb:bd:18:32:25:d2:27:44:24:2f:04:
80:5d:29:db:17:e3:3a:dd:ac:e4:d6:97:a9:33:53:01:e4:ea:
f9:f1:87:47:4b:45:76:3a:68:4a:65:92:ca:7c:cc:93:ad:2c:
5c:00:c8:fd:db:4b:43:4f:fc:3d:dc:e6:88:70:fc:6b:54:1f:
8b:e9:11:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:36 2026 by rpki-client