Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F74E5019F411F1847DEE9ADAE4EC9C.roa
File: 95F74E5019F411F1847DEE9ADAE4EC9C.roa (raw, json)
Hash identifier: wG5vECGCV0cTtTOSL9Og1Wp5Yr4Xa0uKMCe1ioBrMJA=
Subject key identifier: 15:49:7B:63:08:D8:F6:66:C6:F8:5B:58:C6:90:1E:DA:01:5E:AA:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A322
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F74E5019F411F1847DEE9ADAE4EC9C.roa
Signing time: Sat 07 Mar 2026 07:09:30 +0000
ROA not before: Sat 07 Mar 2026 07:09:26 +0000
ROA not after: Thu 04 Jun 2026 07:09:26 +0000
asID: 136970
IP address blocks: 156.236.64.0/24 maxlen: 24
156.236.65.0/24 maxlen: 24
156.236.67.0/24 maxlen: 24
156.236.68.0/24 maxlen: 24
156.236.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107298 (0x1a322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 07:09:26 2026 GMT
Not After : Jun 4 07:09:26 2026 GMT
Subject: CN=69abcf2a-8fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:ee:d9:99:5d:bb:b5:b9:ef:f9:28:d9:1d:
2a:86:a2:36:9d:8d:e5:25:00:17:a8:cf:f9:84:16:
7b:b0:5b:bf:5e:ae:a5:2a:a5:9f:fd:f6:73:6a:8b:
2f:cd:be:39:2d:9c:c3:2d:bc:80:e3:e8:78:be:b7:
14:e5:b1:c4:e8:6a:bd:b2:29:a7:c7:a1:b0:42:8c:
e6:32:e3:b2:c3:f0:56:68:be:3f:77:d7:b0:b3:17:
02:11:87:21:0d:7d:25:fd:74:3f:a1:d7:0b:ac:95:
c5:d1:9c:46:7f:15:90:4c:f4:07:ee:f4:67:0b:da:
55:5a:79:60:f9:90:12:61:d5:7b:70:63:a2:50:1c:
79:66:5f:5c:43:4e:ed:0b:cb:f9:d9:5c:e8:7d:65:
e9:59:1e:1b:e7:d7:91:99:64:7a:28:3d:c8:7b:d2:
e2:e5:70:01:a9:60:c1:79:8e:da:4c:03:71:8b:06:
a2:e5:99:ac:a7:3f:4a:fb:db:d2:10:2d:06:21:99:
9d:bc:98:bf:49:09:36:9a:d8:f5:27:8c:2c:5d:26:
89:74:11:32:11:05:f9:4a:3e:3b:aa:4f:ae:b9:08:
3d:bc:28:df:fb:45:94:f2:1f:ae:e7:15:dc:d4:ba:
6f:d9:54:97:a7:f5:8d:86:7c:96:d2:a0:a8:60:e9:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:7B:63:08:D8:F6:66:C6:F8:5B:58:C6:90:1E:DA:01:5E:AA:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F74E5019F411F1847DEE9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.64.0/23
156.236.67.0-156.236.69.255
Signature Algorithm: sha256WithRSAEncryption
a2:a7:23:f5:f5:23:97:e0:61:34:9b:5a:a4:27:1a:a3:c8:eb:
27:f0:1f:eb:54:09:f5:38:f1:ad:30:4d:62:53:fe:aa:84:7e:
f3:c2:51:de:ec:6d:31:a4:a6:66:42:d3:7b:1b:aa:db:16:99:
3a:96:e7:77:07:7b:83:5c:c1:ad:55:ea:d2:89:dc:7c:cd:74:
0c:88:4d:f4:4e:7a:b7:7b:33:d2:52:e9:c6:f0:85:7c:cb:8b:
e6:b8:74:84:5d:6b:29:cc:86:ed:13:26:e3:88:56:6b:94:3b:
41:15:b7:9f:7c:32:e5:78:83:20:23:04:d7:8a:3b:7d:91:08:
d7:be:6a:5d:8f:20:be:a7:54:5c:0f:57:05:3f:ca:07:47:6f:
61:4a:f2:b7:c6:89:f5:95:55:5f:2a:76:bd:27:79:6e:6a:74:
bb:60:77:46:67:d3:52:53:11:b0:dd:4d:cc:be:57:34:bf:cb:
d8:65:7f:dd:1f:19:34:c6:09:9b:23:57:9e:f0:a3:d3:c5:72:
6d:59:4c:9c:f7:22:dd:ec:87:db:b9:c3:47:8a:90:c2:a0:08:
47:c8:68:57:b4:85:59:da:ef:2f:57:9b:93:12:ca:76:d8:f3:
94:8f:88:e7:b1:66:a9:83:a1:52:62:66:64:fd:2e:ea:d2:25:
92:32:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 13:27:43 2026 by rpki-client