Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98D593DA161F11F1B5795682DAE4EC9C.roa
File: 98D593DA161F11F1B5795682DAE4EC9C.roa (raw, json)
Hash identifier: J3dhigRkQF+YITn9hLdgniNb/GwnSz3AZROmndbHljA=
Subject key identifier: D1:31:BE:3B:3D:A0:1A:A9:B8:45:BB:AF:23:45:C8:6D:DC:2A:B9:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98D593DA161F11F1B5795682DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 10:07:19 +0000
ROA not before: Mon 02 Mar 2026 10:07:15 +0000
ROA not after: Sat 04 Apr 2026 10:07:15 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106952 (0x1a1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 10:07:15 2026 GMT
Not After : Apr 4 10:07:15 2026 GMT
Subject: CN=69a56157-6ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:1c:18:ec:8d:84:5c:b1:b2:0d:40:93:bc:
81:36:0c:7c:d2:3a:23:f9:a0:7a:62:ed:b6:a2:6d:
c1:62:ee:c8:8c:f9:79:6b:fd:41:78:84:36:59:02:
c4:03:08:6f:96:ed:04:76:72:a9:58:3e:aa:3e:c9:
b2:81:80:b5:d9:a7:bb:3b:89:8f:16:f8:ef:0b:b0:
7d:17:10:59:ca:51:5d:4c:f2:34:e9:ad:a0:0e:0b:
36:3f:ae:88:21:cd:56:5f:78:fd:03:b7:5e:ae:dc:
f7:ca:31:08:26:68:dc:ff:7e:aa:2d:2a:80:a4:30:
81:f7:93:93:82:39:88:40:ad:94:c5:6a:b5:a4:00:
a0:22:4a:e3:5f:e9:7b:89:da:be:27:2a:53:1c:46:
42:56:3d:11:66:53:ad:03:bc:c7:93:69:61:39:33:
cc:80:7f:13:e3:9b:96:e8:a5:2f:6f:7b:cd:8e:ea:
13:08:63:e1:48:cf:54:6d:4b:fb:96:9d:ec:75:37:
23:d1:95:15:17:37:c8:54:57:26:5e:cc:94:0a:33:
df:d7:55:b3:ff:f1:c3:d2:ea:da:14:f2:5a:e6:f5:
ae:7b:dd:b0:09:9a:92:87:b0:fa:86:bf:6c:f4:62:
b2:b4:38:2b:62:81:e7:21:58:f6:fd:f4:9c:3d:8f:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:BE:3B:3D:A0:1A:A9:B8:45:BB:AF:23:45:C8:6D:DC:2A:B9:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98D593DA161F11F1B5795682DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:ba:ae:d1:ec:ab:d7:0d:2a:59:5a:ea:68:34:0e:0f:7b:9d:
ef:a6:37:8f:c4:7c:ec:08:89:60:0c:13:6f:0f:ea:99:53:f3:
f9:b9:da:13:95:33:8c:2d:94:5b:92:a0:6b:de:d4:d7:58:e6:
0a:fd:cc:d1:06:31:a1:e3:2b:b2:fb:d2:17:e6:bf:4a:35:aa:
35:f1:b1:1b:69:9a:4b:f6:cb:fe:a7:dd:c2:d0:e7:8c:05:8d:
03:0c:5d:dd:7c:8f:16:14:73:e4:cf:da:7d:6f:74:70:cc:d5:
f4:29:57:21:84:f8:a7:e6:7a:f7:20:02:e4:0d:a3:00:85:34:
bd:b5:00:81:9f:e8:60:f7:4c:4f:71:2b:89:4d:02:17:c5:ad:
78:71:c4:48:34:cd:df:6b:a0:99:be:a5:f1:87:44:d2:68:d4:
25:ff:50:ae:b1:37:3b:32:01:04:39:0a:1b:0b:19:be:3f:ec:
80:99:30:c4:05:37:a3:93:f2:00:77:4a:9f:94:58:30:9a:fa:
f1:77:0e:82:31:99:07:fb:35:08:8a:73:79:77:95:bc:31:ff:
a8:3a:58:81:0b:e8:de:4e:cb:d3:c9:61:c9:d9:6a:2e:e0:1e:
20:78:83:99:a8:54:7e:6b:0f:b6:7c:04:df:7d:8c:8f:f1:a5:
84:9a:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:24 2026 by rpki-client