Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EE5B57417B511F1AB9FF9BFDAE4EC9C.roa
File: 9EE5B57417B511F1AB9FF9BFDAE4EC9C.roa (raw, json)
Hash identifier: /nxHEtc3O5Jm+iQ01vUILCA5gVgq/s0an9WJob0huL0=
Subject key identifier: 09:46:86:F3:65:0B:FD:A6:2E:42:77:C2:43:58:AC:93:8D:D3:2D:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A232
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EE5B57417B511F1AB9FF9BFDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 10:33:45 +0000
ROA not before: Wed 04 Mar 2026 10:33:41 +0000
ROA not after: Fri 08 May 2026 10:33:41 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107058 (0x1a232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 10:33:41 2026 GMT
Not After : May 8 10:33:41 2026 GMT
Subject: CN=69a80a89-fb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:3d:b4:93:82:0b:38:94:25:68:0f:11:14:
db:00:1f:7a:c2:78:39:12:42:3b:83:06:3b:24:5e:
f9:e9:02:05:a5:64:14:f9:e6:a3:46:40:57:90:e7:
fc:ae:f4:1e:d4:a6:9b:5b:e0:4c:c0:02:0d:bd:50:
0d:a4:83:57:ff:e2:4b:0e:31:e5:fb:0b:40:59:7b:
9c:c5:75:0e:a4:fd:e2:4c:b4:83:fe:57:93:e5:3b:
a2:1a:48:43:1d:ab:91:d1:21:95:8e:dd:07:1b:2b:
d8:27:16:1d:f3:96:8e:e0:9f:6d:d1:61:fb:82:04:
53:7f:42:b7:41:f0:54:2a:4c:01:43:55:c5:94:62:
d1:4c:88:4f:47:bd:f2:75:c1:d4:ac:39:d0:9f:fd:
89:c9:c6:bb:4f:84:12:70:b4:ec:d6:c6:a6:fa:ee:
c4:26:8b:1b:a3:5d:9d:cb:47:3f:34:e9:db:87:a4:
84:02:63:40:a7:e0:e0:56:f0:58:61:16:ff:d1:5c:
fb:d4:10:19:f3:30:ed:03:ff:1a:6f:25:19:5a:2d:
b9:e4:61:0d:a5:27:d0:21:77:63:48:01:5e:a7:eb:
a7:e4:97:60:d8:61:87:b2:06:52:12:1f:58:49:6b:
db:04:7b:3d:0b:22:48:2e:8b:b0:7a:43:40:70:82:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:86:F3:65:0B:FD:A6:2E:42:77:C2:43:58:AC:93:8D:D3:2D:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EE5B57417B511F1AB9FF9BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:fb:7d:32:32:49:13:5e:6a:9b:c9:90:4a:2c:8b:f9:a6:cb:
84:ae:99:67:28:20:75:79:a5:93:7a:28:ae:f2:c2:5e:93:eb:
af:0d:d8:c9:a9:61:b8:57:12:dd:0a:7e:86:46:69:b9:66:e1:
a5:08:b3:e8:aa:8d:97:8d:63:28:02:af:8b:74:06:18:11:ba:
4c:8e:29:1f:5f:e7:34:6d:12:26:1a:5d:ea:f8:3d:ae:33:93:
a0:f3:53:82:48:ad:74:c1:7f:58:30:42:90:20:ee:81:65:64:
ea:49:f9:45:f7:86:27:5c:3f:e1:2d:8d:db:83:ff:2b:95:62:
31:46:7f:cc:18:2c:a0:08:4a:fe:67:7f:14:68:2f:be:d6:bd:
8c:7f:33:e9:97:1d:91:13:ca:9b:b3:6c:02:db:c5:7d:93:29:
79:4b:17:b9:44:57:ce:df:31:b7:ca:8a:c6:bd:b8:1c:96:8d:
df:f5:74:8f:44:eb:8e:25:92:79:ff:c0:21:bc:ac:a5:ef:3f:
c2:c6:e6:c7:54:77:f4:94:7d:52:83:2f:e4:7d:61:33:0c:57:
87:a9:ad:e9:2d:19:ed:5f:41:b6:33:3d:4c:07:9e:fa:24:85:
6f:7f:f9:1f:bc:f6:a6:de:5f:f2:11:77:29:1e:e0:ef:12:02:
cf:71:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 19:08:08 2026 by rpki-client