Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B12270F8161E11F18EB4D67DDAE4EC9C.roa
File: B12270F8161E11F18EB4D67DDAE4EC9C.roa (raw, json)
Hash identifier: XwwvnHRhYSO/ykROVE4bsL8sF4g/YkTrPcmX7+GwOMM=
Subject key identifier: 1D:D7:63:DC:D2:58:D4:22:FF:E8:24:04:0B:36:8D:AE:B7:FC:08:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B12270F8161E11F18EB4D67DDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 10:00:50 +0000
ROA not before: Mon 02 Mar 2026 10:00:46 +0000
ROA not after: Sat 04 Apr 2026 10:00:46 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106946 (0x1a1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 10:00:46 2026 GMT
Not After : Apr 4 10:00:46 2026 GMT
Subject: CN=69a55fd2-d8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:b4:19:f5:70:63:53:dc:6a:e6:a1:77:2c:
66:03:af:15:11:5f:50:16:3a:f2:e8:ad:16:51:f8:
bf:3e:af:e7:a4:05:40:50:32:4c:db:9b:5a:76:3f:
0d:6f:8d:9f:79:9d:1d:8d:99:10:4f:88:66:e5:ff:
a1:ef:0f:05:df:af:86:d8:4c:37:50:71:42:26:1e:
65:ef:e8:74:b0:9f:52:f7:62:47:0d:1d:69:e8:d7:
47:d2:c4:12:6e:68:67:c5:01:51:25:39:58:68:49:
6a:5c:67:4e:61:77:5e:94:aa:e1:f1:0e:fc:f9:4c:
fc:d8:a0:25:7b:08:f0:22:d5:93:07:c8:c7:34:cf:
29:fe:d2:bf:79:9d:56:a5:11:c9:84:5f:9f:0f:3f:
72:a3:80:5f:23:26:77:c6:28:d5:99:fd:b7:86:d8:
b0:2f:d0:33:24:3c:4a:7a:4c:b2:a8:cf:76:5b:24:
1a:4b:86:cc:e9:45:1e:97:75:2a:bc:f9:1d:54:b7:
4f:3f:7e:b6:b8:fa:97:37:a6:90:94:82:71:d9:fd:
37:56:e1:4e:ca:3a:c6:bb:90:6b:bc:fe:c4:d4:3d:
69:e0:3d:fc:96:1f:6e:e8:70:de:a7:8c:67:81:76:
6b:6f:3c:fb:0a:f0:98:54:72:58:8e:bb:9a:01:88:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:63:DC:D2:58:D4:22:FF:E8:24:04:0B:36:8D:AE:B7:FC:08:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B12270F8161E11F18EB4D67DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:bd:3c:4c:3a:d6:98:02:21:49:cb:80:8f:bf:5d:5b:6c:75:
20:1c:63:75:79:77:91:1b:1d:67:a8:00:54:ec:66:b9:a1:fc:
ce:aa:c9:6d:c8:25:44:9f:33:29:70:b0:d1:03:8e:66:da:64:
06:54:94:70:38:87:cc:a2:f1:c8:65:dc:9f:b9:f1:7e:7e:8e:
5c:b3:4d:4c:fe:b2:27:1e:6e:52:b9:fa:7a:08:d3:8a:72:cb:
30:39:f5:94:0e:6e:45:2d:69:4b:73:65:61:f0:38:fa:60:ef:
83:66:7d:ab:ab:d0:f4:4b:a6:80:09:01:6a:f1:3d:c3:f7:20:
c1:92:73:81:83:04:d6:71:c1:36:52:b7:3e:73:8d:69:68:81:
3f:62:6b:da:76:45:dc:75:92:ce:d1:9c:ee:a8:13:8b:39:6b:
d1:bd:b5:5c:e4:f3:ac:30:55:39:76:a2:db:fc:f2:7a:85:2a:
c1:ce:a4:e4:7e:3c:59:44:96:af:62:0a:41:e9:db:52:d5:7c:
ab:b7:57:65:d4:4f:a6:50:83:3c:5e:8d:40:74:e4:eb:44:b3:
66:52:b5:95:e8:14:61:17:59:43:11:27:9f:3d:50:df:1a:c6:
c4:d6:3d:f9:81:79:2d:a0:52:5a:57:b5:20:52:29:e3:73:d2:
e1:f0:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:47 2026 by rpki-client