Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D74414381BB111F1AF6E82B8DAE4EC9C.roa
File: D74414381BB111F1AF6E82B8DAE4EC9C.roa (raw, json)
Hash identifier: 3OYJKYWpPYWO0cILOd1lHhiUNRKm0aMkKsZY+EsHIVE=
Subject key identifier: 26:07:B7:82:EE:B6:E3:D0:5E:AA:BF:EB:68:6D:F8:5A:B3:8A:F8:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A38F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D74414381BB111F1AF6E82B8DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 12:16:47 +0000
ROA not before: Mon 09 Mar 2026 12:16:41 +0000
ROA not after: Wed 18 Mar 2026 12:16:41 +0000
asID: 55714
IP address blocks: 156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
156.238.77.0/24 maxlen: 24
156.238.78.0/24 maxlen: 24
156.238.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107407 (0x1a38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 12:16:41 2026 GMT
Not After : Mar 18 12:16:41 2026 GMT
Subject: CN=69aeba2e-dc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:62:11:e0:2e:ec:50:a2:4f:12:1b:e2:d3:
4e:20:0e:7a:3a:69:ae:c1:b7:cb:e9:87:ad:27:1b:
db:bb:34:e2:59:38:c1:eb:e4:50:5d:9d:cb:c6:fd:
6e:29:9b:3a:d8:77:a5:90:a6:bf:33:c1:cc:23:ec:
da:53:0d:94:98:09:34:52:f4:c3:0c:d6:eb:0a:02:
39:e5:52:5b:d3:ec:f9:38:ba:f1:bc:98:d1:39:d9:
0c:08:52:c9:2f:a1:d8:23:99:95:c2:c3:09:7e:e1:
26:91:ac:c0:2a:64:9e:c3:75:8d:c5:db:91:d4:60:
9a:83:fa:cc:50:bb:42:b5:e6:32:9c:32:e8:22:06:
2d:54:c1:bd:c1:5f:04:e2:d5:d5:8f:5c:2c:f8:bc:
a9:e3:ba:15:4e:81:94:67:29:93:d1:a3:91:21:63:
de:68:fd:7f:0b:80:b3:ca:67:98:0b:a1:c1:0e:13:
c8:28:23:08:57:4f:ef:04:22:9d:c1:99:c7:ae:c5:
c0:92:f3:af:ce:1f:1d:f1:99:a2:bd:7b:d8:4f:29:
e8:fe:25:6f:8f:ec:f6:e2:aa:c7:b3:b2:9c:6b:96:
0c:04:c0:45:9b:cd:3a:21:52:70:af:15:8d:ba:66:
87:1e:7e:3b:ab:09:6c:83:03:e8:41:0c:f2:d1:14:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:07:B7:82:EE:B6:E3:D0:5E:AA:BF:EB:68:6D:F8:5A:B3:8A:F8:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D74414381BB111F1AF6E82B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.73.0-156.238.79.255
Signature Algorithm: sha256WithRSAEncryption
05:81:ef:59:34:61:a8:c8:d7:ee:cd:35:15:f1:48:b6:0a:68:
94:a1:2a:25:ec:c2:0c:36:90:d0:27:fd:0c:67:2b:bd:11:18:
c9:07:9e:8d:dd:4b:e3:a5:57:32:dd:a4:ae:ef:0f:b4:d6:0e:
db:a0:56:ef:27:41:40:ba:32:ea:9d:5f:fe:85:f4:c8:ab:27:
8d:7d:3a:9b:41:ed:bd:8f:54:35:76:a9:7b:ec:32:ae:e4:69:
0f:c4:53:bd:10:24:1f:6f:f9:9a:9f:5b:c2:fe:b9:66:09:26:
60:a9:26:a1:14:5f:9b:43:ae:40:8c:dd:36:db:b1:84:a3:85:
a0:7a:1d:ee:22:ab:d9:86:36:f6:b7:38:7d:ae:b5:71:f2:75:
02:01:9f:e5:5d:19:2d:11:c1:a7:3b:73:96:20:e0:86:ff:c9:
24:41:b0:9a:5e:25:97:db:05:e8:64:d2:66:f3:ac:1d:9c:93:
63:08:18:b6:f3:9e:20:49:57:71:01:2f:20:78:a3:58:fe:d9:
2b:b5:a4:fa:a1:99:3c:8f:79:46:5a:58:aa:81:e5:c7:ee:b4:
71:79:21:35:d9:dd:1c:8f:10:9f:7b:d6:07:3a:1d:cc:67:2e:
05:4a:db:2e:38:e7:b8:60:6b:08:46:3b:f6:fb:ef:6a:d0:5a:
f0:ea:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:25:47 2026 by rpki-client