Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA3C2AA38AC11F18986051ACF1D38B0.roa
File: DAA3C2AA38AC11F18986051ACF1D38B0.roa (raw, json)
Hash identifier: tDvNZr750Dpp2cZtfdXHp04R8/FBjAwBxNcYMdAJp18=
Subject key identifier: 27:55:2D:42:0A:ED:5A:9F:AD:FD:43:A5:39:F5:76:29:47:06:FC:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA3C2AA38AC11F18986051ACF1D38B0.roa
Signing time: Wed 15 Apr 2026 09:24:08 +0000
ROA not before: Wed 15 Apr 2026 09:24:03 +0000
ROA not after: Wed 06 May 2026 09:24:03 +0000
asID: 269816
IP address blocks: 156.248.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109769 (0x1acc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 09:24:03 2026 GMT
Not After : May 6 09:24:03 2026 GMT
Subject: CN=69df5938-c48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:ac:fa:97:0d:9a:c0:06:66:2a:68:d1:95:
bd:2f:a3:80:a3:73:a9:4c:49:ea:e0:32:35:0f:c2:
64:fe:a1:59:26:52:49:d1:1a:ac:8f:b4:ec:2b:ee:
2b:d4:fc:b0:e4:01:d0:d0:14:33:15:7b:3f:b5:94:
1a:fc:34:e0:05:db:5c:b4:db:3e:eb:87:5c:8e:8a:
ac:a3:3f:16:f7:76:77:80:30:5e:e0:19:b9:73:4d:
f1:ee:59:8c:75:f0:73:c9:92:e8:30:ef:7b:69:a3:
e2:bc:12:9a:4e:58:b1:1f:c5:6a:cf:3e:6a:f2:d7:
20:36:44:8a:3f:85:1e:e1:fb:40:10:81:89:47:cd:
dd:cf:5e:36:64:ea:23:be:50:f1:8b:47:88:03:22:
ad:ab:42:db:a8:0f:c4:b8:fc:e9:40:7a:d9:43:9d:
2c:ba:ac:c9:94:7f:dd:42:39:5d:3d:05:ce:cc:c0:
ef:72:2d:b2:66:17:fd:c1:79:56:e1:8e:ba:23:d2:
1e:ed:12:77:1f:05:af:ad:ff:3f:bf:c3:5f:6f:d0:
57:81:49:f3:00:e7:ad:b6:24:2d:45:e8:3f:ad:c8:
4e:14:9b:b1:7d:a0:77:83:0e:51:e6:23:50:4d:15:
2e:cf:18:27:bc:11:1a:10:81:87:a0:35:c5:17:31:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:2D:42:0A:ED:5A:9F:AD:FD:43:A5:39:F5:76:29:47:06:FC:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA3C2AA38AC11F18986051ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:16:5b:fd:2f:34:97:c4:47:9a:1d:d5:49:3a:f5:f2:3a:19:
50:5e:ac:15:54:5c:b9:ba:b1:96:52:c4:21:05:72:a6:cb:75:
fa:5e:08:15:d5:91:41:84:a4:0d:13:63:6b:f9:84:c8:1a:b4:
f6:74:b7:c5:82:07:2c:da:a8:bb:c6:3e:86:9d:5e:88:77:1e:
38:50:07:97:ae:e0:45:8d:49:4f:b5:bd:83:f2:e7:56:41:20:
3c:34:9f:8a:c8:57:c0:f9:8f:2a:24:ce:03:34:38:c1:15:8d:
17:d1:54:9c:c0:5d:02:22:e9:81:71:52:ab:5a:a9:df:75:73:
58:fa:e7:ea:17:6a:95:c3:b8:a2:d2:42:1f:07:8d:ee:ea:95:
f2:97:7b:56:bc:bb:6a:e1:0f:ba:6b:56:cb:53:85:a2:97:c0:
43:82:0a:9e:1d:1d:35:49:d6:77:e0:51:c4:76:a5:a4:e1:88:
52:45:d4:c1:bc:d5:be:c5:a4:a2:25:02:9e:03:59:6b:41:ef:
61:2c:22:38:e2:ce:9a:75:58:a1:da:ad:01:6b:21:c9:cc:0f:
8c:60:43:01:76:f9:21:06:41:51:72:be:b3:12:43:30:ed:a4:
cf:37:2b:fa:17:fa:d0:75:b6:de:b4:9f:e0:f6:92:a6:90:88:
db:10:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:32 2026 by rpki-client