Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F29EB4161811F18F2AF9D8DAE4EC9C.roa
File: E3F29EB4161811F18F2AF9D8DAE4EC9C.roa (raw, json)
Hash identifier: /lnX2Ffgh+1Vjur/1BI3Z1fjeaBCGCQHTIXI22nM4hU=
Subject key identifier: F2:31:9D:8A:E9:7A:1A:5D:80:61:55:F0:91:2F:2C:93:69:6A:B2:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F29EB4161811F18F2AF9D8DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:19:19 +0000
ROA not before: Mon 02 Mar 2026 09:19:13 +0000
ROA not after: Thu 09 Apr 2026 09:19:13 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106942 (0x1a1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 09:19:13 2026 GMT
Not After : Apr 9 09:19:13 2026 GMT
Subject: CN=69a55616-3620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:ba:d6:57:6b:8d:c8:a3:53:b8:d0:72:37:
e2:ed:36:66:7c:b3:cb:c7:ed:af:0b:fb:c1:86:c8:
00:ea:1e:b9:df:0b:2d:14:52:1f:6d:20:42:d6:00:
64:1b:30:00:44:4b:68:f9:80:c8:20:c0:3e:15:c9:
c9:e3:b1:1c:f9:af:05:41:7e:a3:14:bb:e1:ac:ac:
e2:d0:56:b3:5a:df:72:ff:73:8f:07:2c:43:ce:e7:
d4:40:ed:dc:c8:bb:bb:73:f6:9a:b9:69:6e:de:e2:
40:8c:39:ee:97:95:b9:7d:c4:12:43:2f:31:9c:6e:
8e:3e:21:93:d5:96:b7:21:08:ee:bf:a3:3b:be:0c:
05:f4:71:b4:b9:72:ed:f4:f8:34:1c:4f:36:2b:ae:
3b:a1:b2:84:cd:70:e0:ea:0f:fd:88:6f:62:b2:d6:
c0:e2:16:10:ac:d8:18:fe:81:87:20:f2:93:c2:8b:
31:9f:ec:d2:f7:29:42:4f:1d:90:28:02:88:49:dd:
ae:1b:94:9f:83:4e:b9:e2:94:bc:10:89:ba:c6:b0:
fe:15:9b:46:3a:d3:81:3f:a9:a8:9c:19:47:d9:45:
60:7b:3a:6b:91:1a:f7:f2:44:b6:0d:8a:08:c3:c5:
00:ff:71:dd:bc:a0:c8:81:1d:0c:09:bd:a6:73:9a:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:9D:8A:E9:7A:1A:5D:80:61:55:F0:91:2F:2C:93:69:6A:B2:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F29EB4161811F18F2AF9D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
Signature Algorithm: sha256WithRSAEncryption
b6:17:e3:c3:5d:a2:93:e7:cf:9b:31:b2:ca:9f:47:c7:55:2c:
e2:81:95:ae:8d:96:bc:1f:4d:71:40:fa:cc:2a:df:3d:7f:fd:
b8:57:13:dd:71:94:18:54:40:78:f4:cf:dd:31:c5:43:e1:1b:
43:ac:c4:8c:9a:31:b6:9e:2b:10:e7:24:35:1a:60:c1:cf:e8:
33:d7:e1:29:ee:c7:6f:a0:27:ec:2d:84:ed:e1:87:5e:a0:69:
0d:92:b5:e7:fa:7e:cc:ed:8e:14:36:2d:74:2d:36:12:52:ba:
c4:7e:2b:fc:41:8f:7a:44:7c:06:0a:ba:b7:ce:56:5f:02:55:
95:40:a5:2c:64:4a:32:32:da:5f:7c:f9:99:ec:e7:59:eb:87:
e6:41:e9:86:a4:71:dc:85:8e:6d:af:da:56:1a:47:6c:72:4f:
9c:6a:ad:ee:14:b5:24:fd:7b:8d:6c:67:88:31:74:2d:a5:a5:
6f:5f:1a:b9:69:17:86:6b:a9:5e:40:81:d3:7d:66:0a:15:de:
0d:98:e3:22:57:69:50:e2:57:2a:ab:1a:7c:3f:13:f5:fe:9b:
0a:8b:fe:73:6d:e9:1a:6c:e9:11:1c:66:57:16:8c:d4:d8:2b:
cb:54:60:e4:16:9e:6a:13:09:82:e1:65:d9:8d:a5:ce:3b:87:
bc:05:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:14:23 2026 by rpki-client