Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBD9292A161F11F1A2A63D84DAE4EC9C.roa
File: EBD9292A161F11F1A2A63D84DAE4EC9C.roa (raw, json)
Hash identifier: wD0WRqLwt8cELEEWVUGiiH/9vq2EzG3RgyJdVJWacDQ=
Subject key identifier: A4:D9:7E:F0:00:B9:0F:BE:F2:89:E5:28:00:7A:B5:39:8A:F3:F9:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBD9292A161F11F1A2A63D84DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 10:09:38 +0000
ROA not before: Mon 02 Mar 2026 10:09:34 +0000
ROA not after: Sat 04 Apr 2026 10:09:34 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106954 (0x1a1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 10:09:34 2026 GMT
Not After : Apr 4 10:09:34 2026 GMT
Subject: CN=69a561e2-c1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:16:2e:1f:76:cc:91:4f:a8:4f:1a:ed:49:
88:5f:92:73:6a:7e:f1:7f:dc:2d:6d:b4:12:e7:1b:
a5:93:68:2b:61:ae:71:e5:97:a4:23:44:81:50:5a:
0f:46:49:3b:92:9e:19:b4:a8:8c:b0:4b:fd:be:d3:
62:a2:40:86:cc:d1:ca:0f:60:c3:cd:07:85:c7:aa:
b1:2d:9f:81:9e:b9:c0:d0:f6:56:aa:52:ef:82:8b:
e8:e5:00:47:13:b3:ba:3f:c3:ed:24:2b:88:fe:a4:
bb:4d:20:ae:b8:da:23:ec:16:c4:c2:f3:07:2a:bd:
bd:6e:85:fa:d7:d3:33:96:a1:71:d3:7d:ba:9b:24:
75:fb:94:dc:83:40:5d:80:41:d6:0c:89:f1:ed:99:
af:59:73:32:a6:c7:69:e2:33:47:3b:5a:b8:21:54:
c8:d2:a0:a2:f3:3b:ae:e0:d9:8f:9c:15:bb:34:9a:
9f:7f:40:9f:06:d5:29:f5:98:13:2d:b2:39:b0:3c:
0c:f4:27:ba:a4:d5:79:b0:d8:5e:81:72:54:54:ab:
1a:76:3e:33:e6:a6:77:c6:3b:cf:c9:fe:5d:8a:a7:
85:c9:f7:bd:13:16:56:c4:42:90:b4:dd:02:ab:57:
ef:42:85:80:81:7e:85:b1:07:1d:15:7a:90:66:e3:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:7E:F0:00:B9:0F:BE:F2:89:E5:28:00:7A:B5:39:8A:F3:F9:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBD9292A161F11F1A2A63D84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
82:65:71:fd:f8:86:cf:9b:5c:9c:82:0f:00:1a:d7:30:0f:de:
1a:89:d1:ac:fd:9d:85:43:1d:27:31:c3:d9:de:1b:e7:5c:f5:
f5:2a:93:32:08:64:93:ae:e1:df:ae:28:2f:6f:31:75:0b:27:
35:a5:ed:8e:1d:c6:c4:91:7d:54:c8:15:2c:df:98:b0:20:6c:
9c:a7:51:62:94:65:5e:23:a7:f1:b4:aa:1d:13:9d:af:ea:2b:
9e:be:0f:6d:b6:14:05:a4:36:5c:6a:f3:3b:cc:5a:9d:89:3a:
6e:e2:f6:fa:90:6d:e8:b1:cf:d9:07:4c:5e:bf:56:32:22:f5:
73:86:47:81:ef:72:9c:77:f9:91:c7:d9:9a:76:5b:7f:f4:53:
17:75:05:24:57:28:2a:a6:4c:da:cf:fa:7e:90:25:db:e1:fb:
55:6a:43:df:2b:7e:cd:4c:d0:1d:ad:f8:7f:c9:2c:5a:3b:77:
9e:e7:70:73:22:4c:99:79:d9:65:93:09:6a:c7:7f:ae:88:36:
c2:eb:08:14:b3:3e:fc:24:23:15:68:a4:29:be:5e:5b:c6:e9:
42:25:db:18:29:7e:72:3a:a6:a6:83:55:bc:1c:3f:a5:07:be:
14:e6:60:a2:d6:58:b3:0b:9e:1d:1e:0b:d8:a1:29:6e:21:42:
57:c0:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:16:31 2026 by rpki-client