Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4300724160611F186A110EDDAE4EC9C.roa
File: F4300724160611F186A110EDDAE4EC9C.roa (raw, json)
Hash identifier: zggjuidUqYyobgSH1RbqjehVmQx0A+fQQNPi+im8h3w=
Subject key identifier: B3:90:DD:84:09:E8:44:AF:7B:05:A4:B6:56:0E:83:5A:2E:13:DD:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4300724160611F186A110EDDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 07:10:55 +0000
ROA not before: Mon 02 Mar 2026 07:10:51 +0000
ROA not after: Thu 09 Apr 2026 07:10:51 +0000
asID: 138915
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
156.244.31.0/24 maxlen: 24
156.244.32.0/24 maxlen: 24
156.244.33.0/24 maxlen: 24
156.244.34.0/24 maxlen: 24
156.244.35.0/24 maxlen: 24
156.244.36.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.39.0/24 maxlen: 24
156.244.40.0/24 maxlen: 24
156.244.41.0/24 maxlen: 24
156.244.42.0/24 maxlen: 24
156.244.43.0/24 maxlen: 24
156.244.44.0/24 maxlen: 24
156.244.45.0/24 maxlen: 24
156.244.46.0/24 maxlen: 24
156.244.47.0/24 maxlen: 24
156.244.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106925 (0x1a1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 07:10:51 2026 GMT
Not After : Apr 9 07:10:51 2026 GMT
Subject: CN=69a537ff-4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:6f:91:d5:32:74:01:58:bf:64:9d:f4:a2:
d4:72:21:84:04:00:9d:e2:04:2a:65:ba:8f:ab:60:
b7:e4:3d:d4:46:d4:8f:de:ea:68:ce:92:fb:e4:5f:
98:d0:f7:a2:a6:07:c2:bc:d8:53:e8:b1:c6:23:d6:
04:41:08:97:e8:1d:f7:89:0b:3c:0f:37:d8:53:4b:
56:91:98:ec:ba:fe:b8:04:bd:fd:27:73:d8:7f:1f:
26:06:5c:69:d3:65:3a:cb:31:f2:8a:31:4a:e3:85:
24:aa:f9:27:36:39:56:21:e3:1e:61:cf:25:14:9c:
e4:21:19:ad:2d:d2:97:af:06:b2:76:44:0e:ee:3b:
01:aa:5d:66:3f:d2:d5:82:bd:5d:58:8c:20:74:53:
a0:be:ab:c7:20:27:e2:59:cb:86:ad:4e:d3:de:40:
48:b4:45:35:f8:22:9c:ee:30:e2:56:2e:59:f9:58:
24:d2:18:18:e7:9a:a7:73:a4:e6:97:15:1c:27:bb:
5d:ac:e7:b0:94:fd:dc:df:f0:e9:2b:1a:01:71:c3:
f5:73:39:5e:05:d7:eb:25:d2:c4:94:89:90:7f:53:
33:86:fc:bb:66:92:5e:e8:8c:73:c1:db:98:09:4c:
07:ab:d0:02:fa:7b:20:ae:e4:f7:57:d3:2e:f0:1d:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:DD:84:09:E8:44:AF:7B:05:A4:B6:56:0E:83:5A:2E:13:DD:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4300724160611F186A110EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
156.244.31.0-156.244.47.255
156.244.55.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e8:f0:0b:05:5b:af:64:15:18:1e:9a:14:b9:77:85:2d:0d:
de:39:df:7f:57:57:51:21:2d:29:d2:e9:c6:87:a7:d3:fc:f3:
a3:a9:0f:3b:a8:d4:77:ba:52:5d:3c:9b:c6:5e:f7:47:28:ac:
c3:f5:5f:e3:67:b2:7b:27:f9:34:1e:02:ed:df:a3:2f:b3:4e:
b4:e6:66:aa:7b:91:80:3c:d2:66:cc:f7:b2:f3:70:cf:6a:6b:
ad:5b:fe:f8:e3:68:77:05:3f:0a:8d:28:da:e1:04:e2:64:bd:
a0:c3:45:c0:1a:31:5b:d6:4d:e9:d9:7a:c7:31:64:5b:0f:2c:
c9:a8:6c:52:fd:f0:fa:4d:08:93:e6:04:66:7a:2e:8b:d3:f4:
ec:8a:8e:c1:c6:57:30:4b:a4:5c:50:2d:52:ac:fc:31:4c:66:
28:19:b5:35:23:97:3d:15:08:2c:82:46:90:05:f5:d8:f0:f1:
16:6e:79:d8:4b:9a:70:4a:ba:0e:2c:23:94:4c:a9:bb:16:55:
1e:78:86:75:da:14:83:4d:39:76:8d:be:52:4c:29:e6:79:c4:
cb:44:f7:f5:93:3f:f1:50:ed:4f:e8:58:4f:44:aa:fa:29:9f:
1b:2d:52:56:44:b0:3e:50:c6:5a:2a:6b:f1:84:ec:c3:17:35:
bb:04:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 12:44:36 2026 by rpki-client