Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F77F2E2A1DF211F18ED461E9DAE4EC9C.roa
File: F77F2E2A1DF211F18ED461E9DAE4EC9C.roa (raw, json)
Hash identifier: oj25up2vjxT9R3C1TFAH+UIi0kOtOd27zkL7CJ0ZYkk=
Subject key identifier: A6:5C:FE:A0:0C:61:8C:28:2D:DD:30:34:3E:11:23:E7:58:25:BE:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A474
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F77F2E2A1DF211F18ED461E9DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 09:08:00 +0000
ROA not before: Thu 12 Mar 2026 09:07:56 +0000
ROA not after: Sat 13 Jun 2026 09:07:56 +0000
asID: 135097
IP address blocks: 156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107636 (0x1a474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 09:07:56 2026 GMT
Not After : Jun 13 09:07:56 2026 GMT
Subject: CN=69b28270-6dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:3f:9f:46:bf:0c:b1:92:60:34:82:88:66:
d4:e6:dd:77:3d:00:ee:79:7f:b5:f1:c4:50:77:75:
2a:15:a1:da:94:c8:54:c1:6d:b9:ae:cb:73:98:16:
91:f5:b6:29:ad:83:81:61:65:cc:93:62:ed:a4:20:
8b:f9:02:41:68:89:35:9d:d2:36:5c:c1:2f:e6:c7:
61:2a:3a:ab:ca:21:63:c1:9a:d3:84:57:89:e2:aa:
58:1d:b3:18:e1:b7:ac:66:b7:17:1c:44:cf:d5:06:
05:9d:ba:50:ae:0e:38:b5:57:09:f0:e9:9c:91:85:
36:3a:cb:a2:ab:b0:e8:d0:bc:d0:d1:e3:9d:05:55:
3d:28:7a:29:d7:41:6d:04:3d:22:2a:4a:55:17:0b:
e1:ec:0a:e8:d5:98:77:fd:28:5e:86:3d:e2:f2:64:
70:00:70:58:f7:1d:4b:0e:ec:07:e5:aa:0e:93:59:
75:e6:e1:3b:2b:d1:87:9b:23:ec:5a:7d:b2:83:ae:
42:ca:76:0c:f6:f5:8a:25:59:ad:69:2e:d0:d7:d7:
37:e4:ea:af:d2:bb:69:f8:e3:3d:15:41:48:b6:79:
fe:5b:11:c8:2d:ca:fb:41:ff:fc:f7:d6:3d:83:8a:
69:32:4b:04:54:55:88:3b:d4:c5:0e:3e:d7:85:30:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:FE:A0:0C:61:8C:28:2D:DD:30:34:3E:11:23:E7:58:25:BE:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F77F2E2A1DF211F18ED461E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
bb:94:40:1b:ea:db:83:99:e6:99:b7:c1:1f:a6:1c:4f:7f:6b:
71:b4:50:98:06:ae:b0:7a:c1:22:0d:b7:8d:c6:17:9b:55:56:
ac:39:d8:4f:ea:bc:91:24:e6:9f:a2:30:b0:77:db:da:18:32:
32:61:dc:c3:9c:61:30:8e:d7:16:ac:37:a1:0a:ff:7d:6f:87:
59:af:0c:84:80:3f:a1:f5:e3:aa:f3:36:20:4a:80:f8:b8:0c:
c5:74:ec:61:d0:71:f9:3f:1d:64:fb:6e:f7:56:83:60:d0:36:
87:20:0e:1b:51:70:ec:12:c3:12:b6:61:eb:57:ab:03:cc:92:
2f:a6:43:08:6c:10:a4:2f:1a:7d:69:ce:0c:c8:f8:7d:b3:ef:
cb:7c:4d:78:05:47:d9:8f:32:15:26:fe:05:2b:e6:3b:d4:59:
cc:99:db:6d:11:17:60:76:0a:91:30:45:eb:72:10:5b:b9:78:
71:24:b9:c3:ab:ba:43:2b:44:f9:e2:06:87:c5:a1:39:10:c4:
4a:7e:ee:5a:a8:de:46:a0:10:1b:26:7b:c2:af:a9:83:67:c0:
1d:5b:b2:0e:b6:b4:ce:02:4a:4e:84:4d:37:c6:2b:e1:44:85:
7a:83:43:64:c9:df:9f:c0:68:2a:23:a0:92:47:69:20:d2:4f:
48:c0:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:04 2026 by rpki-client