Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EE94D0316411F1A8A1B5EFDAE4EC9C.roa
File: 05EE94D0316411F1A8A1B5EFDAE4EC9C.roa (raw, json)
Hash identifier: WGge96Rn05xSB3c7LCPgLS0ZHHMvQqppWmbyHQG8AA0=
Subject key identifier: A9:89:9D:74:41:72:2C:EA:32:7C:A5:E7:8E:E2:A0:DF:AF:03:C1:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EE94D0316411F1A8A1B5EFDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 02:55:09 +0000
ROA not before: Mon 06 Apr 2026 02:55:05 +0000
ROA not after: Mon 13 Apr 2026 02:55:05 +0000
asID: 61461
IP address blocks: 156.231.192.0/18 maxlen: 24
156.236.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109175 (0x1aa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 6 02:55:05 2026 GMT
Not After : Apr 13 02:55:05 2026 GMT
Subject: CN=69d3208d-f57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:39:bc:48:23:bf:5b:9e:b7:ed:53:51:20:
f6:d8:ee:4f:72:6a:2c:75:cc:5c:9f:c6:3d:89:59:
9d:16:7c:c6:b7:be:8b:87:21:06:2f:ad:cd:dc:c5:
6f:eb:c7:67:93:22:c4:7e:e2:d9:7d:0f:20:e2:d5:
0b:58:5e:a4:2f:94:78:23:58:09:47:e9:29:3a:98:
e7:fa:5a:15:91:4c:08:93:ea:76:2a:21:9a:cb:79:
1b:e8:54:4f:75:97:86:92:31:37:76:5e:85:f3:47:
81:ca:d5:99:70:45:94:70:20:f4:1a:57:a3:62:32:
ce:43:be:60:96:3d:12:ce:ed:23:ab:72:22:a3:59:
1d:47:66:f5:f8:79:d7:e2:e0:e0:4b:f6:52:5c:3b:
b0:90:91:9a:48:7b:e3:16:11:b5:5f:6d:87:1d:97:
e3:d9:d8:51:fe:85:ed:9d:91:54:81:bf:b3:d3:fb:
78:a0:fd:26:c4:58:83:93:9e:f4:ba:f8:30:15:55:
c8:dc:e5:21:7c:26:d8:fd:ce:3d:70:f4:68:a7:da:
85:62:6c:92:0c:81:98:d1:30:a8:46:73:ba:11:ed:
ab:b9:49:d2:68:38:5b:74:ef:10:61:87:df:75:db:
8b:63:81:54:4c:80:ae:ce:56:00:c2:6e:7c:4e:5e:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:89:9D:74:41:72:2C:EA:32:7C:A5:E7:8E:E2:A0:DF:AF:03:C1:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EE94D0316411F1A8A1B5EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.192.0/18
156.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:41:44:32:c1:d6:2b:9e:d0:a5:30:2b:05:98:1f:30:cd:a4:
c3:02:1c:81:6a:4c:91:5a:40:73:08:a4:df:90:72:64:d4:32:
b7:c7:9c:48:41:d2:0b:70:54:0d:75:0a:3a:b0:0a:38:fe:04:
eb:0c:ae:44:b5:3e:7c:27:99:22:c2:5b:60:91:e3:1f:ef:97:
30:60:22:1d:92:56:c4:bc:fe:b8:10:fe:90:17:9a:fc:e2:a8:
5f:ab:46:b4:80:fa:37:83:00:5a:dc:8d:56:03:23:2d:60:18:
2a:4a:10:f7:5c:d1:45:7a:c0:02:7c:1a:73:c0:46:fd:61:41:
ac:89:65:3c:58:f2:1a:17:49:46:cc:8f:9e:9f:cb:1d:3a:9d:
17:3e:60:0d:58:ad:51:27:3e:17:e6:98:83:a4:c0:85:27:3b:
d5:72:a2:44:95:07:c5:3d:b9:1d:e2:a4:67:86:6d:b8:83:e1:
b7:c1:0c:51:d3:29:48:7c:08:64:4c:7b:09:11:4d:98:79:9e:
a4:38:c9:53:30:81:42:52:f0:c3:13:e1:85:4b:f8:5f:45:b7:
a9:45:f7:6e:c7:f0:8a:2c:d1:57:18:fc:06:e5:29:94:a8:ec:
db:2c:c5:90:87:27:1a:c4:c8:be:82:3d:74:81:7c:80:e7:aa:
77:fa:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:14:25 2026 by rpki-client