Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245862F038AF11F1B7BF22AACE1D38B0.roa
File: 245862F038AF11F1B7BF22AACE1D38B0.roa (raw, json)
Hash identifier: kujiPzcDAToFDcw6LaDFo8YlWxTc5wFNmNWVDqsy9Ck=
Subject key identifier: 7B:CC:50:65:EF:F8:51:DC:FC:AF:AB:10:82:A9:BA:E0:AA:9B:92:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245862F038AF11F1B7BF22AACE1D38B0.roa
Signing time: Wed 15 Apr 2026 09:40:31 +0000
ROA not before: Wed 15 Apr 2026 09:40:26 +0000
ROA not after: Mon 11 May 2026 09:40:26 +0000
asID: 8796
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109775 (0x1accf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 09:40:26 2026 GMT
Not After : May 11 09:40:26 2026 GMT
Subject: CN=69df5d0f-f43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:44:bb:b9:03:59:cc:24:56:94:4d:62:46:
4a:33:7f:7d:7b:31:fe:85:b7:bb:9c:96:5e:01:0b:
15:b9:3d:82:9a:18:8a:cf:b9:8d:e0:99:5b:c2:d5:
e4:1a:7a:90:7d:b4:6e:81:a4:f0:2c:a2:ef:ba:ab:
d9:1d:d7:7f:29:3c:2a:cd:7d:ed:73:77:c8:5b:d4:
78:20:4a:72:dd:c8:06:91:28:a4:02:ab:7d:16:2d:
d1:b6:80:f2:a9:fe:81:e2:ba:33:76:f4:8f:21:51:
2d:cd:e3:0b:9c:e1:88:99:ad:83:a1:1d:1f:e9:5f:
17:d9:1a:9f:2f:ce:5f:3b:af:a6:1b:c6:1a:1a:e4:
83:0f:fd:9e:73:25:be:be:0c:bb:5d:41:4b:6c:d8:
5a:6b:24:56:2c:92:8f:2a:7f:53:cd:ba:d0:82:aa:
3e:0e:ff:fa:22:86:3b:5b:ef:29:64:49:b6:0d:65:
7e:da:d9:9d:28:d3:28:45:d0:0d:ac:45:9a:07:b0:
f5:fe:23:56:21:a4:61:14:4d:1e:77:d5:5a:57:6f:
1b:12:da:b5:8d:44:a7:82:45:41:89:12:9a:83:3c:
8b:46:a0:7c:76:c5:da:7b:e7:41:d6:6a:0c:de:e8:
6d:6f:b7:77:1e:db:3d:59:b3:67:43:5d:1f:da:7b:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:50:65:EF:F8:51:DC:FC:AF:AB:10:82:A9:BA:E0:AA:9B:92:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245862F038AF11F1B7BF22AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:a7:4c:48:03:2e:af:ca:15:1a:36:fc:a7:6f:7f:da:ac:f5:
af:1d:64:29:44:3c:d1:c3:44:5e:8c:c8:a8:bb:b1:97:28:df:
e3:9e:be:26:76:16:f9:df:a6:b1:94:11:36:89:88:25:c0:5e:
aa:9e:b2:c1:0f:e0:ff:e0:6c:c0:a0:3f:5c:91:41:2e:0d:93:
ce:c7:a0:d5:9c:0c:e0:9a:c5:15:3d:b3:e6:18:8d:68:e7:b7:
72:55:24:91:38:54:da:7e:ff:24:ab:1b:a0:a6:23:0d:eb:b4:
15:4d:d9:d2:4e:e4:c8:54:2c:ab:31:a1:8d:04:cc:09:20:87:
a8:73:90:b7:ed:7d:3d:8f:b4:32:19:5f:31:3e:3b:b7:8f:f8:
9d:fc:d8:7d:0f:68:14:ba:63:11:fa:03:05:68:94:15:62:36:
22:e9:1e:4b:c6:fd:66:67:e2:4d:ed:d3:fe:0a:21:04:e4:0b:
1e:73:49:50:b8:bb:74:e4:33:67:a9:88:b6:86:dc:86:71:ce:
10:07:99:bf:06:74:10:61:f4:f0:4c:b8:56:a6:92:0a:79:a8:
2e:65:f0:44:d7:2b:ff:7a:43:b5:7b:5e:f5:0c:45:3c:14:9e:
e7:b9:5b:d1:a7:7c:38:db:b5:41:5f:fa:af:b8:b6:1d:7c:09:
f1:36:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:05 2026 by rpki-client