Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/258074C2254711F1B39FE29EDAE4EC9C.roa
File: 258074C2254711F1B39FE29EDAE4EC9C.roa (raw, json)
Hash identifier: /Ip+M+X6sZGoFN4kijdb078TwSd/r0uAGRDQUYBhkDg=
Subject key identifier: 71:BD:28:69:CC:12:00:26:FE:27:39:CE:D9:17:9F:2F:C7:06:FC:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A69B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/258074C2254711F1B39FE29EDAE4EC9C.roa
Signing time: Sat 21 Mar 2026 16:58:13 +0000
ROA not before: Sat 21 Mar 2026 16:58:08 +0000
ROA not after: Tue 28 Apr 2026 16:58:08 +0000
asID: 140475
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108187 (0x1a69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 16:58:08 2026 GMT
Not After : Apr 28 16:58:08 2026 GMT
Subject: CN=69bece25-d976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:fe:89:d6:d7:d8:8d:40:55:de:54:c1:94:
dd:cd:ff:4f:29:13:7d:ed:bb:66:7e:74:98:60:51:
e9:e3:c4:a2:0f:a4:6a:16:87:65:d7:b4:b1:1b:72:
96:e2:9d:08:cf:96:93:cf:7c:af:ed:b8:75:53:bc:
ef:ca:31:8f:96:3d:af:54:63:f4:d5:cc:a9:6f:22:
41:ce:2f:8c:76:ad:e1:2e:b2:ff:2e:50:cc:e7:fb:
39:78:59:d6:cc:de:2a:f4:3f:60:15:b3:94:4d:51:
e2:0c:d3:35:7a:52:97:9b:83:e6:19:a4:23:88:47:
3a:25:82:2f:ea:d6:ff:56:cf:fa:85:62:78:53:70:
61:f5:62:07:2c:65:b4:3c:ab:f8:ec:c6:a5:51:f4:
92:48:57:cb:c9:32:7d:db:a7:9f:78:7d:dc:ee:0b:
d3:a2:54:4e:a5:3e:d6:aa:df:e2:c9:53:30:bd:8d:
a7:68:7b:5b:ab:f3:3d:ce:f7:67:a4:d0:9f:bb:46:
35:ee:2a:4f:f8:c3:a7:29:e1:85:51:e7:cb:c9:d7:
9c:90:8b:96:8e:2f:83:cb:2e:d6:66:55:ab:1a:66:
30:5d:ea:c0:c2:40:56:e3:fb:d7:07:07:47:ea:83:
06:46:9a:f6:49:4f:06:31:d6:85:69:0b:7b:31:68:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:28:69:CC:12:00:26:FE:27:39:CE:D9:17:9F:2F:C7:06:FC:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/258074C2254711F1B39FE29EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:23:bc:4e:9a:73:6e:1a:94:b6:d6:e7:7a:e0:42:d9:3d:1a:
72:3f:a6:4a:68:d7:a5:00:6b:cb:23:1e:6a:f8:43:2e:9e:ec:
fa:01:6f:b8:f9:54:56:c2:03:6f:e4:4c:81:84:d6:39:99:9f:
8b:93:6c:d0:00:d0:f2:48:e4:27:52:1b:94:04:41:af:90:eb:
82:9b:12:5c:b6:dd:62:e2:4b:dd:a0:8b:a2:3f:73:76:ba:50:
b3:fb:8b:40:93:7e:ab:74:19:d5:2c:83:de:88:de:5c:9f:6c:
21:42:55:f9:0f:99:9c:cb:09:52:33:b1:a9:75:f5:34:74:d6:
28:66:9a:e8:8a:ec:1d:d6:06:f0:90:9b:3e:a7:1a:21:44:c4:
86:de:fb:25:c7:4b:1d:07:c1:de:f5:fd:8c:f3:88:c7:d2:fe:
75:9f:33:6b:e4:c7:9f:db:6d:e5:a7:62:b9:74:a5:fc:df:d2:
d3:c6:c0:8c:9c:1d:0a:d0:29:74:bd:aa:c2:47:fe:7d:57:02:
dc:d1:19:9e:61:c1:2c:b0:d0:71:3e:3f:6c:ae:8e:0c:37:63:
4f:7b:ad:7f:74:61:ef:ab:90:67:7e:ce:8c:61:fd:10:14:8b:
7a:9d:6a:17:a3:ce:d3:8e:6e:35:5c:a8:6a:12:90:dd:d7:7a:
37:36:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 21:30:56 2026 by rpki-client