Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288FE5E42DB211F1A974C97DDAE4EC9C.roa
File: 288FE5E42DB211F1A974C97DDAE4EC9C.roa (raw, json)
Hash identifier: otVjlxEFDNDMMczVfbeS1Y8gH9W3IsurJBUZwrt1zp8=
Subject key identifier: E2:95:D2:E4:AA:F5:86:A7:F6:9C:26:9C:0F:EE:C5:8E:BC:6F:42:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A90E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288FE5E42DB211F1A974C97DDAE4EC9C.roa
Signing time: Wed 01 Apr 2026 10:04:24 +0000
ROA not before: Wed 01 Apr 2026 10:04:18 +0000
ROA not after: Thu 07 May 2026 10:04:18 +0000
asID: 202437
IP address blocks: 156.228.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108814 (0x1a90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 1 10:04:18 2026 GMT
Not After : May 7 10:04:18 2026 GMT
Subject: CN=69cceda7-88d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:ce:a8:01:1c:96:01:b1:13:f7:b5:de:db:
84:aa:ab:c9:bc:9b:e2:e6:e4:17:a8:df:71:3d:dc:
b1:3c:fe:8e:c3:86:d0:1c:ab:ad:c0:94:28:65:9c:
5e:f9:71:be:c8:55:c6:e4:cd:e1:e4:62:d7:34:4f:
a1:11:d6:3c:45:d9:fc:fe:0b:29:6f:30:59:39:b7:
df:92:98:15:85:ea:8e:81:61:c3:d1:6a:66:e3:a8:
72:3b:76:ad:8e:83:df:d1:79:14:95:03:af:d0:09:
4a:67:f1:15:f5:a5:20:e2:8d:f3:96:66:aa:75:2a:
ee:51:23:bd:f7:49:90:98:c8:e0:7e:01:8f:c3:97:
12:68:c0:98:37:36:1d:19:14:d0:4f:d7:fb:fb:a2:
d1:16:11:20:d5:c1:14:c5:b5:5d:c9:a3:da:c3:a5:
e9:5f:df:b5:6e:cd:d6:75:37:b8:a6:87:90:f2:7f:
65:6f:a7:0a:7e:c1:06:b4:ac:f4:c9:8a:ff:a1:d1:
f6:a7:5f:53:58:6b:57:8d:b4:89:43:7c:ab:b2:f6:
57:0a:37:06:29:60:e2:66:0a:ef:d4:96:fc:66:0b:
f1:ba:c3:f3:09:7c:29:57:fa:65:b3:dd:fd:7f:23:
f5:b8:56:68:06:ea:87:63:3f:ca:0c:88:9c:e4:dc:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:95:D2:E4:AA:F5:86:A7:F6:9C:26:9C:0F:EE:C5:8E:BC:6F:42:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288FE5E42DB211F1A974C97DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.6.0/24
Signature Algorithm: sha256WithRSAEncryption
78:95:98:91:a3:bb:c7:b5:e3:e6:11:0b:88:f5:84:8c:9e:70:
b5:d0:c6:9d:6b:dc:8c:0c:8e:42:09:77:27:0b:8e:66:50:26:
62:69:ac:a4:b9:50:45:23:e1:22:e1:ca:9f:d4:e5:62:b5:07:
04:fa:b9:ee:73:98:9a:db:e5:a6:ce:da:45:ff:86:26:08:3b:
76:db:03:b6:eb:56:90:dd:22:91:9d:29:97:33:11:d1:f0:da:
21:64:3d:61:a9:21:c8:f8:ac:09:52:96:91:26:f1:19:74:9f:
24:fe:51:fa:0c:a9:b4:f8:1d:b4:99:bd:a9:2f:27:b8:89:2f:
3b:a7:30:16:bc:c7:bb:80:89:d8:c7:fb:23:76:44:84:a7:70:
0b:9a:e2:19:c0:75:b7:bd:e1:ef:48:ca:f0:17:0c:7b:2e:d4:
ca:c5:6d:05:86:a0:4f:89:a9:81:77:84:09:f8:4a:77:ea:7f:
cb:7b:25:ff:52:66:5b:a8:7b:fa:9c:df:f4:58:51:97:59:f7:
33:87:74:f7:c5:fe:43:15:0b:30:3d:08:81:8a:0a:a7:7b:32:
eb:18:be:08:26:28:04:13:02:a4:d2:6f:99:ec:86:b6:3e:fa:
99:c0:e1:6c:b5:8a:3a:09:69:0b:ed:92:be:36:87:93:1d:17:
cf:15:e3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:38 2026 by rpki-client