Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E60A7523A8F11F1B4BBD310CF1D38B0.roa
File: 3E60A7523A8F11F1B4BBD310CF1D38B0.roa (raw, json)
Hash identifier: 0LPi1cVZ74OFXsQXFilvnslvL+eOolk5AQqpGNPQIco=
Subject key identifier: D6:D0:E9:D2:4B:49:7D:3D:85:2E:72:61:7A:F6:18:9F:2F:BF:48:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E60A7523A8F11F1B4BBD310CF1D38B0.roa
Signing time: Fri 17 Apr 2026 18:57:13 +0000
ROA not before: Fri 17 Apr 2026 18:57:08 +0000
ROA not after: Mon 27 Apr 2026 18:57:08 +0000
asID: 136907
IP address blocks: 156.240.128.0/18 maxlen: 24
156.253.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109958 (0x1ad86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 18:57:08 2026 GMT
Not After : Apr 27 18:57:08 2026 GMT
Subject: CN=69e28289-0a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:4d:f1:78:51:92:1e:1c:d0:3a:d4:a9:67:
56:55:75:dd:d9:7b:fd:5c:fb:0e:8d:75:e5:cf:6c:
47:bf:a3:56:33:aa:c4:00:3a:42:12:6f:c4:fa:59:
4f:e5:02:41:7b:4d:7f:5e:6b:34:9d:68:dd:8c:9a:
37:76:11:57:ed:99:32:bf:36:f7:85:53:0f:d6:75:
71:54:c2:50:5a:39:93:ca:d9:03:47:ea:b3:a7:60:
8d:ca:01:3a:75:fa:55:29:90:4b:88:a7:60:e8:a5:
ad:83:7f:41:32:a6:90:c8:a5:11:90:cc:56:98:f5:
fb:f3:f9:ec:77:12:96:57:fc:f1:18:c4:44:ac:8a:
35:53:ca:f2:37:5e:d6:ec:1f:a6:a4:16:78:d1:d3:
52:53:83:a4:b2:48:1a:d9:ae:36:13:12:a0:ff:d4:
ee:4d:4f:a7:85:1b:3d:c2:c0:5f:26:0e:ee:6b:fa:
eb:fc:6f:7d:31:0c:5d:b6:9a:df:82:a0:b5:0c:68:
5d:ae:b2:5c:5d:df:fc:de:85:17:6a:53:ed:60:6a:
2a:b0:0b:61:88:b7:50:d1:c0:6d:d0:e1:5d:84:b4:
80:da:89:aa:03:75:53:22:fb:29:ae:66:1f:fd:d2:
8b:16:5c:5d:65:65:86:02:f6:16:8e:dc:8a:96:30:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:E9:D2:4B:49:7D:3D:85:2E:72:61:7A:F6:18:9F:2F:BF:48:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E60A7523A8F11F1B4BBD310CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.128.0/18
156.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
64:9e:93:8e:66:12:76:bd:61:16:4a:b7:72:b3:da:98:c7:b1:
6a:0f:ca:9c:4c:31:66:b1:3c:f7:7b:8e:1e:81:f4:a9:01:1b:
51:c7:5e:76:a2:da:a7:81:5f:50:8c:e5:db:fc:0f:5c:b5:a4:
b3:08:fd:d1:2c:5a:8b:75:e4:87:bc:af:be:ef:43:f3:b0:c3:
d7:39:08:c1:1e:93:39:c6:52:ea:21:11:1d:f6:43:f9:41:4c:
e3:c7:d0:1b:81:98:e9:ce:4e:ee:38:4d:72:92:ca:a6:cb:1a:
9a:ea:a4:be:b3:fe:67:e8:0b:07:1b:b8:f4:ad:d3:ad:aa:00:
28:6d:84:f2:7b:65:5b:69:34:68:cc:4c:0b:d6:35:f8:d0:03:
7b:c3:bb:3e:99:4f:9c:d2:b0:4c:34:89:a7:e3:fd:10:fd:e6:
e4:e2:5f:6b:37:bb:fd:81:01:f1:94:d6:a6:fa:9d:40:54:15:
a2:f4:37:c7:0b:b7:d0:2f:34:ca:6d:0e:4e:2b:70:a3:05:98:
de:e9:27:67:70:3f:0c:67:87:05:33:94:b9:bc:95:07:68:c4:
17:1f:25:57:95:17:8d:f8:00:f0:54:56:ee:3e:cc:ec:2a:cb:
3a:85:e6:7c:4d:82:db:a4:0b:75:98:2c:7d:49:89:9c:b2:12:
71:3f:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:35 2026 by rpki-client