Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA71A9E1B7411F1B43C8AD1DAE4EC9C.roa
File: 4AA71A9E1B7411F1B43C8AD1DAE4EC9C.roa (raw, json)
Hash identifier: RpJxYW/DB9E39Ngy3wg/ugR4RH9PWU6e7EViH+eE6tE=
Subject key identifier: 66:38:1F:E7:04:4A:C6:18:15:35:6F:11:1A:6B:98:A3:F9:AE:D0:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A34A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA71A9E1B7411F1B43C8AD1DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 04:56:11 +0000
ROA not before: Mon 09 Mar 2026 04:56:07 +0000
ROA not after: Thu 16 Apr 2026 04:56:07 +0000
asID: 17497
IP address blocks: 156.245.8.0/22 maxlen: 24
156.245.8.0/24 maxlen: 24
156.245.9.0/24 maxlen: 24
156.245.10.0/24 maxlen: 24
156.245.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107338 (0x1a34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 04:56:07 2026 GMT
Not After : Apr 16 04:56:07 2026 GMT
Subject: CN=69ae52eb-87fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:10:d2:de:07:18:70:c1:26:f8:1a:42:42:
57:a1:d3:28:88:f2:dc:b7:eb:6f:37:b4:8c:3b:a6:
85:fc:7a:01:c8:0c:05:82:b6:1b:22:4b:df:24:d5:
0c:8b:1e:f7:4e:61:81:70:67:e8:e9:f7:1c:9c:1e:
78:93:74:3d:36:15:01:f0:93:04:83:45:e3:7c:d2:
60:e4:a5:25:dc:a1:9c:14:1e:f5:42:70:91:a8:f4:
a8:bb:9e:b7:53:d8:f4:55:bc:81:cd:40:86:0d:9c:
04:56:44:26:5e:98:bf:7b:a2:2a:b6:40:42:73:cd:
11:96:cf:ad:2a:f2:39:d1:ee:c1:c2:4f:6d:f3:7a:
5e:00:d2:c2:32:3c:2d:13:bb:9b:b7:61:21:80:72:
0e:3a:57:0a:49:2e:2a:dc:ae:33:0d:02:19:52:16:
9a:83:a8:70:8c:e7:4f:d2:48:bc:11:4c:ae:7e:5c:
84:03:54:d6:56:28:6c:80:1d:ae:ca:a6:88:9a:cf:
7e:c6:21:44:d2:23:b9:8f:b3:9b:8b:6b:05:b8:cb:
04:54:04:a4:fe:dc:0f:05:05:9f:b4:59:c8:d3:24:
88:c2:06:0b:ad:b4:de:95:8e:98:25:dc:65:d1:88:
29:2f:da:86:60:c7:6a:58:56:75:62:c8:21:2f:76:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:38:1F:E7:04:4A:C6:18:15:35:6F:11:1A:6B:98:A3:F9:AE:D0:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA71A9E1B7411F1B43C8AD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ac:1b:2f:a8:79:28:b9:32:6b:95:3f:1f:2a:f4:52:5b:93:
c7:20:16:ed:da:11:49:9c:33:b9:76:c3:46:17:58:79:34:4c:
39:89:c3:d4:56:f5:18:31:51:cf:2e:17:9f:10:70:dc:b9:45:
5b:74:f1:92:5e:75:e5:d8:b2:81:55:58:3b:1d:97:0c:49:4d:
4e:0b:cb:0a:64:73:19:0f:09:83:27:5a:ef:6e:0f:db:29:43:
54:b3:db:8d:00:a4:a5:22:25:4a:92:f5:52:99:83:31:49:16:
51:1f:fb:c5:0a:b2:fd:9d:c5:a0:0a:6a:8e:a9:d5:f4:d0:a0:
9d:df:62:b9:ab:2a:e8:b2:cd:1f:f5:7a:51:a2:73:4c:8c:eb:
e7:a2:19:1e:d9:d9:26:b0:0f:e2:3e:60:0f:eb:ef:17:82:ae:
d2:da:33:33:7b:11:fb:b7:2a:5a:d6:ad:cd:5d:da:45:16:16:
4b:81:e2:ae:0c:be:f8:70:d0:a4:df:7e:cf:cf:cd:ad:e7:d3:
71:89:02:ea:93:76:52:90:65:d8:cd:e0:88:78:73:57:fc:d8:
de:16:7f:d7:ea:3f:97:d9:c1:d6:a9:24:57:d0:11:8a:97:23:
b3:2d:27:a1:b4:44:4b:f3:9e:85:5e:f5:fb:ae:f0:47:f8:b6:
c9:84:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:29:20 2026 by rpki-client