Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BAA7ABA163011F1AA22DDE6DAE4EC9C.roa
File: 4BAA7ABA163011F1AA22DDE6DAE4EC9C.roa (raw, json)
Hash identifier: oK1u+cp3jVC5eI2eE4k6Zpb6/RqGS1HXdyc/vYwDrkk=
Subject key identifier: 54:0E:84:6E:2A:1F:E4:5A:47:81:4F:68:D6:2E:CC:4C:73:2B:02:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BAA7ABA163011F1AA22DDE6DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 12:06:51 +0000
ROA not before: Mon 02 Mar 2026 12:06:47 +0000
ROA not after: Thu 09 Apr 2026 12:06:47 +0000
asID: 138915
IP address blocks: 156.244.48.0/24 maxlen: 24
156.244.49.0/24 maxlen: 24
156.244.50.0/24 maxlen: 24
156.244.51.0/24 maxlen: 24
156.244.52.0/24 maxlen: 24
156.244.53.0/24 maxlen: 24
156.244.54.0/24 maxlen: 24
156.244.56.0/23 maxlen: 24
156.244.58.0/23 maxlen: 24
156.244.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106964 (0x1a1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 12:06:47 2026 GMT
Not After : Apr 9 12:06:47 2026 GMT
Subject: CN=69a57d5b-4cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:83:60:5a:9c:24:c0:9f:1a:3f:a3:03:e1:16:
dc:88:03:ba:6e:3a:dc:18:28:e1:6e:94:b0:92:6d:
71:6b:b2:89:e5:01:26:1d:25:c9:6d:64:f9:a0:3c:
d0:d4:1f:cb:0c:12:dd:fa:13:30:e3:2d:17:71:e3:
4e:e2:bb:88:9c:35:94:e8:52:c8:a3:f5:85:42:5f:
ab:c3:f3:1a:e0:9c:aa:11:44:70:97:31:db:79:3c:
7a:12:c2:d1:44:4b:7a:42:89:a4:4f:04:b5:25:83:
76:d1:ce:82:9f:1a:b6:b7:76:32:f8:f8:48:c9:6d:
73:b6:f8:bc:c6:42:7c:b1:a5:7f:ee:62:ba:ed:45:
2e:bc:dd:11:f4:00:76:39:74:a4:80:c3:4b:e5:85:
56:22:b6:87:9b:80:03:8f:db:f4:a8:2f:70:f6:4e:
20:46:83:9e:00:70:b8:17:43:e4:b9:ea:42:f4:8c:
69:0f:91:03:c1:ea:b7:e0:91:46:73:43:8a:49:db:
19:b3:8d:d6:b1:97:7a:b6:41:d1:95:49:c9:ac:82:
e4:89:fb:44:85:68:12:3e:97:15:ff:4e:ad:5b:d2:
02:5e:02:c3:08:95:58:3c:de:34:92:06:d6:e9:57:
90:c3:45:9a:3b:7f:cf:55:13:7e:16:90:ba:9f:1d:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0E:84:6E:2A:1F:E4:5A:47:81:4F:68:D6:2E:CC:4C:73:2B:02:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BAA7ABA163011F1AA22DDE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.48.0-156.244.54.255
156.244.56.0-156.244.60.255
Signature Algorithm: sha256WithRSAEncryption
12:bb:57:d7:97:2a:60:11:f1:1b:25:4c:13:f5:ed:cd:0a:54:
96:e0:ad:6d:ba:13:7b:c1:de:c9:bc:f6:b3:db:87:16:21:7d:
b4:ef:d6:33:5e:b5:ab:2e:71:df:47:f5:f8:0a:90:9d:c0:2a:
f6:7e:c7:32:98:ff:d9:5a:70:08:14:7b:ab:d2:4a:9c:f2:7b:
c6:ff:d8:05:08:24:34:ea:57:f0:05:e3:65:2a:4e:58:2a:35:
c1:7e:23:b4:66:35:33:c6:71:a3:4e:48:c2:ee:bf:d9:8a:01:
c7:bc:72:dc:1d:8f:0b:83:1b:63:ba:13:82:f4:ad:3f:31:5b:
ce:a4:d7:d8:54:72:5e:7a:80:cc:c1:d9:2f:16:c4:cd:de:1c:
61:d1:d9:d2:63:5e:62:7b:5c:3f:a6:16:6f:97:47:a7:fb:7d:
50:a3:cd:44:81:15:d1:0d:0b:aa:4e:6b:08:84:8e:f3:76:75:
39:c2:fb:43:24:f6:0c:49:74:f5:f5:cc:52:d7:1e:42:52:25:
d5:7a:82:54:bd:bc:40:aa:41:d7:0d:50:7f:7b:f1:84:3d:73:
e1:1f:cd:40:f0:d9:f0:3f:f7:5a:4f:2c:12:74:92:63:85:e9:
e0:ee:97:be:56:03:84:33:ec:33:95:4f:7d:9e:1f:65:be:a4:
6a:24:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:35 2026 by rpki-client