Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/500B43FA1C2F11F1870BD793DAE4EC9C.roa
File: 500B43FA1C2F11F1870BD793DAE4EC9C.roa (raw, json)
Hash identifier: ASpdIgg1ZP8tMNQnhMF1pkqC5nFJWvVNSQhdVl+PSGw=
Subject key identifier: 51:A8:DA:FF:88:0D:4E:28:C8:48:A9:0D:6C:6A:FF:D1:98:04:FF:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A39C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/500B43FA1C2F11F1870BD793DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 03:14:56 +0000
ROA not before: Tue 10 Mar 2026 03:14:51 +0000
ROA not after: Sat 21 Mar 2026 03:14:51 +0000
asID: 139880
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107420 (0x1a39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 03:14:51 2026 GMT
Not After : Mar 21 03:14:51 2026 GMT
Subject: CN=69af8cb0-d3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:72:d5:d1:2e:c2:c0:d1:6b:04:fb:4d:6b:
2c:5d:1e:04:0a:7f:24:a5:1b:25:51:f5:33:54:93:
a3:d0:0a:8e:83:8c:ff:97:be:8a:57:35:c0:93:fc:
a9:5e:4a:9d:0f:7d:f4:d9:47:e9:db:31:3a:bf:36:
1b:f2:a5:d1:b6:b6:16:93:08:48:53:bc:88:f9:62:
85:e7:60:f9:3b:f4:e4:fa:3e:1f:49:9d:a6:4c:88:
fe:14:b0:46:d8:b4:54:fd:94:8a:a1:c8:26:2f:3a:
6f:13:4a:8f:58:ff:c1:d3:6e:a7:75:e1:15:51:bd:
02:2b:b4:93:3a:df:d7:cc:31:28:34:d5:fe:d3:24:
e0:eb:60:33:9b:81:50:ff:76:98:d9:65:70:81:db:
b1:64:4d:db:d7:e2:19:63:b7:78:96:b9:2e:2d:5b:
55:82:33:29:15:77:f4:76:e0:c0:a5:ef:1c:14:4b:
52:14:fa:7d:3b:df:6c:42:30:94:fa:8c:df:32:8b:
34:53:94:e3:57:fa:cf:5f:24:8d:96:f0:5c:8e:9d:
ca:d7:b8:f7:51:48:75:46:4c:5f:ea:13:06:31:78:
f9:ef:0d:88:a5:b5:fb:1b:2a:c4:8f:41:cc:30:ff:
41:c5:32:44:71:f5:f6:0b:1b:63:b8:5b:1a:11:c0:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A8:DA:FF:88:0D:4E:28:C8:48:A9:0D:6C:6A:FF:D1:98:04:FF:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/500B43FA1C2F11F1870BD793DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
0c:01:9c:1d:32:fd:7c:c9:32:e8:2f:f0:f0:db:4f:4d:54:78:
25:18:62:dd:6f:aa:47:0e:15:20:63:e4:d8:61:4e:23:76:c4:
d7:5d:2d:74:89:7c:f5:99:23:c4:e5:a2:15:b2:b3:1c:b3:42:
f0:c4:bc:cc:ff:50:ae:4a:80:0d:44:f0:11:86:ee:78:4f:af:
c4:1f:16:46:3d:1b:5c:70:86:c1:2f:09:18:91:54:8c:1b:2d:
b1:6d:b7:aa:88:a1:6c:92:22:d1:c1:3d:62:e8:be:65:e0:dd:
b5:18:94:6f:ab:6b:87:c6:06:33:4e:19:60:b3:fb:df:9b:06:
83:96:7e:7a:06:d2:e1:ff:78:de:65:ea:46:6e:18:7d:8e:76:
40:34:45:5b:3c:1e:f0:2d:a1:11:fa:dc:83:df:28:57:11:15:
c9:58:19:c7:6c:5c:e7:ac:5a:c1:5e:7a:52:a8:71:75:a9:d1:
d8:51:61:c9:ca:4d:d9:d7:d9:fc:91:c6:7a:c1:48:0e:3e:4a:
8d:9d:2a:c7:ef:39:ae:c9:99:49:9a:f1:12:d9:58:23:fd:a1:
18:8b:f1:64:1f:d2:8d:33:aa:6f:c3:e5:ab:38:28:8e:98:f0:
a8:82:61:57:c0:60:63:ef:5e:69:02:b3:ea:aa:96:30:94:97:
3d:b8:74:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:23 2026 by rpki-client