Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76B2112A3EBA11F1B81CE2A7CE1D38B0.roa
File: 76B2112A3EBA11F1B81CE2A7CE1D38B0.roa (raw, json)
Hash identifier: YTb7De9dVJo+HqZPG0CaaCyukNh8k8imDx5dJlWxuFs=
Subject key identifier: B4:1C:E0:DF:EE:4C:FD:D8:0B:DE:07:64:43:25:E7:2A:B5:F7:4B:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76B2112A3EBA11F1B81CE2A7CE1D38B0.roa
Signing time: Thu 23 Apr 2026 02:16:40 +0000
ROA not before: Thu 23 Apr 2026 02:16:35 +0000
ROA not after: Sun 31 May 2026 02:16:35 +0000
asID: 32043
IP address blocks: 156.249.216.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110205 (0x1ae7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 02:16:35 2026 GMT
Not After : May 31 02:16:35 2026 GMT
Subject: CN=69e98108-bf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:30:69:13:a4:32:9a:06:ee:64:82:c6:2b:
3c:bd:ff:3d:88:9b:ca:30:c3:1a:fb:b7:4b:30:53:
68:9b:69:0a:7f:05:43:5c:da:18:c4:30:b0:62:29:
10:fd:36:69:4e:b7:49:cc:3a:5c:58:1b:7d:56:78:
59:28:e3:b9:f5:4c:26:1c:8a:2e:af:9f:0b:1e:a1:
80:13:b9:dc:5e:27:6d:77:ca:fa:1d:ad:e4:9b:34:
f0:1f:f8:dd:ee:72:71:da:e7:9b:d7:98:4b:fa:29:
03:3f:4e:a8:bd:be:a5:d9:17:48:c3:e9:86:8b:c2:
bd:2d:5d:f4:52:a7:f0:67:ef:b8:6e:83:c7:88:25:
d2:d7:da:19:74:54:c6:99:7f:75:0b:e5:4b:83:86:
ce:f5:2f:d0:48:56:a6:30:63:e7:a1:37:9f:ba:51:
c4:0d:5c:b4:19:4b:e9:da:c2:17:a2:e6:f2:6c:08:
af:ff:b8:5a:39:fa:d6:25:aa:a6:9a:93:80:b2:20:
79:e7:16:c0:60:8f:37:a5:51:87:3c:53:51:ab:d9:
7f:4d:e5:b7:af:be:74:97:c5:7a:d8:16:7d:e8:22:
71:eb:ef:0d:d8:86:80:0f:de:3b:ae:37:9a:4c:35:
b8:66:9d:79:99:27:26:28:e5:23:1e:d6:70:03:b2:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:E0:DF:EE:4C:FD:D8:0B:DE:07:64:43:25:E7:2A:B5:F7:4B:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76B2112A3EBA11F1B81CE2A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.216.0/22
156.249.248.0/22
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:07:bf:79:dd:f1:33:44:46:6d:19:ae:a6:3a:f6:aa:28:2c:
bd:fd:da:be:5b:9b:1b:28:14:bf:b4:80:cc:fd:3f:81:54:4a:
3a:9a:87:df:fb:be:4c:93:2c:47:38:42:c8:f8:6d:db:e5:d4:
ef:44:20:38:91:94:c8:af:b5:e6:32:e1:1b:47:04:c6:d4:a7:
82:e0:de:bb:66:5e:22:6d:76:70:c4:08:53:1c:b6:a1:29:3f:
6c:ec:f6:ef:6e:99:9b:67:05:a5:79:f4:79:19:44:3c:d2:b3:
69:b0:16:50:9f:34:01:37:bc:29:f3:4b:2b:b7:ad:3e:06:d0:
27:0d:61:3a:2b:ce:8f:e4:7d:68:32:10:2a:f3:95:6e:fc:df:
92:fa:aa:ba:63:0d:5a:20:ba:c9:67:cd:c5:b0:85:fb:7b:89:
2c:d2:63:e4:49:34:b2:88:92:20:98:6d:bd:d0:0b:b8:88:77:
14:88:df:b9:ac:73:1b:b1:bf:10:86:9d:c4:a8:4f:47:bc:54:
cd:23:5b:44:4d:32:5b:32:85:c3:0e:42:58:eb:3f:e2:7e:5f:
a1:8a:35:73:07:0d:65:ca:1f:1a:01:8a:a7:56:41:25:69:c3:
5e:ea:1e:7c:4b:29:85:58:88:62:48:81:13:69:50:65:29:03:
10:95:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:36:18 2026 by rpki-client