Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8109F3CA949811F1B83C8DE0CE1D38B0.roa
File: 8109F3CA949811F1B83C8DE0CE1D38B0.roa (raw, json)
Hash identifier: o7Z0C33IRAw+PIb4KaJwSjrGtCSqhpwxeAbscwrDLTo=
Subject key identifier: 4C:A0:1E:3E:3D:84:28:DA:75:2B:BA:88:B6:27:A7:40:78:8C:7B:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CAE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8109F3CA949811F1B83C8DE0CE1D38B0.roa
Signing time: Mon 10 Aug 2026 08:50:15 +0000
ROA not before: Mon 10 Aug 2026 08:50:11 +0000
ROA not after: Thu 17 Sep 2026 08:50:11 +0000
asID: 22773
IP address blocks: 156.243.109.0/24 maxlen: 24
156.243.110.0/24 maxlen: 24
156.243.111.0/24 maxlen: 24
156.243.196.0/24 maxlen: 24
156.243.197.0/24 maxlen: 24
156.243.198.0/24 maxlen: 24
156.243.199.0/24 maxlen: 24
156.243.200.0/24 maxlen: 24
156.243.201.0/24 maxlen: 24
156.243.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117481 (0x1cae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 08:50:11 2026 GMT
Not After : Sep 17 08:50:11 2026 GMT
Subject: CN=6a7990c7-9a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:9a:37:2d:d4:cb:82:e6:8e:8e:f4:f5:0a:
8b:2f:f0:99:a1:ef:ae:fc:cc:82:d7:b4:71:c3:f6:
50:86:5e:55:ab:40:23:c0:95:b7:e4:1c:17:9e:9e:
d9:e6:30:93:27:4a:9a:94:df:6e:41:9c:00:fa:3b:
57:95:6e:8c:9e:47:34:64:f6:9c:39:3d:31:77:a6:
51:d1:fb:a6:d1:4a:64:21:f8:91:9d:22:63:e1:2e:
44:c9:80:ee:dc:5d:52:0c:ca:bc:89:45:59:34:8c:
53:a6:60:fb:ee:91:21:34:50:fc:8c:c5:dd:1c:0a:
15:8f:5f:e3:b5:17:57:1c:b2:f4:a0:ce:2c:6c:6e:
eb:3c:7b:40:03:cb:89:d2:e9:e1:e9:8e:08:65:72:
3b:ad:17:c6:71:4d:cd:cf:a4:47:26:b1:dc:5f:76:
95:85:6f:6e:08:ea:2d:98:c8:29:69:80:c3:3d:12:
14:e4:a6:ad:14:56:3d:8b:38:f1:d1:6f:55:e6:cc:
50:17:6b:c1:9e:93:ea:50:a0:5d:ef:a6:e4:f7:e2:
d2:19:00:16:33:21:7e:12:6d:e7:d4:f6:8e:09:b8:
1a:4d:fb:ff:4d:c1:5f:ce:d2:6e:62:ab:26:41:2c:
b0:22:ad:cc:1a:2a:0b:dc:fa:6e:19:9d:87:e6:7a:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:1E:3E:3D:84:28:DA:75:2B:BA:88:B6:27:A7:40:78:8C:7B:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8109F3CA949811F1B83C8DE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.109.0-156.243.111.255
156.243.196.0-156.243.202.255
Signature Algorithm: sha256WithRSAEncryption
22:f6:b5:de:f3:a8:40:39:37:73:2a:69:f4:c5:d6:17:16:00:
f2:73:55:58:ff:7d:92:c8:af:98:db:60:04:b4:b8:24:9b:6f:
1d:1c:48:58:78:22:3b:78:28:68:c4:f5:a0:47:49:fe:0d:4c:
bb:de:b6:dd:70:46:46:34:1b:b2:a9:92:08:fe:59:54:bf:6c:
d7:30:90:90:85:5d:64:36:6c:11:6f:34:68:48:8e:5b:48:64:
1f:9d:47:6a:f4:1d:93:0f:10:03:07:84:96:2a:2e:4f:ef:ed:
5d:76:e7:ef:5d:03:0a:4a:fb:0e:14:da:af:41:3a:5b:fc:0b:
cc:de:bc:ec:9b:e7:76:47:c3:49:fa:10:a1:7b:66:24:ad:3b:
45:c3:9e:25:f2:06:7c:2b:8a:0f:3d:42:48:08:1d:d0:19:e0:
87:2d:8a:b5:6c:f9:fc:2b:a7:cb:59:64:9e:21:4f:ba:9d:6c:
9c:4e:e7:12:a0:9c:00:68:e8:dd:ce:aa:8d:08:25:e8:be:32:
5e:78:a7:0e:da:6a:89:54:38:03:e3:bd:23:48:03:fc:55:ed:
a9:63:99:e2:18:18:fb:6f:2d:15:c1:f2:e1:f1:31:e3:9d:56:
54:3c:2b:4d:92:e1:bc:73:76:d9:9a:39:9e:b7:0d:a0:bd:20:
7f:a3:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:35 2026 by rpki-client