Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8841763816D811F1B1AD93F5DAE4EC9C.roa
File: 8841763816D811F1B1AD93F5DAE4EC9C.roa (raw, json)
Hash identifier: zmRr7cNGc8iUhCrKcmXGx2c1CRqZYM/ugqzHM1vBd3Q=
Subject key identifier: D9:36:0E:52:61:0C:90:7E:BF:F3:D9:39:D3:62:AE:EA:78:29:00:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8841763816D811F1B1AD93F5DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 08:11:08 +0000
ROA not before: Tue 03 Mar 2026 08:11:04 +0000
ROA not after: Wed 11 Mar 2026 08:11:04 +0000
asID: 141167
IP address blocks: 156.225.0.0/23 maxlen: 24
156.225.12.0/23 maxlen: 24
156.228.3.0/24 maxlen: 24
156.238.2.0/23 maxlen: 24
156.254.120.0/22 maxlen: 24
156.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106977 (0x1a1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 08:11:04 2026 GMT
Not After : Mar 11 08:11:04 2026 GMT
Subject: CN=69a6979c-42a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:95:ef:59:a9:8b:84:c2:c8:6b:7a:ce:18:
fb:d5:ac:b8:99:16:ef:76:6d:77:4c:d3:a8:75:b8:
30:2b:3c:12:c2:34:0e:df:5e:22:66:de:aa:d3:ba:
87:aa:4a:c4:f7:f8:98:35:c8:50:d0:c7:86:33:97:
53:a4:1e:35:f6:84:0b:33:03:eb:4e:e5:33:6e:1e:
7e:4a:e2:bd:0e:ac:90:86:16:d5:d2:fd:3f:de:28:
f1:4b:61:00:79:76:33:e7:ac:82:6d:90:6d:0c:43:
98:ad:87:39:8c:f8:06:f6:d2:b5:0a:46:99:8b:72:
b5:8e:92:42:f4:56:68:50:2f:48:55:3e:6b:86:0e:
9e:41:d3:67:88:9d:92:31:af:de:7c:84:81:8a:df:
83:95:01:39:ea:25:c4:06:af:a2:d2:1c:ce:16:a2:
bc:40:19:cb:7e:89:e6:0f:c6:97:c8:30:d2:e4:80:
84:ee:a0:9b:4e:0e:74:cc:de:2a:69:87:e8:c6:cc:
bc:0f:ee:63:18:db:b7:3b:c1:4a:1b:2c:92:c3:ff:
da:38:0f:ab:fa:0a:47:9a:a7:fa:fe:a8:ea:19:67:
f3:07:32:a1:43:de:8c:08:58:c2:82:2d:68:cd:fa:
74:22:10:e9:25:35:ea:bb:10:99:90:45:3b:5a:81:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:36:0E:52:61:0C:90:7E:BF:F3:D9:39:D3:62:AE:EA:78:29:00:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8841763816D811F1B1AD93F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.0.0/23
156.225.12.0/23
156.228.3.0/24
156.238.2.0/23
156.254.120.0-156.254.125.255
Signature Algorithm: sha256WithRSAEncryption
11:db:f9:05:f2:7a:73:d1:a8:29:5c:31:9e:07:d8:6e:64:03:
19:5a:56:63:10:5e:f9:8a:d3:e4:22:bc:7b:0b:7a:d7:21:1d:
30:95:43:6b:93:58:7a:9c:84:1c:f2:ab:cc:2d:af:73:01:4d:
03:3e:87:d0:3c:09:d6:94:a9:31:eb:be:77:d7:8e:ce:c9:a8:
bb:d1:94:30:86:01:dc:ec:a2:c7:96:3d:ff:ca:a5:82:a8:c1:
22:6c:d8:3d:dd:ea:8f:34:12:d3:00:af:85:db:45:2c:c0:13:
60:ce:68:46:09:79:37:e7:8d:d0:22:ed:16:5e:93:c8:95:56:
4e:a9:77:e1:02:17:04:7b:dd:50:e1:eb:a0:3e:d9:8a:e9:52:
46:39:26:a8:0c:0f:f1:aa:f5:43:3c:d2:cb:53:71:20:f2:27:
cb:92:19:07:ed:51:b5:bb:b2:3a:e8:80:26:8e:32:ae:6c:19:
a4:07:e8:ff:85:5d:81:16:b4:09:d1:d9:27:cf:10:3f:59:1a:
f9:a1:e8:11:0f:ba:ab:69:c3:71:1c:a9:6a:7e:f7:2a:38:20:
ca:a7:35:84:18:76:cf:cc:8e:eb:2d:f2:73:0f:79:1c:38:0e:
ba:ca:49:87:9d:e0:48:d9:de:58:1b:3e:e1:91:b9:17:25:fc:
34:a9:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:37 2026 by rpki-client