Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AFED926454811F189E741A9CE1D38B0.roa
File: 8AFED926454811F189E741A9CE1D38B0.roa (raw, json)
Hash identifier: nYUpJW4CYfOOO+6Vw+EJsDYMIAKCd9PgjBPDMG8uc6o=
Subject key identifier: A1:8E:FE:B9:B6:DC:6A:2F:C1:06:83:F4:B6:0D:F3:39:EA:C8:6C:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B05B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AFED926454811F189E741A9CE1D38B0.roa
Signing time: Fri 01 May 2026 10:28:50 +0000
ROA not before: Fri 01 May 2026 10:28:45 +0000
ROA not after: Fri 05 Jun 2026 10:28:45 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 15:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110683 (0x1b05b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:28:45 2026 GMT
Not After : Jun 5 10:28:45 2026 GMT
Subject: CN=69f48062-1b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:91:de:4a:fe:0f:c2:4d:a7:35:38:37:05:
cd:a8:6c:6f:b0:e1:f6:df:86:da:b0:8a:9f:db:99:
26:6c:a8:f2:6a:7c:29:c8:12:31:45:24:c1:c0:d6:
73:b6:b5:74:8e:88:5c:29:3b:fc:59:f2:a3:ab:27:
5c:89:62:98:a1:14:65:68:02:a8:80:b7:db:5b:44:
73:b9:e0:2c:f5:b1:99:bf:13:ca:70:97:6e:bc:43:
84:3a:60:00:8e:86:70:25:88:c9:f0:5b:bc:a0:09:
6e:90:c6:84:2e:80:54:79:05:da:93:0b:68:d0:30:
f6:53:a2:f9:e3:01:ac:d5:63:53:9f:df:f9:61:c6:
eb:fa:4a:47:a9:32:81:98:4f:35:20:34:82:aa:2b:
8a:54:7a:bf:07:80:3e:1d:d6:fe:ec:91:dc:ec:ff:
89:c5:c0:10:f2:07:4f:d2:ff:64:66:1b:f2:ec:cf:
c5:5b:22:df:55:25:fd:01:63:56:e0:a5:4e:e9:16:
05:d8:ff:9d:b5:fd:32:01:1a:9b:86:4e:14:82:91:
3a:fe:98:22:94:2b:ae:ee:f3:d7:74:2c:a2:a0:f7:
5d:06:96:b0:92:ef:88:64:4d:71:13:e4:0b:9d:1c:
66:15:92:60:8d:95:16:17:bf:48:7d:72:70:6d:bd:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:FE:B9:B6:DC:6A:2F:C1:06:83:F4:B6:0D:F3:39:EA:C8:6C:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AFED926454811F189E741A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:c2:cf:79:a8:af:11:d5:a1:a5:b9:9d:de:75:ef:fe:d2:b7:
5f:6b:88:f2:4d:d7:e4:4d:6a:62:9c:1d:85:07:21:ea:76:f8:
e0:36:7d:71:e3:f9:6e:95:f6:c2:d0:4e:85:fd:a5:b3:b3:4a:
26:85:d8:67:f6:a2:ec:80:34:b7:54:e4:97:5e:a9:0a:c0:b3:
e9:f0:bc:df:5f:9a:b8:59:62:86:8e:42:d6:a6:34:91:7b:b9:
3a:65:4a:2b:af:74:5d:72:eb:de:2e:80:83:0c:b1:a5:b0:4e:
51:21:0c:0c:a7:d4:8a:d7:33:8f:d2:77:74:7c:e8:08:71:60:
48:1b:da:1c:e7:ce:20:a9:22:60:82:f5:9a:67:75:5e:6f:c7:
86:69:7d:62:b7:2f:9b:8d:8d:50:c6:b6:3a:ca:04:b7:95:e7:
f7:ac:f8:0a:19:af:76:ac:6a:32:8a:3c:7f:69:91:5a:96:32:
5a:91:19:32:fb:f8:f1:b2:91:92:99:35:a2:28:a7:d5:b1:1a:
23:40:44:3a:ac:e0:9a:d1:2f:49:c1:95:ac:00:a9:80:75:88:
7f:08:2c:9d:62:0f:2d:24:40:e4:3e:e8:eb:6a:80:59:3d:14:
35:a1:ce:62:84:47:99:58:c3:c4:3e:ff:20:6f:a0:71:9a:b1:
ef:3f:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:43 2026 by rpki-client