Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D4AE5041F9511F195D888F3DAE4EC9C.roa
File: 8D4AE5041F9511F195D888F3DAE4EC9C.roa (raw, json)
Hash identifier: cT2ANFEAwMTb/4DdZRAVNyj9lDhI7Id2MY2X/e6B+uY=
Subject key identifier: D6:20:22:3D:EB:74:56:BE:2E:6B:A6:EC:66:98:47:E5:3C:EF:0D:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A518
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D4AE5041F9511F195D888F3DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 11:04:21 +0000
ROA not before: Sat 14 Mar 2026 11:04:16 +0000
ROA not after: Sun 31 May 2026 11:04:16 +0000
asID: 399077
IP address blocks: 156.240.231.0/24 maxlen: 24
156.240.232.0/24 maxlen: 24
156.240.233.0/24 maxlen: 24
156.251.40.0/24 maxlen: 24
156.251.41.0/24 maxlen: 24
156.251.42.0/24 maxlen: 24
156.251.43.0/24 maxlen: 24
156.251.44.0/24 maxlen: 24
156.251.45.0/24 maxlen: 24
156.251.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107800 (0x1a518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 11:04:16 2026 GMT
Not After : May 31 11:04:16 2026 GMT
Subject: CN=69b540b5-10d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:d2:2f:43:37:00:2d:24:f0:b9:dd:e5:cf:
ee:42:43:aa:90:84:a4:2b:ac:e3:3a:49:94:b6:83:
dc:b8:59:73:6b:54:25:a8:fb:2a:61:44:6a:2a:25:
27:b2:ee:cc:fb:48:ef:13:ee:9d:9d:d5:07:e1:e3:
37:91:a5:43:6d:d4:2e:d2:24:3d:90:ab:93:8b:af:
70:86:30:44:d8:9b:06:45:8b:52:7a:91:12:28:5f:
2d:e3:42:03:f0:e2:e4:c1:ef:f3:19:79:4e:3f:93:
57:c2:66:39:03:79:13:c7:31:ae:a1:d3:06:f6:a8:
a7:7a:25:8b:da:e6:f2:91:c8:46:14:7d:6c:7f:70:
87:5a:e8:f7:57:65:34:1d:fa:db:d9:77:4c:bd:23:
b8:54:c1:ce:a4:2f:19:46:4e:af:05:f0:c6:ec:65:
f4:07:0c:c0:fb:9d:1b:c2:0d:85:ac:40:d3:39:cc:
9f:50:89:06:28:21:7b:52:07:0a:35:07:5e:43:39:
f3:2d:ec:ee:41:b4:d7:77:ed:10:8b:b6:d5:c9:e4:
d0:7a:4f:3f:20:6e:22:6d:33:2a:ef:df:9e:7e:40:
42:78:1c:0d:4e:96:96:71:a8:3f:e7:b4:87:80:bb:
c4:fe:ee:e1:81:51:db:c3:24:7f:fa:d5:74:b3:b1:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:20:22:3D:EB:74:56:BE:2E:6B:A6:EC:66:98:47:E5:3C:EF:0D:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D4AE5041F9511F195D888F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.231.0-156.240.233.255
156.251.40.0-156.251.46.255
Signature Algorithm: sha256WithRSAEncryption
8d:2b:2d:00:26:e2:76:14:20:c8:b9:41:72:63:f9:0c:f4:f8:
39:de:1a:47:db:8e:5f:48:31:2c:c9:26:0a:b5:1f:c6:e3:68:
96:21:5c:7a:07:a5:50:08:bc:6f:1b:d4:bf:fc:ad:eb:1d:c7:
0b:0f:be:a2:7e:fe:03:28:4c:19:bc:06:eb:d1:d0:60:39:da:
0e:a1:8b:bd:12:77:93:6a:9c:76:cd:49:bc:e1:b8:43:2f:8b:
84:54:0e:62:cd:a2:0e:59:00:ec:d3:84:dd:91:0b:f5:93:c0:
3f:ed:3a:5f:e5:3b:3b:7b:04:42:61:0e:0a:d3:b0:08:3c:6f:
cd:e7:fb:f2:ca:f5:bc:74:5c:22:57:0b:8a:fd:30:61:d7:db:
02:a0:d3:24:29:77:d8:38:1a:d5:e3:23:44:05:9d:68:ab:89:
ba:df:83:87:3e:28:e2:16:d9:59:47:75:76:95:8c:1d:e3:a6:
49:8d:40:df:5b:3f:79:6b:46:d1:cc:c5:89:67:a9:6f:39:3f:
44:b6:0b:3b:d4:8e:a8:eb:86:94:a5:a6:dd:12:ee:cb:de:fe:
55:f8:18:00:96:83:11:ac:f1:27:27:56:27:73:e2:2c:bd:73:
f8:1f:98:25:52:40:8d:18:ef:02:fe:b0:16:e2:71:93:35:d7:
33:be:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:29 2026 by rpki-client