Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F0D2D9438AD11F19215181ECF1D38B0.roa
File: 8F0D2D9438AD11F19215181ECF1D38B0.roa (raw, json)
Hash identifier: NfQ/79rjRGpemboCQlypSO9se8+9mzqHRzpnA3k3114=
Subject key identifier: 8B:DB:54:A0:97:C7:A5:5C:16:C7:43:A2:DB:75:80:2F:FE:C8:50:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F0D2D9438AD11F19215181ECF1D38B0.roa
Signing time: Wed 15 Apr 2026 09:29:11 +0000
ROA not before: Wed 15 Apr 2026 09:29:06 +0000
ROA not after: Wed 06 May 2026 09:29:06 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109771 (0x1accb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 09:29:06 2026 GMT
Not After : May 6 09:29:06 2026 GMT
Subject: CN=69df5a67-ffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4b:db:6c:db:16:ce:48:37:6c:4f:17:8f:4f:
82:e1:7e:e0:fc:06:d9:e1:ce:61:3b:ae:1b:57:16:
e9:04:c9:57:24:30:1b:a0:e7:3c:4d:fe:c6:74:21:
36:df:12:85:9a:d5:87:5d:8a:58:04:cb:41:ae:ce:
53:7c:4f:4e:52:a7:49:25:77:ef:ef:f4:fa:61:c7:
38:f1:ad:f6:3d:f5:0c:4d:f8:c2:ae:c0:9e:1d:c4:
e9:28:d8:91:c2:51:df:fe:91:f9:82:3d:46:53:fb:
66:f1:b0:0d:70:08:3c:70:9c:9a:54:89:3d:b3:ef:
b5:37:a8:f6:63:93:22:69:25:b9:69:1a:49:82:88:
86:cf:a4:46:54:2e:db:5f:7a:b2:1b:1a:e4:d5:fa:
6e:eb:fd:4d:6f:04:7f:10:7f:5e:41:6a:51:99:cb:
f4:78:0d:3a:5b:66:79:cd:5e:8d:37:fc:c0:42:50:
7b:ee:69:b7:17:d5:b3:f7:fc:01:15:6f:74:23:26:
a6:2a:f0:2e:17:05:71:70:66:76:19:cb:96:dc:67:
d6:04:9f:df:0a:70:c5:cc:95:de:44:63:54:60:c1:
b3:e0:76:2d:a2:61:b1:d8:ec:cd:ba:9e:4a:aa:a4:
18:d8:90:f5:d9:df:70:e3:74:fa:25:6c:66:ad:ca:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:54:A0:97:C7:A5:5C:16:C7:43:A2:DB:75:80:2F:FE:C8:50:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F0D2D9438AD11F19215181ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
73:02:4f:60:52:46:b7:78:e1:e9:23:e9:a9:bb:08:c7:d5:00:
13:d8:ff:55:3a:c1:1b:b8:15:ea:72:d6:09:94:5b:08:0d:37:
91:27:01:de:49:e6:03:30:46:d1:dd:7f:27:a6:30:7d:31:e0:
1a:4c:7a:c2:02:9a:09:eb:f0:f8:fe:cf:9d:86:e1:d0:72:05:
0f:0b:d5:72:4c:57:a5:76:e5:2b:0d:4e:e9:e2:97:71:1c:da:
7d:f4:1f:10:68:80:4a:40:a1:1d:f4:13:5d:81:66:b0:ad:bc:
89:bf:55:4a:64:b1:cb:e6:88:4e:a3:01:36:4c:46:f9:9b:7c:
2e:e7:9a:1a:88:e6:35:e4:f4:79:be:64:d4:73:eb:40:f0:a7:
49:1f:7d:4b:51:be:4d:44:4b:57:a6:9a:42:d7:fc:53:bf:4c:
f7:16:60:f3:16:30:9a:a7:70:d8:df:dc:d7:ce:4f:5c:b7:cb:
b7:de:08:77:b7:59:32:41:cf:4b:77:d4:c8:1c:58:7f:21:b4:
3f:0d:f2:5f:18:ac:30:6d:3e:27:b0:22:6e:13:64:c8:d2:2e:
08:13:5a:0f:6a:b4:de:78:7c:97:d3:da:6e:5c:16:83:9f:1d:
3b:03:5e:c7:5f:ce:17:4f:ca:4a:b1:ec:76:25:7a:01:ee:15:
d2:d1:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:09 2026 by rpki-client