Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B06DCD2E2E6F11F1AE0544CCDAE4EC9C.roa
File: B06DCD2E2E6F11F1AE0544CCDAE4EC9C.roa (raw, json)
Hash identifier: VyqsmJaMEvPBkNW6V1x4N0PaQEKiysMctUEiDdMP9A8=
Subject key identifier: 2A:02:E1:1E:10:8C:75:75:3B:D2:38:D2:1A:59:D2:6C:8A:22:B3:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A931
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B06DCD2E2E6F11F1AE0544CCDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 08:41:07 +0000
ROA not before: Thu 02 Apr 2026 08:41:02 +0000
ROA not after: Tue 21 Apr 2026 08:41:02 +0000
asID: 62563
IP address blocks: 156.233.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108849 (0x1a931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 08:41:02 2026 GMT
Not After : Apr 21 08:41:02 2026 GMT
Subject: CN=69ce2ba2-14d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:a4:61:dc:89:83:80:90:76:af:08:ef:c6:
ae:9b:82:41:35:c4:d3:6b:77:1e:5e:14:54:52:92:
b9:29:0e:2c:11:f1:da:7e:ef:6d:35:f0:69:b3:7d:
ec:79:d7:57:dc:d6:92:63:e6:09:d6:d5:fd:76:48:
86:42:0c:5b:aa:27:c6:ad:6f:ef:1e:13:69:fe:9c:
a6:9c:93:6e:2b:5b:69:70:cc:3a:c1:91:c1:cb:73:
00:e4:35:09:55:b7:df:a8:79:da:e1:b6:8a:c4:73:
5b:6f:0b:1c:26:2b:be:67:60:43:e2:86:96:8c:20:
bf:ef:fa:8f:1e:d7:85:a9:2a:e8:de:e6:34:e8:ea:
c4:83:3c:a6:b7:03:17:33:e5:5f:19:25:7a:74:df:
b7:cb:dc:39:b7:88:73:8c:89:2f:18:cb:fa:7d:95:
7a:39:8d:47:29:a8:13:c6:25:d1:18:78:80:d8:60:
ef:ee:d5:f3:c9:71:4a:49:5a:e8:73:2f:08:98:1d:
75:6a:9f:82:6c:6e:33:a5:f2:b5:bc:85:c4:66:f2:
0a:2c:9d:53:dc:c8:f6:26:e5:97:d2:74:79:b4:45:
e9:1c:bb:f8:06:6a:77:0e:e3:a9:c5:f0:17:93:76:
14:c5:1e:6d:82:e4:e1:cd:f5:92:98:07:8e:96:f6:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:E1:1E:10:8C:75:75:3B:D2:38:D2:1A:59:D2:6C:8A:22:B3:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B06DCD2E2E6F11F1AE0544CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.192.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7d:65:26:bd:c3:41:d0:3f:36:80:a5:a6:20:7f:46:94:77:
64:b3:e7:e7:d8:d4:79:bf:31:ae:46:8f:c0:9e:40:a2:64:6a:
19:9c:0f:77:38:19:75:ac:52:44:5d:2a:de:d9:d4:fa:eb:31:
e5:ef:57:85:00:0b:a0:b2:4f:52:9b:f2:5b:99:cc:de:a5:e1:
81:ad:4a:cd:76:07:78:53:91:cb:68:e3:df:83:78:9f:78:26:
0b:7c:ba:13:f7:16:be:63:c9:f9:9c:00:e0:f7:ff:7f:42:6c:
2f:e4:53:bd:d8:c0:96:87:be:62:98:1c:3c:32:98:2e:43:d2:
94:56:23:bc:90:a3:cd:22:5a:0e:e5:d2:20:13:11:6d:12:95:
e7:15:8e:1d:bc:d2:25:c1:51:6f:9c:de:67:5f:34:3a:8b:83:
ec:7f:de:42:3c:98:2c:8a:19:ee:68:04:4c:3d:0f:1a:50:c2:
00:89:d2:d7:6f:bb:0e:ba:2c:60:1a:00:15:84:18:08:dc:fc:
9b:27:0a:5b:7d:11:c1:f0:b3:e1:63:28:5c:c3:68:5e:a1:86:
a5:ea:0f:55:7d:5d:49:03:20:ea:3f:e4:5b:9f:41:d3:bd:e3:
ed:19:cf:7a:c8:bc:0a:47:96:6e:a9:ff:af:02:82:ea:54:6c:
5a:f0:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:40 2026 by rpki-client