Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42CA066357C11F1AD15F719CF1D38B0.roa
File: B42CA066357C11F1AD15F719CF1D38B0.roa (raw, json)
Hash identifier: bVDa80jl/XZiuVZTLPDTKl8QPYPk1QXRXU2od+9Rbc0=
Subject key identifier: 72:22:01:D7:75:05:C5:52:1F:BB:AA:99:71:4B:1D:86:B9:BE:EA:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42CA066357C11F1AD15F719CF1D38B0.roa
Signing time: Sat 11 Apr 2026 08:01:54 +0000
ROA not before: Sat 11 Apr 2026 08:01:50 +0000
ROA not after: Fri 01 May 2026 08:01:50 +0000
asID: 61461
IP address blocks: 156.231.192.0/18 maxlen: 24
156.236.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109553 (0x1abf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 08:01:50 2026 GMT
Not After : May 1 08:01:50 2026 GMT
Subject: CN=69d9fff2-87ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:f7:e7:b6:61:cd:e1:68:b9:d7:79:47:2d:
6a:0e:57:72:60:cc:73:f5:54:9d:5f:9b:86:67:0c:
67:e4:1f:22:bb:33:d5:29:b3:37:02:06:c4:1a:c1:
9e:29:00:70:6c:f7:d9:ff:e2:41:80:25:79:bd:ed:
79:7c:e7:18:e1:7f:a8:d8:fe:ab:38:e6:7f:78:70:
0b:32:c6:02:c8:29:27:85:8e:bf:d4:88:f1:c5:8a:
b3:c5:75:8d:07:33:1a:c0:55:eb:7c:26:e4:d8:55:
da:fb:07:02:0d:b4:01:17:73:79:9b:b7:78:93:92:
60:a7:63:a1:1b:f0:83:03:63:fb:c7:15:21:56:2e:
90:13:13:39:cf:f9:65:fa:43:7d:29:da:47:cf:cf:
bd:d8:74:53:a7:7b:38:51:8d:0e:19:96:1f:81:fb:
73:d7:2d:32:f3:36:4d:35:71:db:ac:7b:88:d4:56:
e0:bc:11:91:88:b7:9f:ee:99:2f:eb:d6:39:44:a5:
61:d4:5a:cd:2a:32:73:92:16:db:2a:a6:01:d1:fa:
54:16:bc:0b:62:8b:52:bc:ec:fa:88:24:e8:62:d5:
9b:bc:d1:c2:07:01:c6:f2:92:41:3d:08:7c:f9:de:
3d:2e:8a:76:e6:aa:f2:56:2d:1b:2e:f2:4b:13:6e:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:01:D7:75:05:C5:52:1F:BB:AA:99:71:4B:1D:86:B9:BE:EA:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42CA066357C11F1AD15F719CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.192.0/18
156.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
38:d3:c4:e0:24:1d:bd:ad:39:55:8f:8f:44:0f:2e:b4:53:8f:
91:63:d3:99:cb:bf:d8:0d:48:33:4d:4d:02:89:38:3a:a2:b2:
4b:7d:83:91:66:bd:aa:5d:9c:3e:2c:b9:6b:8e:75:09:75:5a:
eb:5a:34:43:12:54:ac:fc:49:36:81:65:42:8e:5a:ff:e7:84:
71:23:10:54:8c:25:b9:1d:a0:ad:47:8f:ae:35:bd:a9:4d:d6:
78:f2:d0:c5:94:dd:42:5d:75:7d:28:1d:f9:31:be:5b:67:3f:
07:37:c4:75:88:f4:29:54:ca:98:d5:40:32:f0:46:31:31:89:
de:22:73:fa:68:3f:92:3e:50:cd:5f:1c:d6:62:a3:44:be:b1:
df:ad:85:ad:11:7a:2b:cd:fa:d9:73:69:1f:04:92:97:0e:4f:
4b:e6:dd:ca:06:74:67:28:a8:99:1a:46:31:56:da:18:08:8b:
b0:00:d6:ef:fd:05:4e:40:2a:5d:20:39:3f:37:b4:ac:7a:e7:
4c:3f:a5:8b:c1:c3:21:22:f3:11:ef:89:9c:79:3e:37:50:f5:
09:81:8f:8f:1d:19:90:0f:15:b7:b3:dd:57:36:b4:fe:56:5e:
2b:39:1c:a1:31:3e:e5:81:2f:a2:bf:67:0a:79:39:02:71:e0:
d0:a4:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:33 2026 by rpki-client