Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFE09F803A8911F1B8C814F1CE1D38B0.roa
File: CFE09F803A8911F1B8C814F1CE1D38B0.roa (raw, json)
Hash identifier: l9xcH+zB/oZiLvdLWajJBAXAvaP534y9n3zcyQQoGAE=
Subject key identifier: B4:69:36:D3:45:58:08:58:AB:57:D6:7F:41:71:CC:5C:6F:A4:B3:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFE09F803A8911F1B8C814F1CE1D38B0.roa
Signing time: Fri 17 Apr 2026 18:18:20 +0000
ROA not before: Fri 17 Apr 2026 18:18:15 +0000
ROA not after: Sat 16 May 2026 18:18:15 +0000
asID: 150706
IP address blocks: 156.255.2.0/23 maxlen: 24
156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109954 (0x1ad82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 18:18:15 2026 GMT
Not After : May 16 18:18:15 2026 GMT
Subject: CN=69e2796c-9e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:01:96:3a:dc:39:5e:0e:c3:09:12:d8:3d:
96:36:53:f2:7e:ab:13:bd:24:50:11:1a:0f:3f:b1:
c9:bd:c0:4e:e2:c8:c9:d1:77:0b:da:8b:96:62:6f:
5b:29:08:3c:98:76:ec:e7:57:36:64:23:5e:0f:8f:
4a:e8:2b:85:4f:a8:e9:c6:6b:11:63:57:3c:64:39:
cf:c0:0a:ec:8a:51:52:10:09:47:4c:d3:de:8e:ba:
e8:ff:11:cc:1f:55:45:aa:11:c1:95:a3:85:35:31:
a8:0b:9f:be:f7:46:5a:26:c5:7c:21:7e:60:9a:7b:
9f:64:df:64:6f:2e:c4:ab:fb:10:f8:61:ad:df:d9:
8f:88:4f:ae:5a:26:07:b8:47:83:cf:86:e5:82:9f:
3b:ba:77:b2:f9:19:80:23:c7:9e:ff:f7:84:04:02:
2e:f0:49:92:db:26:2d:12:d7:70:de:08:13:9b:83:
40:04:75:5c:bb:02:92:e1:97:25:18:22:01:a7:d4:
30:bf:49:31:4c:b2:31:d7:d6:74:73:ab:8c:f5:1d:
1e:3d:47:15:7a:46:f3:d0:7a:08:14:69:f9:51:3e:
2b:2d:49:22:25:4c:cc:9d:cb:d9:59:bc:7d:1c:7e:
38:c3:82:a8:92:6d:74:18:96:e8:da:25:c1:b0:6d:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:69:36:D3:45:58:08:58:AB:57:D6:7F:41:71:CC:5C:6F:A4:B3:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFE09F803A8911F1B8C814F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
70:ad:e0:b2:7b:e6:ff:30:15:b5:72:09:24:17:9a:b0:e0:ba:
12:b0:25:a9:cd:a8:76:c3:1c:5b:fa:e8:d0:69:92:f2:5d:15:
a6:30:86:00:cb:16:1e:65:b6:27:1a:1c:94:0c:02:24:ed:fb:
46:2e:e3:8e:97:02:0d:a3:7e:a3:34:62:5f:03:c0:8c:2d:8c:
0c:8c:fd:6a:d7:45:dc:12:b9:bf:3b:f0:89:b7:bf:03:aa:58:
ba:9a:52:dd:75:a8:61:d1:5e:65:86:36:bb:79:fd:da:27:25:
84:b7:c8:92:63:5c:23:f9:7d:e5:ba:fb:c4:85:f6:6b:4f:4d:
ba:ee:e2:9d:63:5f:56:e1:3e:79:37:88:55:9b:d8:3f:8c:eb:
91:d2:d7:53:d1:1e:cb:d5:e9:97:2a:9e:a7:89:63:07:cb:e0:
19:a1:f1:30:c2:30:d5:35:55:9b:2c:df:c2:d3:fc:2e:2a:cf:
cf:21:45:8e:dc:0c:19:16:e9:19:ea:3f:a3:7f:21:fc:12:cd:
19:cb:21:ca:76:31:cb:b2:b0:84:f0:56:da:92:81:db:eb:f4:
83:6e:37:4e:6d:b4:fd:77:48:ca:61:0f:a4:88:ed:53:93:76:
2a:81:eb:cf:c8:f9:a0:f2:44:4e:4e:2d:c6:88:9e:7d:9a:53:
10:6e:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:29 2026 by rpki-client