Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2F710243F1511F1B4B033E0CE1D38B0.roa
File: D2F710243F1511F1B4B033E0CE1D38B0.roa (raw, json)
Hash identifier: IEo8Kc00/JKG9dKmEOwKoKVA4qKcxhX/5UY9r4B0wR8=
Subject key identifier: 0A:8E:02:6A:F2:DE:95:7B:F6:4F:2A:8B:5B:36:AF:B3:1A:A6:DE:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2F710243F1511F1B4B033E0CE1D38B0.roa
Signing time: Thu 23 Apr 2026 13:10:39 +0000
ROA not before: Thu 23 Apr 2026 13:10:35 +0000
ROA not after: Mon 08 Jun 2026 13:10:35 +0000
asID: 32043
IP address blocks: 156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
156.232.48.0/21 maxlen: 24
156.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110265 (0x1aeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 13:10:35 2026 GMT
Not After : Jun 8 13:10:35 2026 GMT
Subject: CN=69ea1a4f-6d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:39:b8:65:5c:83:db:e9:26:b5:c7:58:4e:
63:9d:a3:68:ac:14:73:63:24:6e:1d:66:b4:52:0c:
ef:df:3a:5f:3f:8d:ad:2a:3d:9f:44:9e:96:b7:1c:
44:24:12:ef:f6:e3:58:5d:6c:77:9d:4b:eb:e5:60:
22:89:ad:3b:ca:54:d5:c0:d5:f7:97:da:0d:ef:05:
38:dc:0c:8c:44:b3:39:b6:c7:65:b7:b0:05:d2:d8:
31:a3:78:99:5f:bc:37:e0:9c:4b:70:57:c4:f8:17:
1f:ce:89:cd:86:f6:41:30:a6:d9:0f:53:29:6a:db:
22:c4:b7:25:45:36:44:b8:e9:ca:7d:b1:a6:51:2d:
d6:35:51:1e:30:eb:cc:3e:35:7b:d5:3f:40:c1:af:
ae:5f:d2:35:59:b1:ac:4d:02:55:16:3f:b4:f5:b4:
cd:9a:2e:9e:b7:a5:2e:c3:98:d3:de:d7:17:ed:34:
24:ee:66:82:1e:80:51:bd:60:b5:e4:2d:a0:a0:6e:
ce:0e:b9:36:df:49:b4:78:fa:f1:8e:46:19:9d:3e:
dc:86:c2:63:15:18:e7:ce:1e:c0:3b:ff:25:7f:06:
27:01:1f:c9:cf:01:13:1a:ee:d7:37:34:69:e9:12:
d1:a3:b0:cb:ab:17:e7:49:63:88:13:03:ab:cb:ec:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:02:6A:F2:DE:95:7B:F6:4F:2A:8B:5B:36:AF:B3:1A:A6:DE:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2F710243F1511F1B4B033E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.48.0/21
156.232.48.0/21
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:62:83:7d:bb:62:60:59:a7:d7:90:8d:a5:88:f4:47:2f:8c:
5e:f4:48:67:d7:5e:30:43:84:16:cb:a7:3c:33:f5:76:96:1d:
be:63:9a:ca:54:59:34:44:f2:e2:c5:c7:7a:86:fd:e1:b3:b2:
35:23:8e:af:d7:ff:62:d5:72:cf:a7:dd:07:55:fa:7f:0c:f6:
64:86:d7:f9:20:dd:9b:be:8d:fe:f3:86:55:bb:30:4e:ee:e2:
8e:93:98:b6:a7:9a:0e:44:ae:88:35:5f:2c:9b:b3:c3:89:fb:
9c:c8:fe:0a:70:6f:5a:a2:4d:60:1d:c8:6a:11:f3:44:ad:98:
b0:da:eb:58:d3:9e:85:2f:96:eb:f6:5f:52:35:72:77:7c:46:
82:09:9a:8c:70:38:3d:0c:3d:b1:3f:a3:69:6a:22:42:27:a0:
f8:51:a0:0b:4d:9a:f7:73:bd:e8:09:ea:8d:f8:0b:ac:fd:13:
d9:62:c6:af:f1:cd:04:16:03:57:97:05:03:87:95:7d:19:b2:
66:36:90:e5:1b:9f:b3:02:de:5c:6d:65:29:26:5f:e8:0f:08:
c3:29:d0:e3:e4:97:7e:95:f8:96:d4:a8:ef:cb:87:48:62:a3:
ca:41:18:de:47:ac:d5:28:89:64:d5:b2:ef:d5:b3:f1:55:b6:
9e:9c:4c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:36:25 2026 by rpki-client