Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D620290A325611F19237BF7FDAE4EC9C.roa
File: D620290A325611F19237BF7FDAE4EC9C.roa (raw, json)
Hash identifier: y5SR2i5hLnS9velIz0GnGgTEiQzCin3tF9eQp8RVExQ=
Subject key identifier: 13:2A:F8:66:6A:17:35:EA:97:8B:81:50:AE:C0:F7:94:1D:06:34:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AAB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D620290A325611F19237BF7FDAE4EC9C.roa
Signing time: Tue 07 Apr 2026 07:53:17 +0000
ROA not before: Tue 07 Apr 2026 07:53:12 +0000
ROA not after: Sat 09 May 2026 07:53:12 +0000
asID: 44477
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Apr 2026 06:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109237 (0x1aab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 07:53:12 2026 GMT
Not After : May 9 07:53:12 2026 GMT
Subject: CN=69d4b7ed-94cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:21:1d:c9:fc:8d:f7:62:22:94:32:93:13:
c3:52:0a:11:3c:54:cb:1f:1f:bd:cd:9f:2f:35:cc:
23:c1:65:d6:ba:68:42:e6:83:ed:66:35:8e:2e:77:
b5:b6:56:5d:65:31:61:25:03:8b:f8:01:1d:0b:b5:
c8:16:b9:a1:ce:4e:1c:45:80:45:b5:24:14:3a:22:
71:7f:c6:99:83:17:96:4a:af:7a:38:fb:d2:d2:7c:
a8:8f:a3:8f:2e:ef:58:4e:0d:e3:5b:c8:bb:53:71:
0b:c8:3e:bf:b6:08:90:f2:19:4c:65:b4:af:be:26:
6e:71:83:d1:c0:8a:ee:74:8b:a6:cf:60:7a:27:11:
38:44:a4:5f:8c:0a:cf:b5:1c:d0:31:b0:30:30:04:
db:5c:84:2e:0c:7f:88:17:aa:d5:e3:59:78:b3:b0:
cc:df:47:a5:80:30:2c:c8:12:9c:61:b9:25:d9:2e:
be:59:e5:ab:31:38:b1:79:6a:9e:3a:00:66:91:99:
b6:9f:8c:5b:59:c9:2f:43:92:7f:13:5a:ed:b8:14:
82:41:8a:05:2e:c4:84:be:2b:4c:84:c6:d2:91:7d:
62:50:c7:28:19:d6:fe:e5:c4:26:7c:ee:17:c1:fa:
08:83:04:0d:d5:84:30:4f:6a:b0:db:a5:9a:3e:42:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2A:F8:66:6A:17:35:EA:97:8B:81:50:AE:C0:F7:94:1D:06:34:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D620290A325611F19237BF7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:42:41:d6:af:18:84:b0:b5:27:40:b5:13:41:e5:88:d4:07:
2e:c5:fd:a5:e2:87:37:3a:57:e0:ad:78:3d:0c:ba:f6:53:05:
6b:9c:40:4b:fe:46:b6:aa:6d:31:1f:9c:d1:7f:76:9a:f6:93:
66:69:81:f9:08:4b:55:31:18:3a:ab:8e:97:ee:1b:a6:dc:40:
d5:86:40:68:a0:aa:bc:fd:c3:d4:b4:74:36:aa:33:08:1b:9d:
56:57:5b:1a:31:42:d9:e6:9a:72:3b:37:c5:50:22:d6:62:99:
4e:39:58:c4:5a:73:fa:3a:d3:f8:78:65:16:4c:31:1a:19:bf:
61:16:b0:25:3a:bf:81:5a:fc:d3:7a:7a:f1:04:7b:cd:ef:49:
e0:bd:39:dc:0b:04:55:15:74:4a:14:46:0d:96:30:85:2d:4a:
8e:46:0c:48:92:d0:6a:6f:d9:15:f9:b1:93:2c:da:06:69:07:
f7:00:5b:33:25:75:a1:61:a5:2a:d5:5d:3d:41:a7:7a:43:78:
71:fe:2d:c6:fb:1d:35:6d:c5:ed:04:0a:d1:90:c2:49:d2:30:
b2:5f:dd:fc:89:8e:00:b8:73:26:4e:58:7a:48:c8:9b:e9:84:
3a:0f:3b:fc:72:de:32:d5:fe:40:f0:44:0a:74:53:14:8e:f7:
66:78:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 09:34:40 2026 by rpki-client