Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E688761A18BD11F19B85BB94DAE4EC9C.roa
File: E688761A18BD11F19B85BB94DAE4EC9C.roa (raw, json)
Hash identifier: RKWA3IfYqpaeXIXp+rzTPMAJaEbeW9tHwDlGhE3e44Y=
Subject key identifier: 4A:86:91:B0:8E:27:26:8C:23:67:A6:2A:9D:8A:38:CB:A6:4A:F6:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E688761A18BD11F19B85BB94DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 18:05:32 +0000
ROA not before: Thu 05 Mar 2026 18:05:28 +0000
ROA not after: Wed 22 Apr 2026 18:05:28 +0000
asID: 401701
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107205 (0x1a2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 18:05:28 2026 GMT
Not After : Apr 22 18:05:28 2026 GMT
Subject: CN=69a9c5ec-ab3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:ab:46:df:af:da:87:3c:aa:1c:b4:e8:fb:
55:7a:01:0c:15:db:e0:5b:dd:8e:31:91:6c:bd:25:
32:c2:8a:5d:4d:07:0a:84:bb:a4:fc:bc:94:ce:dd:
c6:5c:7c:27:2f:df:e7:55:5e:51:bd:a6:03:2d:30:
8c:df:d1:c8:1d:c1:55:2d:5b:00:14:21:df:25:94:
71:ac:fd:e2:7e:3e:50:3f:0d:cb:33:2a:c5:84:c4:
41:75:14:b0:bd:a8:3a:35:3c:d3:62:4d:cf:34:8c:
2d:81:c6:a3:de:a2:bc:ad:3e:0a:4b:f1:78:f7:bc:
37:6c:2d:56:ac:a9:a6:d6:7e:05:fb:40:5c:34:c3:
4a:5a:58:96:58:93:02:59:a7:b6:da:5c:b0:b4:0e:
1e:4a:35:e8:c6:44:08:76:31:2f:7f:71:de:98:2f:
69:5a:fe:87:1d:32:90:20:4d:1b:4f:46:92:12:4f:
b7:1b:cd:7d:71:df:df:8c:52:9f:61:bb:1b:23:67:
8e:04:d6:58:22:92:4c:76:7a:9a:13:e1:c6:d7:08:
77:35:e1:a6:97:f1:94:f7:d6:2c:a2:15:97:a9:f7:
69:0f:76:27:66:0d:51:1a:29:cf:66:c3:42:00:28:
53:c5:5a:45:3a:9c:ca:3b:53:96:83:29:70:10:c5:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:91:B0:8E:27:26:8C:23:67:A6:2A:9D:8A:38:CB:A6:4A:F6:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E688761A18BD11F19B85BB94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
31:e1:15:54:16:4f:6a:ae:a3:1e:70:eb:9f:9d:41:21:a8:4c:
b3:9f:a8:fe:93:57:e5:8b:b1:0b:8f:cc:8e:4e:59:c3:17:42:
b9:25:d5:af:5f:a0:df:9f:97:7f:2c:5b:bc:91:0f:0d:0d:21:
fa:1d:ef:f6:58:eb:c8:44:54:65:6c:85:79:f6:a7:29:68:87:
f0:b3:2f:51:43:41:69:92:3a:6d:f7:6d:e3:f0:f3:16:ce:17:
9b:61:8f:71:41:48:0b:48:9f:2f:fe:0c:69:cc:fb:3c:82:60:
f0:9c:d9:6a:0f:1b:99:ed:cb:68:91:75:ad:81:0e:d9:d1:fe:
14:91:ef:a0:83:75:0d:1d:9f:06:e4:2b:34:c1:31:9f:02:bc:
e6:bb:98:41:1b:eb:ea:bb:52:72:30:0a:34:c5:6d:af:3d:8b:
2a:2a:c8:73:29:b7:e5:c6:72:f3:c8:88:84:85:79:ac:2d:ba:
f3:79:00:64:38:d0:7d:4f:a1:e9:1d:bf:7c:0a:fc:6b:34:91:
f4:60:a0:c5:db:26:64:52:4d:71:ce:87:3e:6c:bb:d8:b9:e1:
40:69:18:f5:a6:da:14:92:88:70:5a:52:c4:7d:37:1d:b9:34:
a2:74:78:b1:51:c7:2a:38:f2:e4:07:6c:d3:42:00:11:39:55:
f4:3c:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:18:19 2026 by rpki-client