Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9FFD6C030A611F19B7C09A2DAE4EC9C.roa
File: E9FFD6C030A611F19B7C09A2DAE4EC9C.roa (raw, json)
Hash identifier: SeekpCdCBX+/kjc1MCYzW9Ko/1geav7MmslW5XAtlP0=
Subject key identifier: 16:05:14:4A:90:2A:72:84:22:CD:EE:4A:D0:92:29:1C:9D:67:08:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9FFD6C030A611F19B7C09A2DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 04:21:29 +0000
ROA not before: Sun 05 Apr 2026 04:21:23 +0000
ROA not after: Fri 15 May 2026 04:21:23 +0000
asID: 214413
IP address blocks: 156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109023 (0x1a9df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 04:21:23 2026 GMT
Not After : May 15 04:21:23 2026 GMT
Subject: CN=69d1e349-ae88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:89:50:b3:ed:01:23:80:36:30:08:cb:24:
fa:18:84:4c:fe:24:e7:4a:eb:7e:67:aa:9a:45:14:
1b:00:68:fb:13:90:4f:08:7c:24:e8:4e:58:2e:a9:
eb:73:00:9c:95:e2:2c:74:b3:03:37:7a:3b:1f:15:
52:38:c9:a9:70:25:7a:68:8e:b6:24:de:99:6f:8a:
fa:0e:13:c4:e4:e9:d5:aa:83:50:56:47:34:98:c5:
1a:3a:d6:70:be:29:6d:a3:c2:ae:05:a4:93:b7:eb:
a5:42:52:0c:d5:4b:45:8d:3e:bb:83:73:72:c6:39:
46:f5:ac:3f:b2:65:f4:30:6f:85:12:12:18:2b:64:
57:29:81:a2:8a:48:5e:f5:ec:e9:4a:5e:e6:f9:a1:
c0:0d:1a:e1:85:a2:de:0c:86:dc:48:67:7e:2d:b8:
cb:b5:2c:0f:d0:7c:3c:e9:b0:3f:59:b9:f2:9c:cb:
e9:06:b5:50:66:1d:39:e6:f4:84:8a:ff:cd:a5:2d:
f5:51:7b:36:ef:fd:79:a8:dd:0e:61:10:68:77:08:
7b:10:c3:26:be:e6:11:83:40:54:f1:a5:44:94:f1:
6f:92:9e:fd:6f:95:03:ef:75:e1:6b:54:4c:ea:34:
ba:1d:a9:6a:8c:dd:f4:70:8a:a6:6c:9a:e6:0f:43:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:05:14:4A:90:2A:72:84:22:CD:EE:4A:D0:92:29:1C:9D:67:08:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9FFD6C030A611F19B7C09A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
39:eb:b5:53:f4:f8:e3:57:99:cc:1d:1c:1f:8a:93:a1:d3:f6:
69:4e:0d:93:1a:34:97:bb:b8:de:14:07:98:c5:5d:3b:f5:35:
80:42:22:0a:b7:df:87:8c:4e:90:ab:25:7b:d2:cb:28:b8:e3:
cb:42:fb:45:ae:d4:fb:d7:c8:f9:5a:53:ab:64:4d:e4:1c:6c:
c2:dc:73:7c:ee:4e:35:34:f4:84:0e:6d:d8:3a:27:5c:65:27:
9f:91:92:c7:d8:ae:70:11:05:71:e9:36:eb:6b:d3:8a:1d:fb:
9e:cb:df:a0:4c:41:b0:e4:c5:50:f8:e7:d6:af:9f:1e:5f:24:
e7:00:7a:35:17:37:4f:c7:60:87:5b:a7:e5:94:35:4b:67:6b:
10:8a:ed:9c:0f:19:74:1e:62:b5:fe:23:ca:18:7f:b7:20:3d:
ad:4d:86:73:c6:a3:4d:3c:72:41:4b:e9:ad:79:0f:d6:c0:3f:
6b:45:d5:81:2a:73:61:b2:2b:95:3c:0f:2a:6f:3f:91:f8:33:
1a:39:e6:06:dd:9d:fc:82:1f:f7:5d:72:ec:6a:16:8e:65:1f:
c0:db:c2:01:ee:6f:36:4e:d2:11:a1:0b:11:59:f7:9f:4e:b5:
99:bb:43:47:75:7f:b1:1e:c2:13:27:10:e9:42:d9:ba:21:b8:
f4:32:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:34 2026 by rpki-client