Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA50FCFAFCF611F0A26C88EADAE4EC9C.roa
File: EA50FCFAFCF611F0A26C88EADAE4EC9C.roa (raw, json)
Hash identifier: 3HBHXOhJRTr4RDw+Ra/L6jcWcSVDo+yXHcfe9A22cnk=
Subject key identifier: 70:FC:0E:05:67:17:A5:61:3E:DC:B7:F4:60:76:62:B1:1C:1C:50:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA50FCFAFCF611F0A26C88EADAE4EC9C.roa
Signing time: Thu 29 Jan 2026 09:43:07 +0000
ROA not before: Thu 29 Jan 2026 09:43:01 +0000
ROA not after: Tue 05 May 2026 09:43:01 +0000
asID: 21859
IP address blocks: 156.252.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105118 (0x19a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 29 09:43:01 2026 GMT
Not After : May 5 09:43:01 2026 GMT
Subject: CN=697b2bab-6c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:7e:f2:d5:c3:86:ea:5c:df:43:42:c8:fa:
42:a7:33:72:86:06:9a:f6:ca:73:f8:dd:d3:75:05:
4d:6f:2f:89:1c:a4:e1:24:01:c7:fe:e2:2a:41:5a:
01:f2:06:6e:56:b1:6d:15:2a:3d:b7:2b:97:ab:1d:
d0:12:75:04:37:32:25:b8:f1:ad:74:a0:d2:a2:70:
56:da:3e:82:5e:b3:79:27:a9:06:fd:c2:ad:88:67:
9c:76:ee:13:76:33:4e:48:d5:74:6a:98:3f:53:a9:
85:b2:4c:fe:e1:33:a4:21:fc:f1:3e:08:55:fd:3a:
8d:16:58:92:c3:9d:dd:10:a2:37:61:c7:09:a1:9a:
1f:70:07:43:de:ab:ea:b5:1d:e2:e0:2c:f9:15:1a:
a0:58:76:69:07:ce:c3:6b:75:ac:09:2e:cb:62:f9:
2b:e6:73:be:c8:bc:ff:5f:3f:ed:6b:ec:ed:1b:04:
9f:75:55:91:47:f9:2f:88:e9:61:bf:fc:cb:6c:65:
d4:5b:c0:33:1f:cb:55:5c:4d:a4:59:29:f4:a8:80:
bf:85:2c:3d:22:8c:a9:71:62:32:f0:ee:ed:55:26:
40:0c:dc:f5:c8:97:30:96:ef:b1:15:66:4f:fb:8f:
a4:19:80:79:53:ed:cb:30:15:c0:46:92:13:ac:90:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FC:0E:05:67:17:A5:61:3E:DC:B7:F4:60:76:62:B1:1C:1C:50:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA50FCFAFCF611F0A26C88EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.29.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1a:88:1a:f8:5f:f0:ec:97:fd:ef:9f:91:2e:9f:74:3f:26:
c2:f1:07:1b:f1:cc:ec:5f:97:9a:bc:32:33:03:d2:ea:07:29:
6d:d4:64:74:48:c4:60:93:ed:59:26:3b:bd:9c:ba:8d:22:8f:
39:10:67:6f:e0:81:c4:c9:0d:3b:36:85:a1:0f:c7:71:de:91:
a9:96:0e:c0:5a:e8:94:7b:ec:15:99:f8:7b:dc:d3:82:71:35:
c3:a2:1f:8e:f6:19:1d:f2:0a:18:01:0a:2c:b5:05:65:70:20:
47:a5:86:7c:bc:4d:51:68:58:de:b8:95:42:31:99:0f:0b:cf:
33:87:40:88:bc:17:9a:31:4d:68:43:dd:0b:20:c3:f4:a6:3e:
b7:16:ad:cb:06:12:e2:67:a6:fd:96:cc:7b:c6:3b:07:fe:1d:
b5:38:e4:72:12:c3:99:a7:63:28:b9:e4:97:51:a1:27:f6:bc:
6b:dd:0c:92:3a:7a:1c:d3:51:05:2c:9b:98:b2:e9:96:8b:62:
19:a9:10:a2:b4:62:44:f0:af:93:f7:4f:53:33:1d:d6:1c:7b:
9c:cb:d3:fe:c3:82:82:55:bf:99:a3:9f:d1:52:f7:a2:f6:20:
4d:bf:2c:1a:e2:9d:a3:14:3f:06:57:23:f0:15:38:c2:3e:2a:
ff:37:08:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:00 2026 by rpki-client