Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF5244142AE311F1B0A6F9D7DAE4EC9C.roa
File: EF5244142AE311F1B0A6F9D7DAE4EC9C.roa (raw, json)
Hash identifier: bwzhUq9Dv5P0ninBwPBlLvR1FkbB59T9Vwvdys/DxzI=
Subject key identifier: 63:7A:E4:04:5B:D3:8F:5B:41:D8:A6:4A:0F:F0:2E:C3:0E:D1:37:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A870
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF5244142AE311F1B0A6F9D7DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:23:09 +0000
ROA not before: Sat 28 Mar 2026 20:23:04 +0000
ROA not after: Fri 22 May 2026 20:23:04 +0000
asID: 8796
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108656 (0x1a870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 20:23:04 2026 GMT
Not After : May 22 20:23:04 2026 GMT
Subject: CN=69c838ad-3d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:f6:a4:63:54:55:34:dc:8e:f3:a7:f6:44:
81:8c:fd:00:06:06:5a:04:fe:ce:04:8f:33:ff:de:
db:d1:9c:ff:cf:c9:88:3b:85:68:d1:54:59:71:48:
33:97:3e:92:49:d4:f4:5f:e2:35:90:be:8c:33:a0:
ea:00:7b:68:a0:69:e8:37:73:2a:a7:06:75:d2:fe:
77:d9:35:fb:17:b0:7c:90:89:b5:1c:e6:00:98:97:
5d:13:77:db:7a:60:2a:e9:12:24:15:05:21:89:e1:
7f:12:49:2f:b9:db:e1:91:91:4f:46:d2:8d:a1:8e:
9c:10:7c:27:f9:b7:19:fc:c2:77:6f:70:a9:5b:51:
3f:ed:fa:b6:81:8e:b2:dc:18:75:0d:b5:3d:29:05:
ee:89:03:01:bf:94:2e:79:ab:a2:ac:f2:92:95:84:
51:d2:92:d1:92:99:f0:a8:93:69:a3:23:06:16:01:
96:15:68:f4:4d:b5:04:b5:f4:84:6f:f4:f3:0c:17:
81:53:01:04:6b:de:72:8f:68:42:0e:35:de:21:68:
d4:58:c0:23:ee:da:b7:1b:ad:0a:8c:45:19:18:0a:
b2:3e:31:6e:ef:ac:71:2c:7f:a4:9f:31:ce:f1:6b:
b1:2c:2b:5a:57:82:9e:f9:32:de:b1:19:65:b3:f4:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:E4:04:5B:D3:8F:5B:41:D8:A6:4A:0F:F0:2E:C3:0E:D1:37:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF5244142AE311F1B0A6F9D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:a6:b1:bb:6d:80:d9:f7:00:f9:b9:6b:dd:4c:bc:f3:36:60:
7a:f1:8d:0c:7b:d1:f0:b9:fb:c3:cd:7d:04:39:96:7e:29:42:
ce:fc:7d:e8:8c:32:16:5c:8c:a0:ba:fc:38:92:69:97:46:48:
c2:26:e8:e8:61:39:92:8e:41:af:a2:52:98:b4:c4:f5:4f:1e:
45:d7:6b:81:ac:2c:fc:83:8e:7d:9f:8d:6e:92:0f:1b:dc:fd:
d4:d5:2e:e6:6b:eb:63:81:65:f3:90:6f:d0:97:c2:1f:d1:0f:
f3:67:4c:ad:f2:a6:21:41:58:0a:8f:68:91:6a:78:b4:2f:66:
24:37:35:5c:bd:d8:cd:8c:70:a0:69:91:08:3a:13:48:3f:e5:
b3:dd:6b:01:ad:94:c1:60:de:9a:f0:34:17:43:36:a3:e8:e3:
b2:6a:fe:24:dd:57:8e:1f:82:2f:fe:51:20:cc:fe:b5:88:e5:
c5:33:7c:97:26:bd:7c:b8:eb:23:8f:a6:ba:35:ba:e1:1f:b2:
a9:10:8d:7a:0b:a3:39:be:3b:74:dc:b9:db:cd:e2:c5:d0:9b:
67:93:53:18:2a:4c:6c:5b:12:d6:2f:7c:26:44:dd:26:5c:23:
12:a5:43:f5:07:cc:db:2e:cf:64:be:40:41:a9:9f:78:e6:b5:
f1:d1:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:04 2026 by rpki-client