Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05D5B5D40B1011F1B8A38F90DAE4EC9C.roa
File: 05D5B5D40B1011F1B8A38F90DAE4EC9C.roa (raw, json)
Hash identifier: 7IeNqAIjcdXqubA66CO0F6vTcHWDU1YYnbKOTk8k3IQ=
Subject key identifier: 19:62:B9:24:FB:DB:EE:B0:07:86:96:0B:16:5C:1D:0E:03:7B:92:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05D5B5D40B1011F1B8A38F90DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 08:18:07 +0000
ROA not before: Mon 16 Feb 2026 08:18:03 +0000
ROA not after: Fri 04 Dec 2026 08:18:03 +0000
asID: 152705
IP address blocks: 156.239.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106018 (0x19e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 08:18:03 2026 GMT
Not After : Dec 4 08:18:03 2026 GMT
Subject: CN=6992d2bf-440a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:75:8e:1e:81:e4:87:53:99:f7:01:b2:94:
fb:01:ff:38:e1:b7:28:1a:96:ee:f2:05:91:8c:ab:
b1:11:c7:e9:c4:c6:5c:1f:f6:85:4e:72:69:c3:ae:
d7:c8:62:36:53:09:6e:89:c0:b1:04:17:01:c9:cf:
b4:b0:fe:96:f7:c4:2c:61:05:81:f9:ce:d7:6d:98:
74:a1:a3:b8:db:c0:16:db:0a:a2:36:47:a6:df:1a:
50:10:95:d9:2d:3f:48:f5:1a:41:1f:13:27:fa:f8:
94:68:87:64:24:d5:fb:e7:b9:44:5c:c8:7a:0a:d4:
23:f3:62:b2:71:ca:ef:36:77:94:dd:41:55:02:2d:
6a:f2:a5:66:76:20:4d:4d:81:6f:25:9c:86:0e:31:
a4:2c:a3:4e:09:5f:58:6a:61:d5:e9:13:fe:75:3d:
b9:8e:95:79:32:88:a6:7e:14:3a:c5:89:a6:5f:64:
ca:cb:21:b6:e3:c5:8d:cb:a2:cc:34:73:03:8c:e0:
fa:c1:b5:ca:dc:bd:39:fb:2f:95:72:be:29:77:c2:
b7:e0:6d:56:0c:1c:63:21:9f:64:0d:07:47:d3:59:
2f:10:e7:15:08:ed:6d:a8:9c:b1:09:ba:18:10:32:
af:a2:e6:bb:a1:47:e0:21:0f:15:d3:8b:6a:9b:d8:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:B9:24:FB:DB:EE:B0:07:86:96:0B:16:5C:1D:0E:03:7B:92:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05D5B5D40B1011F1B8A38F90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:76:bb:2e:5b:d9:49:45:0f:4f:d4:5c:21:5c:f6:4b:9d:7f:
8d:0c:0b:c9:b3:21:03:ca:1c:ca:e7:1c:fb:bd:c2:19:e4:73:
98:1e:f7:ef:6e:41:05:fc:aa:39:3e:a8:dc:0f:47:2b:5c:ea:
85:92:90:53:7b:0c:22:45:08:f0:01:c0:d1:0b:85:7e:cb:ea:
63:06:b8:65:2b:71:97:8c:0f:8c:b2:d4:7e:bf:b2:7e:64:65:
9a:aa:db:27:3f:90:76:2a:3f:01:59:87:60:cb:b8:42:bf:65:
1f:95:92:04:8b:f3:4d:59:08:3f:3e:d4:d8:90:aa:c0:f4:91:
3a:6b:dc:b3:25:e4:7c:9d:06:85:4a:01:6a:ff:3e:56:80:b6:
a4:02:8d:98:ae:d7:7d:95:af:62:8c:ce:b1:c1:3e:df:77:04:
2f:a7:a9:73:0f:1a:f8:61:e5:75:59:5e:26:7e:d7:df:1e:84:
09:ae:1a:0c:bf:8c:7d:18:43:61:77:7e:7e:d6:9b:8e:4f:78:
77:4c:88:99:08:c0:ce:52:2f:1e:ef:7f:ef:89:42:c9:6d:71:
e3:52:c5:63:92:4c:ea:a3:3a:01:2d:db:65:77:61:73:31:61:
c9:90:62:4a:74:57:5f:34:f1:c1:34:35:d9:3f:72:56:52:33:
b9:47:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:38 2026 by rpki-client