Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0804935230D611F1810EA8C1DAE4EC9C.roa
File: 0804935230D611F1810EA8C1DAE4EC9C.roa (raw, json)
Hash identifier: AGaHc5aR2WWmrSdGlql88q60CXgbtk9mcH/eb+UAlNk=
Subject key identifier: 7F:ED:72:C1:C4:07:66:41:77:2D:15:62:01:BC:36:B8:00:CB:0A:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0804935230D611F1810EA8C1DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 09:58:44 +0000
ROA not before: Sun 05 Apr 2026 09:58:38 +0000
ROA not after: Wed 04 Apr 2029 09:58:38 +0000
asID: 17561
IP address blocks: 156.225.70.0/24 maxlen: 24
156.225.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109078 (0x1aa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 09:58:38 2026 GMT
Not After : Apr 4 09:58:38 2029 GMT
Subject: CN=69d23254-7c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:ca:bd:ce:b9:ff:fe:13:5b:e5:fc:a2:4c:
8f:f2:70:7c:4b:7f:5c:93:e3:10:c4:53:0d:06:2c:
dd:0c:8f:5f:de:f4:1c:79:fc:c7:6f:90:d1:63:6a:
be:31:4d:16:0a:f1:24:42:3a:42:95:e2:68:32:aa:
09:41:23:47:d3:69:f4:c6:90:38:db:ff:a2:44:d5:
d7:c9:9b:1a:de:2a:be:9c:7c:d4:8e:62:9e:b8:b0:
4d:4f:24:79:30:16:20:5b:25:85:c7:b1:b8:6d:6f:
31:05:9e:e6:c5:63:57:49:30:eb:3f:b8:5a:50:59:
00:bc:0e:f5:f8:54:2d:20:27:56:dc:aa:69:64:52:
76:dc:ab:10:72:51:be:eb:3b:9f:79:30:8a:03:b4:
a2:1f:59:9f:12:97:b4:51:0a:42:bb:73:5b:ac:bd:
40:ff:1e:e6:7b:a3:c6:49:90:e5:8e:b6:ab:ac:66:
c1:1a:af:0a:72:49:ce:3e:12:ac:4f:64:1a:83:ba:
fd:5e:bc:76:fc:40:c3:65:02:9e:f8:d0:0c:ed:5a:
23:9b:5e:8d:38:7b:ad:a2:3c:91:a6:e9:e8:c9:fe:
a7:1d:22:f8:f4:26:58:20:3f:a4:84:67:fa:5e:4f:
7f:24:a8:2f:ec:e8:03:4e:01:80:56:7c:11:fe:72:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:72:C1:C4:07:66:41:77:2D:15:62:01:BC:36:B8:00:CB:0A:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0804935230D611F1810EA8C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
25:2c:da:37:fb:62:b5:5d:f2:67:f6:a6:52:b3:a2:56:2b:5d:
c3:5d:2a:f5:09:30:1e:b2:57:d5:22:6d:b6:ad:5e:38:6d:21:
db:87:f3:4f:c7:21:d6:96:1f:22:cb:4c:94:b3:d2:ad:3a:c1:
8c:16:5f:10:b4:fc:cc:b8:7a:51:26:90:e0:67:4e:91:d0:b2:
96:f1:ec:fd:dc:c5:28:8b:4d:7c:c7:75:ba:17:ee:ab:ab:9f:
40:cf:f6:e1:43:78:80:85:c0:0e:50:c3:91:47:38:12:ba:e1:
3d:6d:c5:df:ec:b1:c1:a5:c5:35:ae:a9:83:be:d1:ea:31:c3:
fc:a1:c7:6e:ef:4f:8c:d8:c8:03:a0:82:5c:45:e6:ac:a6:d2:
11:a9:91:c8:06:ee:1b:17:2f:fb:f7:60:97:d8:ad:ba:a1:79:
31:ed:ab:30:32:24:8b:42:66:49:9f:7f:41:80:2a:d7:ec:a8:
f0:71:6c:b3:bd:30:45:17:18:a0:1b:0d:8b:85:36:bb:da:20:
31:db:6c:44:e4:15:fb:4b:96:72:79:39:f8:24:ff:17:ec:77:
5d:25:2d:b8:30:7b:37:3f:2a:41:ea:a2:60:1e:d2:b3:ee:f8:
e5:c2:db:03:90:62:02:f0:fa:56:ab:ec:40:f2:fb:aa:32:f7:
c2:20:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:07:12 2026 by rpki-client