Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FF32F6E340111F197AA89A9CE1D38B0.roa
File: 0FF32F6E340111F197AA89A9CE1D38B0.roa (raw, json)
Hash identifier: u0PYlK2aw10tyOg/bXt05OsGCj4Muj56kWY4r98V+hw=
Subject key identifier: E9:71:9C:7C:A8:58:0E:DB:E7:3F:7F:AE:76:AD:EB:89:B8:82:E9:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FF32F6E340111F197AA89A9CE1D38B0.roa
Signing time: Thu 09 Apr 2026 10:44:19 +0000
ROA not before: Thu 09 Apr 2026 10:44:15 +0000
ROA not after: Sat 23 May 2026 10:44:15 +0000
asID: 214025
IP address blocks: 156.229.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109380 (0x1ab44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 10:44:15 2026 GMT
Not After : May 23 10:44:15 2026 GMT
Subject: CN=69d78303-b17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:d0:48:f0:4f:9c:40:ee:25:93:77:1d:5e:
a2:61:06:6b:ed:96:3e:ec:7c:7e:5c:85:59:f5:15:
e4:28:48:ac:33:19:b7:dc:bd:f7:4a:32:cc:2f:d1:
32:1b:7d:e8:3d:e9:10:3e:5d:fb:68:38:56:a2:f1:
e7:50:5d:c7:10:4b:f6:11:5a:97:5b:6b:e4:57:87:
c7:cb:b5:bd:1a:a6:b2:d3:e9:60:f7:a8:57:67:64:
92:95:8a:cd:34:88:06:55:72:1b:8e:c1:2c:58:bf:
f0:58:a4:b4:96:27:1a:73:7f:4f:ce:05:21:7a:7c:
f6:27:27:bb:c0:c0:7a:07:48:96:3b:f5:9d:d3:54:
13:3f:35:03:e1:e2:fa:4b:1e:e6:49:4c:b8:8f:56:
ba:91:94:e4:eb:b4:90:f5:9a:cd:35:58:f0:a1:de:
52:82:eb:86:4c:97:5e:ec:65:7d:ba:5b:ef:75:04:
cb:78:c0:ea:b9:35:6f:05:c5:2d:86:28:70:c2:b3:
05:50:f2:36:15:56:c4:7f:68:b6:75:fe:12:f7:38:
e6:35:90:a1:cf:c4:2b:2e:ea:70:5b:d2:c0:cb:a4:
8c:0b:25:51:4a:3c:7e:3d:89:a8:80:e1:dc:03:74:
6a:b8:58:34:e9:fa:c4:ff:c2:b9:31:28:c4:cd:e0:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:9C:7C:A8:58:0E:DB:E7:3F:7F:AE:76:AD:EB:89:B8:82:E9:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FF32F6E340111F197AA89A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:44:71:02:fd:0f:40:ba:7b:5a:65:a3:ea:54:39:f8:e6:f5:
2c:39:fe:39:46:84:ae:7e:29:76:c2:bf:0c:af:9d:85:89:a8:
9e:34:97:d3:e2:58:a8:7c:b4:e0:fc:c9:e4:fd:7a:57:d8:50:
27:db:04:11:ac:ca:47:f8:e4:b7:26:0e:50:bd:66:b1:ea:53:
00:5c:c4:34:3b:0b:70:65:a0:85:0d:7d:9c:38:ca:64:a1:17:
de:99:58:7a:ff:04:c5:42:f2:5b:b0:ef:35:d0:b5:e0:c9:f7:
ca:28:c8:a4:ee:4e:6c:a7:98:23:e8:b9:b3:48:88:e3:c1:bf:
4e:e5:7d:ae:42:f7:b0:e8:5f:8e:3d:75:c3:a1:e6:af:1a:9b:
07:14:ec:40:a3:eb:d6:a4:ce:1c:e0:ea:c1:63:7a:95:b0:c8:
9c:f4:88:a9:b7:09:2d:a5:b3:6b:eb:eb:8c:82:bf:c5:13:13:
fa:e4:2c:ef:ac:39:3f:7e:99:89:23:2c:53:48:cc:13:a5:62:
fb:2a:49:1b:de:54:31:d8:d0:af:b4:d8:99:e4:7a:56:cf:49:
38:76:bc:71:1a:48:ad:e3:05:d3:0a:39:a7:31:5e:59:83:57:
e1:45:6b:d6:f9:12:58:74:9c:3f:81:8a:28:44:cd:24:85:45:
64:80:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:00 2026 by rpki-client