Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/119EC67E2E9911F186C347B9DAE4EC9C.roa
File: 119EC67E2E9911F186C347B9DAE4EC9C.roa (raw, json)
Hash identifier: t5iKDrQVnhHMW4yERlBpSWGh5IxF6H/bqQFZfdmfq2k=
Subject key identifier: F3:55:4E:1B:68:4B:29:2C:FD:73:8D:5B:B7:A8:26:4E:34:0F:55:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A953
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/119EC67E2E9911F186C347B9DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 13:37:19 +0000
ROA not before: Thu 02 Apr 2026 13:37:14 +0000
ROA not after: Sun 10 May 2026 13:37:14 +0000
asID: 138915
IP address blocks: 156.244.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108883 (0x1a953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 13:37:14 2026 GMT
Not After : May 10 13:37:14 2026 GMT
Subject: CN=69ce710f-3bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:09:e1:3a:e5:1a:c5:35:61:57:f4:3b:1a:
14:d7:bd:cd:cd:ae:ba:b6:f9:30:71:2d:e8:33:d5:
6d:41:82:e8:02:5e:39:cc:6b:e8:86:ca:e0:e2:d7:
52:6e:20:e0:d4:d0:f9:1f:2e:06:a8:14:6b:97:34:
2a:3b:99:c3:3c:4f:9c:68:39:18:09:61:92:02:18:
03:a5:fa:62:19:34:28:78:1e:e2:66:aa:07:7f:f1:
b7:1e:c5:57:5b:4d:c7:65:17:32:06:52:4a:b2:dd:
d8:1e:9b:fb:e0:a6:f9:9f:f7:67:3d:87:db:8d:03:
cb:ae:74:40:06:21:cf:9a:1a:6b:98:8a:ec:fd:15:
12:5e:7b:0a:f0:d1:3f:78:50:dd:d4:4f:a1:3c:cf:
84:25:08:22:7a:b7:e8:da:9e:ce:f6:9e:32:f0:6c:
43:ca:de:e8:48:c7:07:43:ff:10:7f:8a:ec:3b:69:
f2:54:23:45:cb:d8:c5:76:54:09:5d:86:99:0e:4a:
6c:68:03:3d:60:91:12:23:52:1a:04:83:4f:d3:26:
22:fd:03:cb:e1:27:41:4d:28:67:6d:9d:19:b2:ac:
eb:5c:c9:26:d9:cf:c5:49:a1:88:7d:39:3e:03:3e:
ef:dd:44:99:59:bf:35:0c:46:04:e6:ed:de:5f:f6:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:4E:1B:68:4B:29:2C:FD:73:8D:5B:B7:A8:26:4E:34:0F:55:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/119EC67E2E9911F186C347B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c0:e3:5e:b0:35:b9:8d:81:5e:d9:55:9a:ee:ca:e4:7c:c7:
91:92:c8:9b:55:24:b7:64:f2:a0:72:27:b4:b9:06:9a:10:cd:
32:45:c1:9e:c9:01:3b:75:22:90:f4:36:81:44:85:54:d2:0b:
aa:1c:1e:a1:9d:ad:00:cb:c0:b2:6b:58:f9:e6:5b:06:2b:a0:
99:2d:08:d4:f6:10:00:e5:b6:c4:22:6f:8d:0a:60:06:35:f0:
ba:db:d4:b4:71:90:73:f9:19:8a:12:09:84:33:c3:c0:69:4d:
73:bf:91:83:74:9b:47:25:52:a2:3b:22:53:7d:9b:d7:40:a7:
5f:1c:82:61:b7:10:e2:53:50:3b:77:67:bb:a4:d2:5a:c5:03:
4e:e5:b9:e1:4f:a4:ae:bb:ac:98:72:18:50:dd:3c:ef:c4:15:
20:2b:00:08:a8:44:8a:74:c2:2d:11:42:08:a1:f8:5c:41:a4:
e5:c0:62:e0:a6:2f:5b:00:cd:83:92:b6:97:0e:ef:bb:64:8b:
3d:13:aa:e2:8c:1d:83:ea:d7:3b:30:a7:d7:08:d3:64:4a:bd:
1b:a0:eb:22:36:0b:f2:e0:5d:24:9d:91:64:e5:4c:f5:d4:e2:
fc:e0:e2:18:b4:d7:37:e8:47:4b:6e:88:fa:5a:fd:09:30:86:
ca:ad:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:45 2026 by rpki-client