Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2473C058019711F1A4B287E0DAE4EC9C.roa
File: 2473C058019711F1A4B287E0DAE4EC9C.roa (raw, json)
Hash identifier: WXs60pNlUl/1DOamtxHkJEoD0gFE59hGEuS2g4qRUqA=
Subject key identifier: F3:26:BD:91:DC:6E:BC:82:89:68:13:A9:96:0D:DE:36:E4:A3:02:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2473C058019711F1A4B287E0DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 07:00:11 +0000
ROA not before: Wed 04 Feb 2026 07:00:03 +0000
ROA not after: Thu 12 Mar 2026 07:00:03 +0000
asID: 138915
IP address blocks: 156.244.18.0/24 maxlen: 24
156.244.19.0/24 maxlen: 24
156.244.20.0/24 maxlen: 24
156.244.21.0/24 maxlen: 24
156.244.22.0/24 maxlen: 24
156.244.25.0/24 maxlen: 24
156.244.26.0/24 maxlen: 24
156.244.27.0/24 maxlen: 24
156.244.28.0/24 maxlen: 24
156.244.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105405 (0x19bbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 4 07:00:03 2026 GMT
Not After : Mar 12 07:00:03 2026 GMT
Subject: CN=6982ee7b-d66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:57:b0:57:00:60:99:f0:69:c0:ba:e5:ab:
26:09:df:31:e8:d6:d3:88:36:e4:da:a1:ac:af:95:
b8:ed:90:af:cf:0c:0f:20:8d:5d:6d:ae:72:7d:8f:
d0:81:49:c1:7e:9d:a0:66:e4:72:d9:d0:92:5a:4a:
ec:c0:19:31:50:ce:40:c9:9d:da:1f:13:a9:64:0e:
53:8e:3f:b9:e2:b2:50:2d:dd:eb:ab:9a:f7:98:b0:
c7:ef:16:47:98:04:8a:ac:c3:25:ad:9d:a4:68:d8:
01:99:fe:33:5f:5a:2b:c8:ec:e9:d6:1b:ea:62:eb:
d5:25:60:99:e1:eb:71:fa:9b:ef:75:65:05:a0:27:
66:95:06:b2:08:d1:f4:33:ee:87:60:14:04:ef:cd:
45:b0:6b:8e:d1:10:e7:75:84:9c:a7:a1:79:8b:3c:
ac:cf:ef:57:b9:9d:14:33:40:c6:56:66:a8:eb:d3:
fd:4f:25:c9:e3:38:5d:09:08:db:1b:c2:d4:cf:c0:
a3:fc:e3:d7:72:5a:0d:01:78:5d:35:9d:57:7f:bd:
a8:d7:83:5d:63:29:2d:4a:e5:d2:6e:19:64:6d:63:
51:b2:d2:20:d4:ec:6e:b9:1f:33:cd:44:d0:24:02:
37:b9:88:d0:67:78:8e:1e:4f:11:e3:ab:ef:00:bf:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:26:BD:91:DC:6E:BC:82:89:68:13:A9:96:0D:DE:36:E4:A3:02:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2473C058019711F1A4B287E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.18.0-156.244.22.255
156.244.25.0-156.244.29.255
Signature Algorithm: sha256WithRSAEncryption
44:52:53:64:68:83:ab:bb:fd:83:f8:07:d7:fe:2b:5f:6f:19:
b4:7f:86:6c:c9:14:ff:8d:ca:c0:ec:65:34:f2:4d:44:ad:26:
8b:a2:ee:b3:81:bc:c4:2e:1a:60:e1:66:72:a1:22:7d:05:20:
14:61:bd:c3:be:9d:54:d4:a5:cf:a0:1c:77:9a:cc:50:38:72:
a4:89:4f:83:d3:91:b3:24:e7:9a:e1:66:32:06:6a:bf:6e:bd:
cf:68:40:08:32:de:5a:23:63:06:34:0e:58:c0:24:08:7a:4c:
ea:2a:27:3c:1c:dc:f4:be:8e:76:32:75:d7:35:bb:00:fe:70:
23:4f:cb:e6:5d:b3:e0:4d:e3:9b:71:d5:8e:f7:38:46:d6:d8:
6a:cf:06:ca:8e:e7:ce:e3:4b:97:e1:e8:79:87:0e:35:86:d7:
95:4f:37:bf:fd:76:51:66:25:22:ca:12:23:e4:38:4c:dc:3a:
08:f2:b0:72:7c:9c:f7:de:94:67:d1:b1:69:df:ca:0a:4d:e6:
d9:1d:c5:a0:00:c3:0c:30:c7:6c:eb:04:ca:45:27:af:0b:e7:
0f:1e:bc:69:d8:5f:a5:d9:9a:4e:8e:18:c7:15:a5:45:c2:2f:
90:68:55:39:d7:44:91:34:d0:cb:8b:5d:7c:77:da:9a:c0:7b:
ea:6f:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:50 2026 by rpki-client