Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38AB95F634AE11F1B99F2AACCE1D38B0.roa
File: 38AB95F634AE11F1B99F2AACCE1D38B0.roa (raw, json)
Hash identifier: DCwm24ZMLskzkELZPhWfBSsxXAsfo+MdSwdJJO3Jpxk=
Subject key identifier: 1B:EC:0F:36:09:28:DC:5E:A0:F9:F7:5D:63:A1:FE:9C:93:CD:85:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38AB95F634AE11F1B99F2AACCE1D38B0.roa
Signing time: Fri 10 Apr 2026 07:23:51 +0000
ROA not before: Fri 10 Apr 2026 07:23:46 +0000
ROA not after: Sun 17 May 2026 07:23:46 +0000
asID: 139613
IP address blocks: 156.229.128.0/19 maxlen: 24
156.239.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109468 (0x1ab9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 07:23:46 2026 GMT
Not After : May 17 07:23:46 2026 GMT
Subject: CN=69d8a587-bc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:03:1a:75:4c:23:68:6a:48:01:54:d6:c9:37:
a8:9b:98:af:db:4c:a3:75:b1:cc:c9:65:7d:30:b6:
3d:6d:7e:42:ff:0f:9b:4f:4e:65:51:f0:23:0f:1f:
72:cd:57:75:97:97:cb:72:5a:f4:20:59:2c:3c:8d:
79:23:64:d9:fe:cd:f8:a5:17:21:64:2d:e2:f9:a6:
e7:6e:3d:08:8a:96:d8:a9:82:80:9f:aa:42:b2:14:
43:01:f5:2c:db:e7:be:5c:67:50:0a:a8:50:c0:96:
65:23:ed:f8:68:6e:26:85:4f:79:42:f8:23:c7:fc:
d5:02:0c:a2:d4:d9:b2:98:14:1c:75:d1:c9:49:57:
bc:5f:63:80:2d:75:43:f3:cd:6a:22:7e:ed:db:2e:
97:50:94:ab:bd:af:0c:41:48:af:c8:31:4b:6a:bd:
3c:d3:39:76:b5:3b:a6:15:cf:22:a0:1c:e7:a7:8b:
c4:08:3e:dc:1e:b1:d1:1f:6e:28:6e:73:84:10:0e:
d2:70:33:54:0c:f8:48:a8:a0:08:b8:13:8e:b0:3a:
83:3e:37:ed:38:7c:cc:07:2c:55:a7:29:3b:b8:84:
9a:27:b2:b8:16:83:b2:13:b7:83:63:b4:c3:5e:c9:
ba:38:09:02:05:a2:ef:4d:97:01:ed:5b:a3:b7:7a:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:0F:36:09:28:DC:5E:A0:F9:F7:5D:63:A1:FE:9C:93:CD:85:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38AB95F634AE11F1B99F2AACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
156.239.160.0/19
Signature Algorithm: sha256WithRSAEncryption
68:d5:41:db:67:3c:55:50:5f:f8:04:6f:85:a5:72:08:40:0f:
a0:61:6a:a5:51:b7:06:fb:bc:42:f6:1e:d0:4e:b3:5e:e2:74:
2e:c8:52:75:47:9e:f3:14:2d:e1:6b:1d:36:d2:fd:c0:fc:ba:
0f:0f:c2:95:81:5d:69:5a:c7:00:5c:07:f8:61:bc:0a:1e:30:
bf:3b:09:e3:74:c0:d8:e0:62:84:03:f3:7e:b0:76:78:90:00:
40:0a:e2:9d:6a:9b:f5:44:b8:eb:6d:2b:ca:a0:80:1e:9c:09:
b7:b0:38:74:af:5f:27:78:11:ab:dc:dc:79:68:8e:97:1f:04:
c7:5a:ae:ae:e2:8b:29:c8:a9:c3:e8:8d:64:cf:5d:6c:2a:e6:
3a:0a:c0:8b:7c:19:b9:da:49:2e:d0:5b:71:42:9e:fa:90:26:
88:06:b5:de:72:3e:dc:dd:e7:54:e2:ce:25:82:d5:9b:e7:05:
22:24:89:d8:d1:8b:98:22:b2:7c:cf:1a:ba:ec:42:1b:a7:72:
2c:a0:8e:73:32:ce:58:85:1c:37:7b:fc:0c:29:93:a5:95:93:
f6:ee:da:e0:4f:fd:d1:6f:93:d8:b6:eb:13:76:69:67:8b:f8:
f0:19:ba:1b:9a:ef:85:85:d1:af:da:c3:11:e6:b2:27:dd:8a:
1a:e3:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:08 2026 by rpki-client