Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44BD552412DE11F1AC815489DAE4EC9C.roa
File: 44BD552412DE11F1AC815489DAE4EC9C.roa (raw, json)
Hash identifier: UsgRc9jgNNEVFzeZ18OGd/8z6H7jZJvOg8Klp9pTH1A=
Subject key identifier: C8:12:9E:93:01:79:8C:36:AA:5C:3A:C2:E7:C6:B2:62:D4:AF:12:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A097
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44BD552412DE11F1AC815489DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:42:07 +0000
ROA not before: Thu 26 Feb 2026 06:42:03 +0000
ROA not after: Wed 01 Apr 2026 06:42:03 +0000
asID: 11427
IP address blocks: 156.229.192.0/19 maxlen: 24
156.233.128.0/20 maxlen: 24
156.233.160.0/19 maxlen: 24
156.241.16.0/20 maxlen: 24
156.241.48.0/20 maxlen: 24
156.243.160.0/20 maxlen: 24
156.248.32.0/19 maxlen: 24
156.248.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106647 (0x1a097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 06:42:03 2026 GMT
Not After : Apr 1 06:42:03 2026 GMT
Subject: CN=699feb3f-b700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:88:fa:15:4a:f3:4e:95:a7:bd:87:71:74:
35:88:3d:a2:62:27:a3:f3:ee:b9:47:49:3f:74:e3:
32:ab:ff:f7:c8:9f:08:51:17:30:5c:fb:22:d8:65:
3b:bf:a1:ec:cd:42:a5:c2:18:17:8b:a5:ca:1b:b9:
bc:05:54:dd:8c:f9:d7:c4:3c:c3:63:dd:26:60:b0:
40:f7:ba:c5:c9:41:2b:f0:da:65:64:1d:56:84:c9:
1e:ee:5d:0f:d9:9a:57:a7:60:9b:53:e0:fa:c8:e4:
3a:23:5e:9b:7f:82:4a:a2:3e:c8:9e:87:b7:62:fb:
b8:bf:b3:93:28:06:33:ea:da:7d:b3:99:4b:d2:40:
2a:d9:de:39:10:ce:04:be:f0:38:a0:60:ea:ca:90:
63:50:7c:21:2e:57:f2:01:98:cb:9c:20:0c:26:a4:
c3:62:00:83:0b:57:a3:ee:a9:49:19:8f:63:a1:a0:
b2:9f:fd:a6:76:bd:86:40:28:0f:34:66:ab:9e:5d:
4d:e1:fb:b7:14:6a:ec:39:f5:b3:e4:c4:d4:fc:9a:
4f:9d:7b:8a:c7:e9:bb:d7:e5:a1:c7:9c:ba:58:c6:
12:f6:bd:5e:6a:aa:25:48:00:64:d4:18:20:d9:2c:
29:8c:8b:a4:cc:e9:48:c5:0f:73:07:03:be:66:3c:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:9E:93:01:79:8C:36:AA:5C:3A:C2:E7:C6:B2:62:D4:AF:12:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44BD552412DE11F1AC815489DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.192.0/19
156.233.128.0/20
156.233.160.0/19
156.241.16.0/20
156.241.48.0/20
156.243.160.0/20
156.248.32.0/19
156.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
94:6f:85:d1:30:56:69:de:5a:11:33:b6:e4:8a:ce:61:a0:02:
08:af:5e:a4:40:54:f5:0e:07:8d:c7:4e:f7:71:fc:bc:2c:8c:
26:5f:6c:bd:42:89:63:e9:b4:56:4d:d9:71:c1:a4:2a:99:d7:
21:2a:d5:43:2a:02:fc:1e:0b:bf:7b:c0:7b:f7:61:82:5a:91:
c7:79:13:12:db:1e:26:26:2d:7a:dc:90:7e:1c:75:f7:58:c8:
8a:72:7a:d6:dd:df:29:a2:69:93:3c:c8:17:2b:39:4e:d1:78:
fa:87:10:f2:d1:5a:40:f8:a6:bd:0b:56:3c:84:85:a7:1b:45:
2d:2c:3c:57:47:c5:08:04:f3:0e:df:32:81:5b:1d:d0:16:c0:
11:6f:f8:c8:4a:38:d9:0a:f5:a0:ff:55:62:aa:00:ed:ff:74:
51:47:95:d1:d3:8e:c4:72:0c:58:b1:ce:76:1a:d4:b2:e9:b7:
47:bd:88:d8:ff:35:89:e5:bd:fa:a6:0c:a0:dc:a1:6b:f2:9a:
10:76:1e:ee:a9:bd:05:6e:40:ab:d0:74:5a:51:14:69:24:4f:
a9:b3:a8:7a:dd:87:d5:18:68:d4:3c:fd:8a:4c:09:8e:b3:22:
91:34:c1:77:6c:69:ac:bf:c1:a4:bc:7b:f7:f5:75:bc:d8:98:
ec:88:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:51:29 2026 by rpki-client