Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A3969A22E8B11F185AE6BEBDAE4EC9C.roa
File: 4A3969A22E8B11F185AE6BEBDAE4EC9C.roa (raw, json)
Hash identifier: gxxFFfbJgtrc+J6cEHCgOa36pN6MTmFGhN4K7mE3Pv0=
Subject key identifier: 2B:89:B5:4B:DE:87:8F:D8:39:DB:98:24:C4:0B:6B:8A:04:C6:38:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A939
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A3969A22E8B11F185AE6BEBDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 11:58:41 +0000
ROA not before: Thu 02 Apr 2026 11:58:36 +0000
ROA not after: Sat 09 May 2026 11:58:36 +0000
asID: 48031
IP address blocks: 156.238.38.0/24 maxlen: 24
156.238.39.0/24 maxlen: 24
156.247.19.0/24 maxlen: 24
156.254.105.0/24 maxlen: 24
156.254.106.0/24 maxlen: 24
156.254.107.0/24 maxlen: 24
156.254.108.0/24 maxlen: 24
156.254.109.0/24 maxlen: 24
156.254.110.0/24 maxlen: 24
156.254.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108857 (0x1a939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 11:58:36 2026 GMT
Not After : May 9 11:58:36 2026 GMT
Subject: CN=69ce59f1-d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:88:9b:be:48:1e:ca:b7:7e:2b:44:57:a8:
49:87:0f:44:72:a5:d3:a9:87:e6:97:ab:9a:49:5a:
ce:de:9b:5f:9d:81:c0:02:f2:98:d7:ab:77:9b:70:
d5:cc:40:af:bf:5c:ba:b4:f2:c9:48:7d:cd:55:da:
6b:57:28:74:7d:86:e0:92:fc:7e:fa:ba:cc:82:48:
b9:c3:73:bf:26:f9:e3:50:0f:8a:8e:9d:8d:44:d2:
be:d6:10:44:b1:d1:33:d2:c6:77:d3:1b:2e:a2:83:
e4:12:1b:92:00:51:a1:83:d9:3c:4d:b7:6e:f8:ec:
46:00:04:93:a6:6b:58:b2:fb:8d:6e:7a:dc:9e:fe:
dc:52:b2:65:87:bb:be:a4:80:ee:fa:b4:83:b8:91:
ca:42:25:15:c5:a1:7d:b3:f0:85:a0:5a:ed:9b:d9:
33:67:9f:07:f4:90:1a:4d:25:b6:13:4d:41:73:82:
64:54:23:56:18:4a:1d:2c:9f:1d:e2:8f:34:5a:41:
08:2c:fa:5a:92:7e:03:7f:36:ca:2a:72:4e:dd:33:
54:68:16:78:75:3b:ef:44:e8:c5:cb:4c:56:c6:76:
52:b3:dd:b9:f8:17:79:a3:fd:af:3e:cc:fb:e8:20:
b7:d3:58:29:40:3c:37:5c:cd:c4:9f:07:d4:38:44:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:B5:4B:DE:87:8F:D8:39:DB:98:24:C4:0B:6B:8A:04:C6:38:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A3969A22E8B11F185AE6BEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.38.0/23
156.247.19.0/24
156.254.105.0-156.254.111.255
Signature Algorithm: sha256WithRSAEncryption
2b:e9:4e:6d:7c:cd:69:ec:97:9a:a2:5f:08:87:9f:8d:41:5a:
57:2d:8a:11:49:5a:71:d0:d4:22:33:e4:0e:9a:08:37:8d:57:
e6:d8:e3:a8:ac:89:bc:9b:49:b5:ca:f4:a7:f3:fc:07:e3:ba:
ea:4b:6c:76:d8:9a:2b:d0:1f:ad:44:30:d8:2b:d5:93:b5:80:
94:33:fd:7e:28:bf:b9:d4:c8:8a:39:de:d2:66:ad:9a:5d:98:
9c:42:06:93:14:e6:0e:dc:3f:85:a6:07:f4:b3:8b:fb:80:1c:
16:ad:d3:b1:7e:3b:d5:57:e1:f8:8d:56:f8:d2:70:b0:45:af:
84:71:b9:f7:86:d5:f1:ef:bd:83:2d:03:77:a5:18:1d:7c:96:
19:b6:7f:5d:75:25:6f:39:e1:5b:25:2a:f5:b5:32:ea:a3:dd:
c6:9c:cf:89:ef:76:38:2e:eb:26:2a:8e:bb:22:bd:52:20:71:
34:ca:cc:20:43:c5:80:6c:c6:b0:9e:b3:ce:67:0a:d2:09:23:
f0:a8:26:ca:05:eb:e9:2e:7b:ce:d3:c0:61:3c:97:a1:ec:2e:
5e:5d:64:2c:2b:fd:7a:ee:17:77:2c:09:93:1c:0a:d1:9d:5a:
9c:f1:f1:0d:eb:07:68:ff:bd:c9:c5:d3:f9:ed:bd:d1:79:5f:
13:38:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:43:13 2026 by rpki-client