Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A462F14119111F19E13FE84DAE4EC9C.roa
File: 4A462F14119111F19E13FE84DAE4EC9C.roa (raw, json)
Hash identifier: e4RM71NiZANGpTB1p6ntRAkEYC4hlh/Ua8PvI3bPv9M=
Subject key identifier: B4:5B:85:05:28:61:0F:1F:E2:92:9E:FE:45:1E:23:C8:60:DB:D5:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A03F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A462F14119111F19E13FE84DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 14:58:34 +0000
ROA not before: Tue 24 Feb 2026 14:58:29 +0000
ROA not after: Tue 17 Mar 2026 14:58:29 +0000
asID: 401783
IP address blocks: 156.230.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106559 (0x1a03f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 14:58:29 2026 GMT
Not After : Mar 17 14:58:29 2026 GMT
Subject: CN=699dbc9a-503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:39:8e:0d:c1:2b:2c:d5:08:e6:24:50:c2:
43:f4:66:19:be:51:b1:ec:29:22:2b:71:45:2a:44:
27:52:fd:f4:85:02:25:e4:e7:64:1b:f0:69:8a:b5:
e7:5f:a9:e0:d1:5b:82:58:84:2b:16:be:f9:ab:7a:
b8:58:79:2e:6b:bc:17:b1:65:9a:53:f7:54:38:f6:
2e:be:dc:a2:3c:10:85:a8:37:46:f0:19:92:b9:e3:
c9:65:c7:64:00:b9:39:8d:aa:96:9e:6e:73:4a:40:
45:5b:18:ac:2f:f5:7f:a3:27:06:f8:c2:33:81:ae:
1a:ea:dc:48:ac:4c:e1:6a:d7:67:07:67:6a:ab:1c:
ff:1b:90:54:3f:8a:a6:d4:52:47:c1:fd:77:58:69:
dd:e5:08:93:ac:ea:0d:73:ca:48:4f:41:6a:62:bc:
fc:a2:15:e6:42:ac:2c:ef:51:96:de:60:8a:3d:03:
10:8c:70:3d:d6:7a:c3:f4:b3:21:dc:04:81:43:d2:
ca:99:e0:6c:5f:17:8b:5b:e6:d4:af:60:a8:cd:3e:
1f:8c:27:8a:f6:6b:7d:e2:26:dc:b5:df:18:1a:da:
51:e5:8a:43:ff:fb:bf:bd:93:1f:12:4e:88:af:ad:
93:4c:ab:83:74:36:58:f8:82:77:dc:14:d4:06:75:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:85:05:28:61:0F:1F:E2:92:9E:FE:45:1E:23:C8:60:DB:D5:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A462F14119111F19E13FE84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.160.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c0:d7:ed:9d:a6:71:e0:90:2f:13:70:74:40:54:53:76:9a:
31:c6:65:48:16:97:43:ab:12:3f:63:ff:b1:14:78:77:35:ca:
a7:35:cf:6e:cf:f3:10:d8:f9:d7:35:08:5b:1d:a8:8a:c3:3a:
08:92:ae:65:f0:59:1e:8c:e9:85:9a:5c:18:6c:84:b0:d3:00:
d7:40:f8:15:45:72:24:59:9f:27:75:b2:16:1e:84:1a:38:bc:
85:1f:58:a0:06:3d:23:3a:d2:c7:62:43:5c:84:df:10:35:fc:
93:04:58:e6:17:b7:f1:d4:67:55:6c:72:73:ea:27:85:ad:3f:
48:a0:0b:01:a4:62:33:a2:d3:9c:13:4a:3d:32:96:b9:24:71:
25:95:01:a8:32:46:47:8a:51:93:b0:3e:fe:94:be:dc:56:88:
d6:1c:fc:de:74:2b:ee:8f:30:6d:a5:b0:f3:79:6e:10:cd:f2:
74:3e:04:a9:18:c3:42:f5:04:c8:1b:c6:67:20:fb:01:8e:f7:
89:aa:4a:49:51:7b:93:cd:26:fb:f7:5e:3d:cb:8f:ec:32:b8:
67:cc:3b:2b:f5:32:c9:8f:61:f2:55:e3:dd:51:4f:25:9a:c4:
3a:b6:b1:95:11:b3:07:bc:81:da:8b:77:b4:fa:a6:a0:f9:d9:
87:77:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:38 2026 by rpki-client