Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE341DA0F0411F1857138E5DAE4EC9C.roa
File: 4AE341DA0F0411F1857138E5DAE4EC9C.roa (raw, json)
Hash identifier: I5kwoyj2nxexBYVy5i6Cg8npUsChIj6vuqL9Bk5Joko=
Subject key identifier: 5C:D8:E9:9F:47:EB:E2:62:6C:6B:88:8C:6E:B6:94:88:D5:9F:90:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE341DA0F0411F1857138E5DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:04:14 +0000
ROA not before: Sat 21 Feb 2026 09:04:09 +0000
ROA not after: Sat 28 Mar 2026 09:04:09 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106306 (0x19f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:04:09 2026 GMT
Not After : Mar 28 09:04:09 2026 GMT
Subject: CN=6999750d-263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:f7:0d:b5:d5:34:08:0b:52:2a:ba:b1:45:
5e:b8:15:f9:b5:86:76:9a:51:ca:df:07:7d:69:bd:
21:c0:a1:84:2c:de:64:f6:d3:02:63:e3:63:19:c7:
0a:14:95:65:09:44:a3:82:5a:8c:9f:ef:06:26:9c:
36:15:46:87:d5:e4:76:9e:6e:e1:a4:54:be:06:52:
5f:d3:bf:d7:f7:0a:b6:2c:e1:a0:88:69:dd:ec:ed:
5c:68:d4:0f:57:c0:e9:d4:33:4b:4e:3f:d1:b2:41:
99:cb:d6:87:30:bf:03:aa:2b:0a:28:f8:5b:e6:fa:
e9:28:3c:55:61:fa:e3:5c:99:c2:ab:3a:17:ed:09:
4e:98:29:2d:47:9e:0c:08:60:66:ea:b4:9a:56:10:
35:cc:a9:47:7d:5f:ca:ad:b7:5b:0a:55:b2:68:64:
4e:f8:6b:ed:61:50:43:c1:38:05:b7:a9:5b:a4:09:
28:29:be:71:5e:3b:81:9a:80:39:1c:06:33:94:85:
28:9e:f7:9e:05:d5:46:ec:54:58:a2:b2:cc:e3:2a:
5a:25:37:9d:0f:2f:1c:f4:a5:f2:e1:a6:6c:81:01:
19:d8:80:2f:15:fc:0e:ea:c8:27:c3:58:17:0a:48:
f7:e5:0b:3c:e8:a4:ac:e8:3b:01:71:46:53:11:eb:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:E9:9F:47:EB:E2:62:6C:6B:88:8C:6E:B6:94:88:D5:9F:90:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE341DA0F0411F1857138E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
9a:08:dc:e8:93:b9:50:b0:7f:52:01:75:34:8f:cb:ee:d4:56:
7b:76:38:e6:cf:ff:a4:58:44:bf:c2:65:c0:d8:83:bf:23:ed:
4f:aa:f0:70:3a:04:da:cc:31:bf:ca:52:d1:13:0b:6c:00:dd:
8e:b6:f7:d4:b2:2e:b2:b5:57:c5:42:55:bf:59:5e:4f:30:ba:
5a:68:50:b3:4c:a3:47:8a:1e:3a:6a:ea:9b:c5:a1:1d:5d:bb:
99:aa:6c:52:69:ba:2e:d8:65:1a:17:84:c8:1e:3b:c4:ba:51:
6e:a8:fe:57:ac:36:0d:c0:5c:70:c1:8a:ec:23:ea:ce:de:0c:
3b:a9:5d:d8:d6:2a:47:bb:43:50:8d:f3:4c:80:d6:7d:96:51:
de:49:cb:3b:f3:9e:28:70:77:6f:87:95:42:d1:70:2b:4f:16:
4c:b9:bb:ac:44:9d:17:8f:a3:a2:e1:df:c1:b2:c9:84:3a:c1:
00:32:92:45:e8:df:a4:2e:86:af:3b:00:43:56:45:64:24:11:
a7:19:96:95:50:8e:8a:f8:61:17:56:a2:56:a8:9e:ba:eb:38:
9a:9d:f5:e2:ef:80:f7:07:20:c7:30:23:26:b8:f1:53:19:4a:
03:fd:f0:d5:91:6a:76:ab:ce:e0:54:75:fc:08:17:42:c8:7d:
7a:d7:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:24 2026 by rpki-client