Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B08EA5C2E9411F18853C59FDAE4EC9C.roa
File: 4B08EA5C2E9411F18853C59FDAE4EC9C.roa (raw, json)
Hash identifier: 1QZPlpn9UdGvK/ADstUFT96ycAt9KHIT6u1ltBIIEkw=
Subject key identifier: 7D:20:59:41:00:D9:1B:2A:18:D0:53:2C:DB:C3:EC:F8:8F:E8:F8:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A94B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B08EA5C2E9411F18853C59FDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 13:03:08 +0000
ROA not before: Thu 02 Apr 2026 13:03:03 +0000
ROA not after: Sun 10 May 2026 13:03:03 +0000
asID: 138915
IP address blocks: 156.244.31.0/24 maxlen: 24
156.244.32.0/24 maxlen: 24
156.244.33.0/24 maxlen: 24
156.244.34.0/24 maxlen: 24
156.244.35.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.39.0/24 maxlen: 24
156.244.40.0/24 maxlen: 24
156.244.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108875 (0x1a94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 13:03:03 2026 GMT
Not After : May 10 13:03:03 2026 GMT
Subject: CN=69ce690c-cb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:ca:0b:84:5a:a3:4e:be:8b:9d:67:fa:ba:
5a:e4:f8:65:dd:97:b3:7e:b7:06:e0:43:e8:bf:95:
a3:fd:44:e2:c7:39:b5:45:5a:0a:92:78:cc:de:91:
d3:ca:4c:42:a3:aa:c8:c5:1a:28:3f:25:90:e2:13:
7f:05:d0:c4:1d:c6:fe:79:5d:50:29:54:ed:23:e7:
de:26:fc:05:c0:1a:9f:b8:ac:fe:69:5e:dd:f4:d6:
86:bb:5b:1e:24:df:bc:10:c6:63:a8:e7:f9:f1:72:
5f:1e:3d:b9:a2:69:33:6b:c8:06:f2:8b:24:68:6d:
ac:83:8a:fc:49:8e:8d:d6:ed:c6:03:85:e8:dc:82:
63:c9:d4:74:8c:65:d6:af:68:67:8a:63:b3:7b:e4:
d3:8e:a7:70:7e:63:dc:1b:0b:78:53:ef:1a:75:11:
f0:11:f6:33:12:41:85:1c:81:5e:03:93:a4:f3:66:
eb:82:dd:d1:ed:4f:0e:4e:e7:82:3e:15:94:d9:50:
f0:d8:8c:4b:37:fc:6a:cc:2b:76:8e:5a:03:18:8c:
19:45:d9:58:3d:84:a0:e3:b7:29:da:6d:ef:0c:fb:
66:5e:7f:67:28:88:9b:77:61:bf:e7:b9:d3:19:35:
22:a9:08:ea:35:8f:2b:82:fe:01:3a:2f:46:35:de:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:59:41:00:D9:1B:2A:18:D0:53:2C:DB:C3:EC:F8:8F:E8:F8:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B08EA5C2E9411F18853C59FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.31.0-156.244.35.255
156.244.37.0-156.244.41.255
Signature Algorithm: sha256WithRSAEncryption
10:11:5b:61:59:f7:1d:e7:eb:62:a1:3d:e9:b4:08:9a:9c:ee:
50:4e:37:31:41:ce:61:ad:07:ce:30:80:97:20:8c:3a:bb:73:
65:5e:c7:bb:70:97:72:c2:27:cc:51:54:5e:e1:f2:76:ef:74:
97:54:b6:ab:c0:45:33:63:ec:ab:34:3b:88:1b:e8:51:05:98:
ea:a0:7b:6a:e6:b8:af:2f:66:0b:5b:68:de:70:05:a7:39:b1:
d2:3f:09:a5:fa:58:06:91:eb:b6:6b:c3:60:ce:bb:e1:c0:e3:
ba:d3:e5:f7:e3:8a:83:82:e2:6e:d9:e2:1d:03:f0:87:ac:9e:
35:f3:ab:fc:96:57:ca:97:56:4e:c8:ac:54:dc:e6:ec:f7:7d:
02:42:02:3a:11:e3:e4:16:a3:39:30:0c:ec:17:a3:e2:36:31:
cf:22:d0:be:48:70:86:13:ec:b5:aa:74:bd:48:d2:92:26:79:
6d:e7:2a:27:b3:2a:8b:ae:05:74:4a:36:b7:a6:90:d1:f9:a4:
13:ae:dc:15:e6:d4:8f:b0:90:97:25:ec:60:b0:ff:19:8c:43:
79:5d:7a:6d:27:58:bb:c9:45:c1:0c:81:f6:cf:87:9e:16:59:
be:cc:25:69:00:b7:c5:fa:12:15:e4:a4:f9:59:eb:e1:0a:9e:
36:75:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:54 2026 by rpki-client