Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D91376C38A211F1B51F34DBCE1D38B0.roa
File: 4D91376C38A211F1B51F34DBCE1D38B0.roa (raw, json)
Hash identifier: lfXlVc6TZ/FNuo/2cZvhiUzzJFAMSUIH1ahMLgJ7hr8=
Subject key identifier: FB:C3:31:7B:76:CC:11:D9:98:D7:17:B7:59:3D:59:A0:76:79:99:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D91376C38A211F1B51F34DBCE1D38B0.roa
Signing time: Wed 15 Apr 2026 08:08:36 +0000
ROA not before: Wed 15 Apr 2026 08:08:31 +0000
ROA not after: Wed 06 May 2026 08:08:31 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109761 (0x1acc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 08:08:31 2026 GMT
Not After : May 6 08:08:31 2026 GMT
Subject: CN=69df4784-7770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:d8:b5:d5:03:27:79:3e:1c:9a:1f:94:98:
24:23:b0:a3:33:de:c3:a1:1d:53:9b:bd:ac:e5:12:
ab:a3:a6:bd:09:4a:eb:cd:63:95:86:00:e7:23:80:
11:70:96:5d:72:41:83:10:b7:38:d9:60:6d:fa:3f:
5f:62:0f:d9:b2:5c:bb:b9:14:3e:6e:2e:36:ac:00:
6f:9a:4e:47:64:20:9d:04:98:d8:22:d1:e4:d6:57:
f2:c9:cc:b7:37:33:14:3a:99:c0:20:5f:3a:df:b3:
4f:f3:d7:bb:89:ab:7d:42:bf:bc:ab:6a:89:3c:a4:
06:56:46:88:a8:b7:0f:e9:d1:13:3a:52:89:91:58:
05:62:3a:25:18:db:e7:69:26:eb:7c:ba:8f:98:ff:
e0:2e:1e:69:95:05:05:58:20:57:7f:10:09:52:63:
b2:e9:fa:4d:c9:8c:5e:a9:a3:ae:13:a1:c2:39:d0:
7f:6a:99:31:ec:08:ad:85:b3:07:cf:27:45:34:49:
c1:b0:16:90:c7:89:2a:25:90:9a:ac:d4:bf:8d:ce:
ae:4b:5f:2f:f3:07:8c:54:2c:d6:87:56:c4:6e:89:
b0:b4:57:3b:89:df:c6:dd:65:4c:16:2e:00:2a:11:
1f:ef:69:5f:1c:ca:e1:af:12:f2:ff:1a:d2:15:97:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:31:7B:76:CC:11:D9:98:D7:17:B7:59:3D:59:A0:76:79:99:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D91376C38A211F1B51F34DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0b:26:26:a7:60:46:fc:9e:24:3a:4e:a4:88:0a:b5:e6:76:12:
8d:44:2e:67:9b:c9:1d:6a:b1:85:02:f3:f0:8c:42:00:73:d6:
0b:0f:0e:6a:aa:82:a2:06:2e:b9:dd:0d:8b:8e:72:a1:e4:43:
6f:2b:9b:fb:55:c3:da:60:29:d4:8f:56:81:2b:52:d8:8e:3b:
fd:66:71:2e:c1:cb:f1:22:0a:34:bf:42:ca:ee:cd:a5:01:0a:
4b:c1:8c:6a:26:7f:e7:42:fa:a0:a6:85:21:47:74:62:d6:65:
b0:07:5a:6c:a5:f6:e8:a4:0e:f6:15:a4:8a:c3:68:e7:ae:47:
69:18:4c:81:98:6d:58:c7:4d:7c:4c:7d:f7:f0:52:ab:c3:4d:
81:5b:6b:65:fe:a1:89:a8:f5:9c:2f:50:d1:08:43:c2:14:36:
16:6f:d8:4e:32:d3:6a:46:59:bb:61:02:9f:bc:0a:57:12:48:
a6:ce:16:54:0e:46:b1:fb:25:fa:5e:3e:82:57:dd:25:50:48:
f5:dd:61:6b:93:e5:91:e1:8e:7c:46:bb:38:d0:83:33:7f:82:
1a:41:6a:a6:8c:3f:de:f1:04:27:59:53:7f:7c:43:19:9e:27:
8e:ad:f2:65:e1:20:32:fc:0e:a4:3e:79:17:93:4e:f2:66:c0:
3f:1a:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:30 2026 by rpki-client