Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E983A76FA9911F0AFDE3FE2DAE4EC9C.roa
File: 4E983A76FA9911F0AFDE3FE2DAE4EC9C.roa (raw, json)
Hash identifier: bpM0FsAxXC2r7bN5hS/yOHHXoJziVDUV/VIcd8A4zJo=
Subject key identifier: 6E:5B:A1:72:B8:4F:6C:80:CB:7F:81:95:4F:02:9B:B4:66:2F:64:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0199FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E983A76FA9911F0AFDE3FE2DAE4EC9C.roa
Signing time: Mon 26 Jan 2026 09:28:01 +0000
ROA not before: Mon 26 Jan 2026 09:27:55 +0000
ROA not after: Sat 07 Mar 2026 09:27:55 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104956 (0x199fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 09:27:55 2026 GMT
Not After : Mar 7 09:27:55 2026 GMT
Subject: CN=697733a1-89ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:85:f9:82:94:1a:18:77:4b:12:7c:4f:68:
f3:5b:d9:61:8d:33:fd:12:01:42:d3:26:7a:23:9d:
f7:6e:40:47:77:97:ab:af:55:2e:b1:e3:a2:ad:fb:
b0:4d:19:bc:cd:0f:e5:94:3e:5f:fa:b2:75:f6:2e:
ff:e9:dd:9a:ac:bd:11:e0:d3:f9:bb:f9:76:91:83:
b0:9d:9c:96:d9:ca:a5:8d:bf:a4:6f:7b:6f:b8:61:
c3:f7:73:9a:c0:e0:1f:e5:eb:14:50:6e:56:25:13:
f0:34:b9:90:d1:c8:cc:70:e5:6a:df:a5:e2:2d:7e:
17:dd:52:13:78:06:a2:54:4c:16:8b:d3:d5:ec:05:
1c:d5:70:3d:b6:6e:04:07:93:b0:42:31:e6:01:22:
69:9f:16:b5:f2:14:b3:68:ee:85:8b:ae:85:fb:6c:
96:a6:62:dc:33:80:7d:df:be:32:69:9f:b4:ea:c8:
0b:c8:7f:5c:fb:63:0d:4b:d7:0c:c9:e8:b0:16:38:
09:d0:66:58:c0:9d:e7:79:a7:f6:01:1a:cb:17:fd:
10:4a:80:eb:22:d8:b1:3f:48:b3:37:bc:0f:51:97:
65:b7:05:28:a1:7f:3e:3e:26:7e:1a:2d:ec:9c:b2:
ce:05:84:27:62:14:97:58:80:25:60:34:f1:51:6f:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:A1:72:B8:4F:6C:80:CB:7F:81:95:4F:02:9B:B4:66:2F:64:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E983A76FA9911F0AFDE3FE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
61:10:0f:6e:07:49:95:0b:ca:35:62:96:4e:94:b2:89:c2:93:
27:a1:47:89:7f:0a:f4:66:3f:cc:2e:e1:ef:c9:94:4f:39:80:
9e:ec:bd:ed:9c:f7:8c:ba:b3:6e:a0:4c:57:e6:d8:3c:0f:e1:
6d:ca:ad:b2:36:b7:9a:b4:31:d2:47:a9:1d:03:5f:78:14:3a:
07:e1:00:9e:95:b3:ca:42:31:5d:04:d0:f8:1c:9e:85:5e:30:
52:c9:e5:37:83:c7:b3:aa:a6:71:f5:62:38:84:ee:ad:10:ad:
33:4f:9a:89:dc:61:ed:3c:08:ca:a4:d6:13:b2:6f:da:a3:88:
d0:8b:cd:f4:5e:20:19:94:24:5e:89:cc:54:50:98:66:32:dd:
f2:8b:5a:0e:04:9d:65:bc:1a:b8:23:3a:e5:80:5b:97:a9:04:
9b:49:d4:35:54:12:fd:6c:ef:d4:9f:f2:0f:a2:cf:37:d4:89:
ab:6b:7b:83:64:0a:f1:1a:7b:7a:17:1e:95:05:a3:16:62:b1:
22:56:76:56:57:70:9c:d3:1c:a6:98:0d:3c:41:68:7f:50:f4:
ed:6a:e0:8b:d6:4b:0a:ee:df:f5:7c:b9:01:5e:1e:8c:a3:1d:
bd:c0:52:38:2b:49:1e:e6:39:b8:94:71:6f:97:57:ba:1f:de:
d0:ad:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:41:59 2026 by rpki-client