Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504B503407EA11F1888B27BCDAE4EC9C.roa
File: 504B503407EA11F1888B27BCDAE4EC9C.roa (raw, json)
Hash identifier: FnbQq5cGm6yP28+admeb9wYDBpKiFAIMus0hNE3BYsI=
Subject key identifier: 2F:F5:18:50:9F:6C:4E:CB:7C:FD:7F:B2:96:5A:85:34:E3:67:9A:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504B503407EA11F1888B27BCDAE4EC9C.roa
Signing time: Thu 12 Feb 2026 08:10:38 +0000
ROA not before: Thu 12 Feb 2026 08:10:33 +0000
ROA not after: Mon 13 Apr 2026 08:10:33 +0000
asID: 149440
IP address blocks: 156.225.64.0/24 maxlen: 24
156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105768 (0x19d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 12 08:10:33 2026 GMT
Not After : Apr 13 08:10:33 2026 GMT
Subject: CN=698d8afe-bfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:b3:96:a1:c7:71:6f:ae:0e:5a:3b:bb:1a:
0a:ac:98:f7:6f:54:53:30:6a:f1:9d:85:31:36:a1:
99:3d:a6:a4:86:8e:40:86:6e:a4:ef:44:f2:12:87:
6d:d9:6f:90:32:83:df:1f:28:5c:bf:30:7d:37:a3:
3e:a7:d5:9e:5b:85:33:4f:1c:0b:85:01:73:6c:8c:
e1:8b:fa:fa:81:02:d1:d5:07:4f:16:c9:53:e4:9b:
8f:f6:fb:ea:e3:43:22:1f:61:da:2d:70:12:da:5a:
e5:82:c9:c5:7b:27:64:b7:ee:5c:a5:91:31:8c:40:
86:19:38:2a:f8:23:c3:50:df:36:4c:e4:6a:ac:39:
98:01:ab:f2:9e:51:39:e6:f3:5c:2c:60:95:9a:b4:
c4:29:2a:26:83:52:5c:4a:a2:12:bf:a9:c6:a7:19:
8e:3e:f2:37:f4:c4:b7:b6:47:25:7b:76:77:08:57:
e3:24:7b:90:44:73:6e:a3:d3:d6:66:06:e2:98:b2:
36:4d:8f:e0:c0:70:b2:7a:e7:b4:c7:80:40:f7:17:
6c:91:26:fa:d5:d3:bb:60:47:7c:99:95:73:83:18:
51:bf:81:b9:bf:51:9d:35:1e:89:b7:81:c1:29:d3:
b2:1e:74:1e:38:b5:26:01:4b:e1:9a:c1:d9:65:3c:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:18:50:9F:6C:4E:CB:7C:FD:7F:B2:96:5A:85:34:E3:67:9A:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504B503407EA11F1888B27BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.64.0/24
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c2:ba:53:6f:09:47:e5:02:e3:1b:9a:eb:24:99:78:fe:f6:
5a:da:8b:ab:02:10:8a:88:5e:e8:dc:34:38:9a:e6:16:a8:09:
d2:e8:0a:51:4f:64:7f:ab:da:46:f8:9b:a0:25:85:96:7b:27:
16:b8:de:86:dc:85:ba:ea:b5:dc:e7:a6:3b:58:07:9e:44:05:
3e:59:98:00:0d:99:6d:4c:6a:ee:25:e4:c8:a0:dd:3c:9b:1e:
c0:59:07:4a:63:ce:de:b4:dd:fd:5b:e7:10:2c:da:0c:99:52:
09:37:59:8c:0a:f6:88:19:3d:9f:5b:fe:6d:f1:15:58:86:69:
c7:38:61:9a:b9:01:91:b4:56:16:48:1a:ab:af:09:be:17:0d:
d0:49:e3:01:56:5a:22:fd:d7:e9:3a:cf:ca:19:ed:24:2c:2d:
5f:60:b2:b2:19:a3:60:3a:8d:4d:e8:f6:af:0b:94:34:88:48:
54:88:04:d9:ee:f4:f3:b8:a6:ab:7e:d4:72:ff:bb:51:07:88:
a8:17:a5:ea:e3:ef:57:54:79:72:2d:75:2b:09:86:9f:7b:0d:
20:19:32:01:89:c4:a0:8e:dc:c8:e6:0c:d2:a1:00:32:56:62:
75:02:cd:d1:e5:4b:b8:2a:42:ad:ad:fc:07:6c:26:75:a5:4e:
71:a5:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:52:23 2026 by rpki-client