Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/630348FA399D11F193C704D0CE1D38B0.roa
File: 630348FA399D11F193C704D0CE1D38B0.roa (raw, json)
Hash identifier: M9Vq2XJ36s8bAA0JpyTztr9MU7zTdaDOfACJWxPMiI4=
Subject key identifier: E1:5C:A9:69:6B:F9:5B:3F:21:83:6C:30:FB:59:D3:77:B1:CC:76:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/630348FA399D11F193C704D0CE1D38B0.roa
Signing time: Thu 16 Apr 2026 14:05:56 +0000
ROA not before: Thu 16 Apr 2026 14:05:51 +0000
ROA not after: Thu 30 Apr 2026 14:05:51 +0000
asID: 2914
IP address blocks: 156.225.8.0/22 maxlen: 24
156.229.26.0/24 maxlen: 24
156.229.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109885 (0x1ad3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 14:05:51 2026 GMT
Not After : Apr 30 14:05:51 2026 GMT
Subject: CN=69e0ecc4-77cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:f7:22:30:6a:1f:8a:14:d2:dc:84:11:66:
a9:f9:66:4d:32:87:98:0e:80:3b:64:a4:2d:15:f2:
30:cb:3d:b7:31:6e:a3:37:de:64:65:cc:a8:6c:6d:
53:5f:1c:54:99:87:2c:20:84:a5:bd:eb:d3:1a:1e:
79:77:b4:67:4f:7b:29:0d:fc:27:4b:9c:63:83:bb:
28:9d:f2:1f:38:36:1e:ac:8b:71:3b:42:cc:fe:c5:
bd:36:c6:db:d8:f9:9d:15:83:87:fe:0f:e2:4f:de:
d7:5e:5b:98:67:be:0d:e9:6f:ad:8a:07:67:cf:55:
b0:4a:a0:20:1b:89:03:a3:07:52:86:a8:f5:55:b6:
22:64:33:68:1a:df:4a:3a:d1:05:df:4f:32:3e:62:
3e:77:9b:6e:20:f3:69:b0:4d:4c:ff:c9:5c:51:30:
4b:bf:aa:6a:59:93:03:5c:f7:35:da:df:ff:54:6f:
01:15:26:66:15:fa:fe:4a:ca:9d:96:2f:6b:85:7e:
30:5b:b6:9e:07:80:5d:57:d0:cc:6f:13:eb:e5:c8:
7d:86:ee:ea:19:fa:aa:8f:e5:58:ff:b2:ff:2a:4e:
00:99:ff:ba:f7:94:90:42:b2:b5:24:56:fd:9a:e5:
ae:58:ff:71:d8:63:71:47:53:0c:0d:98:70:62:4f:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:A9:69:6B:F9:5B:3F:21:83:6C:30:FB:59:D3:77:B1:CC:76:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/630348FA399D11F193C704D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
156.229.26.0/24
156.229.250.0/23
Signature Algorithm: sha256WithRSAEncryption
29:66:fd:68:44:30:d1:d2:bc:9f:d8:61:47:58:5c:a1:79:ee:
21:48:60:b0:1f:3e:2e:84:be:8f:61:4d:a9:09:18:c7:c2:51:
eb:e8:27:8f:f1:5d:b3:93:6c:55:b2:eb:9a:cb:d3:03:a0:52:
01:24:10:ca:1c:a4:94:26:30:ba:9e:56:85:7e:ba:86:60:c7:
d2:76:5a:a8:86:e6:ba:54:a3:2b:4e:b6:f0:bb:5a:4d:6f:e6:
87:cb:24:c0:2d:f2:ec:86:20:75:09:dd:99:9e:8f:0f:c7:ec:
24:81:a5:57:fa:72:91:8d:ad:2c:8e:3e:c6:d8:37:a9:f1:5c:
2a:92:de:56:54:c8:54:58:f4:da:1a:a5:35:55:f3:b9:8c:4a:
f6:49:8c:e3:d6:2c:94:88:91:7e:90:7d:62:75:75:a6:ff:74:
6b:ff:8a:6d:ee:70:08:07:45:47:46:a6:2c:de:a4:70:04:c1:
5d:4b:67:92:e6:71:8e:bf:18:d4:94:a0:43:e4:b3:7d:b9:9c:
5e:a7:7d:15:82:a8:e9:a3:92:85:d7:2f:d3:b7:11:b4:25:04:
d3:90:3f:b3:87:fd:8b:40:af:f6:40:48:7e:e5:73:80:35:ed:
21:1f:98:3c:d9:18:49:aa:3d:fa:f2:84:ad:26:78:c1:21:1d:
eb:37:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:00 2026 by rpki-client