Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/704F4B26366E11F18AC986DCCE1D38B0.roa
File: 704F4B26366E11F18AC986DCCE1D38B0.roa (raw, json)
Hash identifier: lnXqykJxkvoWry827vEEr8ZFJYFT2Cxh5vTDjitYdLA=
Subject key identifier: 85:37:52:B9:1E:20:C4:E8:EC:4E:04:FB:6A:D6:95:BE:37:40:83:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/704F4B26366E11F18AC986DCCE1D38B0.roa
Signing time: Sun 12 Apr 2026 12:52:19 +0000
ROA not before: Sun 12 Apr 2026 12:52:13 +0000
ROA not after: Mon 18 May 2026 12:52:13 +0000
asID: 13335
IP address blocks: 156.229.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109601 (0x1ac21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 12:52:13 2026 GMT
Not After : May 18 12:52:13 2026 GMT
Subject: CN=69db9583-f2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:6c:53:b0:a1:f2:fa:8e:f1:86:1b:b8:07:
97:04:10:00:26:68:fa:99:ba:dd:a6:25:0b:4c:be:
27:60:b3:f6:f0:f3:37:6a:b9:a7:ec:ae:86:02:09:
61:b0:ab:90:ff:63:6f:90:67:62:ed:f7:73:88:d4:
6e:91:1f:7f:f6:e1:38:a3:81:cf:11:dc:ee:05:fa:
df:e3:80:12:bf:c9:fc:c9:c6:bb:49:f3:4a:93:ab:
10:9e:5c:c3:cd:27:47:8b:aa:a4:ff:bf:3b:5b:09:
36:8e:c3:b5:2e:09:98:ac:7e:66:d4:70:d7:16:99:
81:4d:ac:02:89:da:91:7e:0d:b0:1a:c8:b8:a7:38:
ec:11:ff:64:ee:d0:b4:37:77:70:aa:86:f5:38:98:
a9:e2:82:6b:30:95:80:0d:40:f4:20:9d:54:a5:ec:
d2:fb:d2:e2:be:78:1d:ea:96:9f:00:ad:93:51:48:
5b:d4:0f:fb:c7:d9:92:69:bd:dd:34:ef:4b:14:50:
69:5c:36:90:63:e0:23:ca:f8:9c:d7:b3:e8:0b:fc:
2c:51:67:41:3a:7f:b7:c0:d0:9c:3c:b0:1b:f6:a6:
3b:ec:bb:73:d3:61:2f:d2:de:f0:6f:2a:bf:1b:89:
24:f8:c3:0a:57:ac:88:cf:27:a6:a9:aa:a6:f9:79:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:37:52:B9:1E:20:C4:E8:EC:4E:04:FB:6A:D6:95:BE:37:40:83:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/704F4B26366E11F18AC986DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.177.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6c:30:74:a6:f3:da:b6:ac:d9:68:d1:7e:23:eb:c7:62:4f:
cd:ad:01:6f:ef:82:97:24:e2:8d:65:26:d7:52:d6:25:a5:f2:
58:84:e0:d8:5e:82:c1:04:ba:ad:2f:7c:2a:e7:11:71:00:19:
45:94:e4:53:4e:e4:72:fe:92:44:98:1f:17:24:52:bb:9d:db:
26:41:da:93:f4:71:77:48:b3:e1:6e:71:7d:a1:41:96:87:b7:
7d:30:bc:a6:d2:7a:37:76:27:03:37:8d:23:38:93:1a:74:83:
d7:16:48:44:48:1e:f0:87:b3:a9:ec:f0:0c:2f:90:5a:01:85:
03:93:2b:ee:4a:b1:3e:ef:ff:3e:b7:31:0b:1d:a9:17:29:ff:
5d:a6:de:62:49:35:4e:69:04:b7:73:82:a8:e5:84:d2:26:1b:
ff:81:1d:01:9e:75:57:39:b5:75:5a:6c:ff:d6:3a:d8:fd:2f:
0b:e3:03:6b:71:5d:f9:00:f9:99:d8:60:48:3f:ae:50:b5:19:
b4:f0:89:7a:b3:47:2f:d1:da:5a:5b:82:52:5e:00:e1:4f:c9:
62:90:48:32:8d:dd:8e:10:00:9c:52:1e:3d:ba:0f:bd:86:04:
8d:a3:05:1c:63:4f:ef:9d:cc:c3:72:b7:83:3b:9b:1e:ac:f3:
25:ba:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:12 2026 by rpki-client