Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74CEE0FA2E9711F19E7DACAFDAE4EC9C.roa
File: 74CEE0FA2E9711F19E7DACAFDAE4EC9C.roa (raw, json)
Hash identifier: 9RNiAIQ3VLaFL8VsrGb53RQsjjGid0/TiCld+FOn/n4=
Subject key identifier: 93:AD:6B:ED:BB:8D:DD:62:CF:22:3E:8D:B2:C3:ED:9A:4B:1C:3C:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A94F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74CEE0FA2E9711F19E7DACAFDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 13:25:46 +0000
ROA not before: Thu 02 Apr 2026 13:25:40 +0000
ROA not after: Sun 10 May 2026 13:25:40 +0000
asID: 138915
IP address blocks: 156.244.8.0/24 maxlen: 24
156.244.9.0/24 maxlen: 24
156.244.10.0/24 maxlen: 24
156.244.11.0/24 maxlen: 24
156.244.12.0/24 maxlen: 24
156.244.13.0/24 maxlen: 24
156.244.14.0/24 maxlen: 24
156.244.15.0/24 maxlen: 24
156.244.16.0/24 maxlen: 24
156.244.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108879 (0x1a94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 13:25:40 2026 GMT
Not After : May 10 13:25:40 2026 GMT
Subject: CN=69ce6e5a-ce1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:0c:fb:23:a4:81:22:1c:5a:be:6c:b0:bb:
39:e5:de:4d:c0:bc:e6:1d:8c:02:b0:26:a7:fc:c9:
45:d9:f4:7e:39:ff:6e:e4:10:e2:bf:e5:0a:e5:32:
70:05:e3:69:42:bf:d2:39:75:af:c4:da:7e:b2:cf:
be:d8:2b:44:e5:ab:36:5b:b8:6b:0b:7a:f9:56:be:
c4:c7:df:50:25:36:73:3e:a1:cb:d9:c5:21:68:bd:
6e:91:7f:43:22:86:27:bd:2f:3b:40:f6:ff:6f:73:
65:74:3f:fe:d1:99:4d:9a:35:1a:25:45:82:d7:73:
c0:83:b6:94:f6:4c:1d:78:d8:54:66:0d:e3:2b:ea:
95:7e:dc:b7:81:ce:84:04:79:14:0b:15:4f:cf:45:
d7:43:74:99:a2:8b:fc:38:c2:b1:d4:d3:0c:d1:27:
73:f4:b8:dd:9f:78:9b:66:7f:30:a4:a8:dc:6e:da:
8c:12:bf:99:93:b2:d9:dd:fb:83:f3:39:bf:c4:73:
9e:15:ab:48:fe:d2:91:31:80:6f:20:41:e7:11:4c:
d7:49:7b:b0:b3:91:0f:09:21:42:fd:4b:b7:bb:28:
a5:1e:6a:cb:c5:13:29:fe:f8:1b:23:09:34:e3:90:
d6:97:0b:75:60:60:b4:db:54:c7:53:5b:6e:e6:95:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AD:6B:ED:BB:8D:DD:62:CF:22:3E:8D:B2:C3:ED:9A:4B:1C:3C:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74CEE0FA2E9711F19E7DACAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.8.0-156.244.17.255
Signature Algorithm: sha256WithRSAEncryption
3b:ab:6c:fc:ce:8e:e4:1a:8b:76:e9:81:98:46:c0:e7:8b:98:
cd:77:5d:1a:ab:e5:f3:32:fb:4b:17:a8:58:76:07:ad:1e:f3:
7f:04:49:e0:c2:b1:0d:4a:89:a0:77:4f:76:44:51:73:f0:01:
c5:79:14:0f:7f:8c:4e:12:31:c5:1d:54:f8:3e:cd:a5:ee:e9:
74:91:40:6d:3e:f6:a5:c5:ec:2c:72:6a:9d:7b:42:02:f4:9a:
51:68:33:ab:17:e6:91:1c:20:e4:bc:36:db:d9:91:7f:95:f9:
ae:07:d1:63:43:e9:4a:94:35:c6:42:c8:f3:ea:29:ce:b8:96:
89:b5:f7:1d:19:c9:cd:fe:4b:e2:a7:01:ce:dc:7a:18:b7:98:
d4:c3:13:a4:18:ae:69:1a:03:4c:a6:29:64:f7:9f:e5:76:0f:
53:12:0c:c0:8c:29:19:70:b8:3e:52:38:65:55:47:ac:a6:44:
1f:ca:75:cf:9c:f3:21:db:9b:1f:63:1e:a1:ff:a6:72:fe:a5:
19:10:21:7b:59:85:32:ac:13:40:17:4d:80:88:e3:2b:35:7e:
28:2f:0e:ae:eb:9a:21:98:b2:9b:2c:09:10:42:90:fd:65:7b:
60:c9:92:68:75:2b:ca:20:38:32:24:5c:47:87:1c:ea:0f:36:
cc:8a:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:03 2026 by rpki-client