Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D02EEF0377B11F1BCA988C1CE1D38B0.roa
File: 7D02EEF0377B11F1BCA988C1CE1D38B0.roa (raw, json)
Hash identifier: dsOYD1w3hvqkvK0Y3d4pw645SEyknIBNCxAcqgIbr3c=
Subject key identifier: 01:C9:08:C2:11:25:78:60:FF:8A:20:45:66:A9:9E:42:7A:87:77:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D02EEF0377B11F1BCA988C1CE1D38B0.roa
Signing time: Mon 13 Apr 2026 20:58:15 +0000
ROA not before: Mon 13 Apr 2026 20:58:10 +0000
ROA not after: Mon 06 Jul 2026 20:58:10 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109714 (0x1ac92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 20:58:10 2026 GMT
Not After : Jul 6 20:58:10 2026 GMT
Subject: CN=69dd58e6-1f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:51:bf:66:af:dd:0e:04:df:99:cd:86:ad:81:
b8:38:f7:cd:0d:02:82:fd:64:cf:ec:43:c7:66:d5:
75:a6:17:80:c2:fe:01:e8:8b:d1:5e:74:1d:67:0c:
4e:c2:34:b0:a4:be:51:dd:20:26:86:cf:87:82:81:
44:5a:18:98:0e:da:a6:35:3f:57:51:9e:5a:bd:8d:
a2:8b:3b:73:ed:27:6c:68:47:94:89:45:fe:68:1f:
dc:8c:af:aa:ff:00:8b:a9:be:f0:4b:92:24:03:e7:
ae:18:4c:6c:d4:56:f2:c3:fb:c9:d4:65:1b:ad:ba:
ed:5b:e3:3c:97:56:b4:88:76:bf:1f:72:49:81:41:
b7:35:03:a3:ab:07:a1:6d:42:c6:44:9a:32:3f:58:
8b:7d:62:8a:a1:80:97:c6:58:b1:9a:d8:c0:50:1e:
24:c1:a7:a6:09:e8:e4:8d:f3:91:24:c8:bb:d0:f3:
64:72:e6:d0:a2:3e:81:50:76:dd:21:5a:bd:b5:df:
9e:4c:a7:a4:f2:50:12:42:d8:13:25:16:e9:12:ec:
56:6b:1e:28:a7:fa:c8:d6:ea:fb:f1:6a:21:c3:3b:
2f:9f:37:7c:1c:3e:bb:dc:17:18:32:18:5d:f7:e2:
df:ac:ca:60:c0:74:04:53:e0:89:fb:67:3a:d3:13:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:08:C2:11:25:78:60:FF:8A:20:45:66:A9:9E:42:7A:87:77:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D02EEF0377B11F1BCA988C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
22:da:85:4a:fb:dc:a4:19:90:bb:3f:95:e8:41:1d:82:9b:7f:
aa:4e:a4:d9:e8:1b:b0:76:39:27:13:f4:ab:ec:3f:8f:b7:34:
21:48:81:c8:d2:1e:5f:e8:11:18:85:5b:99:86:c0:bb:0f:00:
82:42:1d:22:5d:8c:48:3a:a7:e2:d7:8c:32:47:7f:88:90:df:
0a:64:93:b8:a2:8a:ee:71:e3:52:d3:93:4a:24:ce:52:39:d7:
3f:1a:7d:ae:33:be:47:c0:9b:cb:2b:df:db:b3:56:e6:a7:ea:
88:f9:a3:27:e5:85:10:08:74:36:5d:b8:6f:2f:c2:6c:91:40:
be:99:d7:56:12:e4:4b:ae:5c:c3:b2:66:d4:8f:77:9e:f1:7e:
e0:e7:c3:16:97:a0:18:04:03:08:e6:50:a8:af:96:80:71:f2:
32:c4:f0:32:c9:57:76:2c:6f:53:74:66:67:12:2f:9f:9d:1f:
2f:7e:4d:33:89:33:aa:7f:83:3e:92:be:ce:cd:c6:b1:4e:5d:
ba:08:47:b0:4d:1d:f1:7f:7b:e7:6e:49:3b:40:cb:96:79:04:
22:78:ef:61:15:5f:23:40:ac:e4:fc:ae:b3:d5:b5:b1:37:70:
07:69:2e:cf:43:61:fd:4d:96:cf:76:82:8b:42:5b:5d:bb:9b:
a6:77:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:29 2026 by rpki-client