Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80530A680BDE11F1AB67FC87DAE4EC9C.roa
File: 80530A680BDE11F1AB67FC87DAE4EC9C.roa (raw, json)
Hash identifier: WcUX0lKKL/qOIp58rqsyksUNmnOrA3B0CeX8axY8GfA=
Subject key identifier: 45:13:46:F0:24:6B:B3:E3:E6:6D:5F:E5:C7:DD:2A:DB:E2:11:24:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80530A680BDE11F1AB67FC87DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:56:09 +0000
ROA not before: Tue 17 Feb 2026 08:56:05 +0000
ROA not after: Mon 30 Mar 2026 08:56:05 +0000
asID: 48678
IP address blocks: 156.229.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106116 (0x19e84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 17 08:56:05 2026 GMT
Not After : Mar 30 08:56:05 2026 GMT
Subject: CN=69942d29-51af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:c1:71:88:21:b3:c9:4b:20:b1:46:9b:87:
bd:1f:c8:fa:0d:cc:81:bd:c7:7c:3f:2c:d7:d6:df:
e8:9b:46:01:20:3a:85:bb:37:48:c5:c4:b5:3e:df:
e1:a3:85:07:b9:59:70:21:01:45:8a:4b:3e:b6:99:
fa:65:b4:b8:b8:ac:16:30:5f:34:f4:ff:ae:c2:44:
dc:b1:11:28:f2:1c:61:68:33:97:13:f1:03:b0:d3:
9a:df:24:19:66:78:9a:ba:df:05:39:5d:62:c1:bc:
a7:09:fb:49:35:b4:2c:ed:11:a2:20:17:ea:2d:a7:
e8:ab:41:5b:86:25:77:c6:0d:ad:ac:ff:7b:7a:84:
ab:c8:7d:16:98:3e:ce:6f:31:3d:02:5b:15:fd:a5:
16:fd:de:6c:d6:6d:61:fa:e0:12:01:f7:7f:8c:f9:
fa:6b:6f:0f:6f:af:f0:cd:db:89:8d:d1:fa:a2:ae:
3a:7e:41:e6:2c:0d:2b:1e:78:f3:1c:ff:1e:0e:6f:
f4:33:24:58:4e:c0:3f:18:bc:81:60:36:17:0c:19:
4b:4a:c3:5a:a8:44:f1:da:0d:1f:20:c2:1f:f5:38:
58:1f:5a:22:26:e1:0d:46:d3:5e:75:66:44:53:5a:
ec:60:4d:f2:db:12:eb:0e:d6:bb:3f:88:02:33:8c:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:46:F0:24:6B:B3:E3:E6:6D:5F:E5:C7:DD:2A:DB:E2:11:24:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80530A680BDE11F1AB67FC87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.122.0/24
Signature Algorithm: sha256WithRSAEncryption
43:aa:df:f5:2d:db:2f:d2:6a:a8:f2:c6:74:26:33:60:0c:37:
5f:fb:df:bf:84:98:06:1a:84:3e:36:f3:a3:07:2c:d3:48:55:
c2:2e:94:bd:1b:9e:4a:43:86:de:c5:70:bc:44:98:f7:d0:67:
94:64:a6:7c:59:7b:ca:5f:49:2b:cb:77:69:35:b4:41:98:9f:
b3:bb:9c:93:3d:1d:26:aa:44:09:b7:e2:4c:37:28:24:be:64:
52:21:a2:d2:cb:c0:8a:25:ae:f0:e2:8c:7a:6a:20:18:f0:c6:
19:27:02:7f:18:3b:7d:e7:ef:91:ba:aa:78:64:4e:0b:7a:25:
7f:5c:8b:6a:8d:d7:c1:1d:26:29:46:32:4e:55:73:b5:94:10:
c7:80:a9:6b:06:71:19:17:e7:3b:78:8c:0a:bf:a0:5a:82:43:
77:01:1a:5e:52:c2:34:6a:7c:bc:d8:aa:13:d0:29:80:ee:df:
c5:0b:90:bb:3d:ab:db:fd:49:ff:43:d9:13:9d:ff:e5:d4:30:
38:e0:11:f1:67:7c:ab:81:01:31:e5:11:bd:c6:fc:25:54:be:
bc:68:4a:67:9f:22:2e:7c:8c:59:81:08:5f:14:24:26:2d:37:
a1:8c:73:43:57:ef:cd:9a:2e:f1:f8:ea:17:12:4f:0a:75:00:
79:5d:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:52 2026 by rpki-client