Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B1C8FC032611F1B6F92FF2DAE4EC9C.roa
File: 80B1C8FC032611F1B6F92FF2DAE4EC9C.roa (raw, json)
Hash identifier: 3p4UyRMCWfmDemi/yqEd9YPIYGq8oyPsdN+KURj6KE8=
Subject key identifier: C8:C7:10:36:C4:EC:42:64:7B:13:A2:81:21:50:1F:61:E9:7D:91:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B1C8FC032611F1B6F92FF2DAE4EC9C.roa
Signing time: Fri 06 Feb 2026 06:38:53 +0000
ROA not before: Fri 06 Feb 2026 06:38:48 +0000
ROA not after: Tue 10 Mar 2026 06:38:48 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105451 (0x19beb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 06:38:48 2026 GMT
Not After : Mar 10 06:38:48 2026 GMT
Subject: CN=69858c7d-177b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:e6:94:d3:a4:96:7a:60:20:17:c2:ad:d6:
29:7b:95:4f:0d:79:d9:57:c3:b0:72:4d:a3:26:8b:
1d:3a:16:d1:c2:58:87:42:07:c9:4d:20:c7:35:3f:
41:6b:c1:03:3a:a6:40:1f:12:d3:ca:65:bf:74:d5:
0b:47:ab:2b:01:8e:0f:dd:8c:52:c0:94:77:e5:82:
de:c3:75:86:60:07:b9:e2:4b:f1:7e:de:cc:dc:9b:
fd:a0:e5:40:27:07:44:1e:34:e7:3c:58:86:55:78:
51:af:70:11:e4:70:d1:38:16:ee:16:5b:3e:b1:1f:
32:b3:fa:e2:7a:97:8b:1b:e1:66:e7:66:c9:b1:c2:
0c:54:67:84:68:85:6c:ba:79:80:3e:ec:c5:d1:1c:
8e:71:ab:31:a1:95:66:24:a1:de:f8:25:13:63:be:
28:6b:69:ac:4d:10:91:1c:fe:61:c7:50:64:ec:68:
84:7c:21:ae:85:a9:0c:58:9d:31:f9:51:47:74:54:
41:2b:ec:a1:94:b0:b8:18:bd:0a:27:28:ed:62:9e:
ac:6d:bd:8d:b1:fb:a2:92:cb:a4:9d:3a:94:df:2c:
c3:5a:e0:69:96:3e:3e:3c:18:1d:b9:8d:27:bf:1c:
d5:d6:74:4c:ff:d2:f1:65:86:a8:ed:5c:74:ff:63:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:10:36:C4:EC:42:64:7B:13:A2:81:21:50:1F:61:E9:7D:91:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B1C8FC032611F1B6F92FF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:27:80:e1:38:94:72:43:a0:aa:1b:64:86:d3:99:6e:44:5d:
d7:dd:cb:db:9f:0b:fe:fb:5a:fd:99:1d:fd:33:4e:09:86:c5:
61:5b:e1:2f:04:a7:b4:17:57:0a:f7:34:0e:26:34:64:6f:c6:
30:cc:70:f4:f4:a1:c8:b7:59:df:45:ce:77:46:bc:fe:7a:b7:
ca:c4:f9:83:4a:89:44:65:b9:79:5c:2c:45:02:a6:24:cc:78:
9d:da:e0:02:a6:67:e1:8c:56:08:94:a3:79:e6:eb:95:05:d6:
7d:6f:8d:57:42:b4:b9:84:52:e7:40:37:c9:b8:06:69:a7:82:
d5:46:f5:85:73:30:5a:9c:93:88:75:62:75:0c:18:84:ae:0d:
b7:29:4d:41:21:23:d6:54:37:f3:3d:20:8c:d9:a9:65:d7:25:
bb:24:e5:3c:9c:4c:7f:1d:e6:00:e2:f3:af:da:02:b9:23:2c:
89:ed:fb:8e:10:0c:1c:18:e0:21:35:a8:6c:01:b0:dd:8b:cb:
f9:c5:41:d5:23:0e:e3:bf:66:52:36:d8:2c:24:8b:a7:91:ba:
94:2e:cb:f5:8e:de:42:b5:54:a4:34:50:02:45:42:58:3c:ee:
50:96:89:b6:83:18:7b:09:2b:1a:76:bc:bc:34:57:ff:71:5a:
90:1d:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:59 2026 by rpki-client