Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F63122108011F1BEA31587DAE4EC9C.roa
File: 82F63122108011F1BEA31587DAE4EC9C.roa (raw, json)
Hash identifier: upPVY7GB3JzpLLA7v5wee+ypiFzw1uUtkRm+AyjJO0A=
Subject key identifier: C4:46:02:DB:0E:34:2D:2E:37:1D:B7:F4:F8:1B:E2:03:4B:3F:56:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F63122108011F1BEA31587DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 06:25:56 +0000
ROA not before: Mon 23 Feb 2026 06:25:52 +0000
ROA not after: Mon 23 Mar 2026 06:25:52 +0000
asID: 401739
IP address blocks: 156.247.40.0/24 maxlen: 32
156.247.41.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106429 (0x19fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 06:25:52 2026 GMT
Not After : Mar 23 06:25:52 2026 GMT
Subject: CN=699bf2f4-9aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:1e:66:fb:2d:83:c9:c7:8d:dc:ba:6f:c6:
23:5f:c4:84:4e:ec:45:3f:0e:62:44:41:09:b3:22:
5b:d4:79:cb:5d:a8:d5:c2:6f:bd:78:5f:04:4d:23:
f2:6c:22:68:ef:57:85:a8:51:52:63:26:e7:a2:9b:
62:62:4f:1a:f3:d0:8b:90:c0:7f:9f:3a:dd:5c:d3:
37:8f:f8:9c:a6:68:63:09:9f:a4:60:b4:70:62:84:
f5:77:07:98:1b:04:0b:54:97:3a:52:8c:e3:64:92:
2d:1c:c8:28:4c:6d:66:2b:92:d7:f3:fa:07:b6:93:
ca:c9:35:a2:80:2e:48:8e:40:c1:df:b3:0f:95:e6:
f6:53:ce:6f:c9:e6:8e:44:9c:a4:cf:be:33:91:54:
ab:18:06:1e:54:be:53:76:b7:69:72:5b:e9:79:4f:
5f:91:29:25:a7:32:69:72:31:f7:03:90:2d:5a:38:
d5:f0:b9:74:c0:40:bd:b0:6c:1a:c4:52:a8:9f:a5:
e2:d0:92:17:27:97:ba:0d:83:92:d2:b9:6e:93:9a:
ae:74:00:94:d7:1b:20:a9:df:1a:10:7d:cd:27:8f:
42:71:d5:4d:aa:0f:94:15:57:42:7f:89:05:13:78:
5c:a3:f3:20:7d:09:14:dd:ec:c4:5d:18:1b:4a:51:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:02:DB:0E:34:2D:2E:37:1D:B7:F4:F8:1B:E2:03:4B:3F:56:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F63122108011F1BEA31587DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/23
Signature Algorithm: sha256WithRSAEncryption
78:5d:d2:ba:68:8d:36:b2:c9:9c:86:ee:af:d6:4d:95:0e:ef:
bb:c8:e5:05:b8:8d:29:f4:70:a0:b0:2d:be:9c:c9:bf:ab:39:
1c:6e:34:b2:e5:b6:bd:78:f4:cc:7f:e3:d1:cc:00:4e:60:fb:
e2:bf:1f:d4:90:e9:0d:2b:22:7c:00:c1:d6:9f:94:2b:87:4a:
36:86:16:83:ee:34:64:68:8f:27:d0:04:73:1b:66:60:43:57:
f7:df:5b:1f:81:4b:8d:a6:ad:57:ec:88:0c:78:75:43:7e:ef:
77:ca:60:b8:3e:b9:1a:64:20:e5:c5:16:fc:ad:eb:5c:00:36:
dc:34:31:ba:db:d4:ae:5d:5b:1f:10:ec:01:88:38:e2:de:23:
e6:fd:55:8a:f7:9d:8d:81:c1:0b:8d:74:07:34:3d:ea:53:61:
5d:39:c1:2e:3b:d1:0b:5b:79:e8:b5:13:9f:cc:b4:c1:49:20:
83:50:85:6b:8b:ec:61:c8:d2:95:5b:26:58:79:30:97:7b:18:
84:88:78:2c:26:72:cb:40:96:33:25:62:a2:fa:1b:43:9d:2c:
b2:06:55:3d:2d:fd:ed:50:a1:f0:90:cf:dd:8e:db:e8:67:e9:
73:9f:7a:ed:d6:64:93:3e:72:b9:b4:cd:b4:37:a9:23:ae:88:
2a:69:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:21:00 2026 by rpki-client