Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84FBDD7E3B1811F1960C20E3CE1D38B0.roa
File: 84FBDD7E3B1811F1960C20E3CE1D38B0.roa (raw, json)
Hash identifier: AHOx8gmLNya20frQ6el6uuHNZm3r1V8+eYZSLsW8EHs=
Subject key identifier: F5:10:23:9A:A7:FA:6E:AB:B5:1E:2F:B0:0A:09:C7:02:EF:FA:EF:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84FBDD7E3B1811F1960C20E3CE1D38B0.roa
Signing time: Sat 18 Apr 2026 11:19:52 +0000
ROA not before: Sat 18 Apr 2026 11:19:48 +0000
ROA not after: Sat 02 May 2026 11:19:48 +0000
asID: 32043
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109982 (0x1ad9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 11:19:48 2026 GMT
Not After : May 2 11:19:48 2026 GMT
Subject: CN=69e368d8-a4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:89:71:9c:c6:8c:cf:bf:a8:79:14:ad:33:
95:94:a1:e7:3e:72:bc:0a:60:51:78:b4:a9:57:cd:
cd:49:a2:ba:19:40:af:9c:1e:35:0b:28:5b:f8:bc:
55:f1:c8:f5:a8:e6:53:66:39:dc:71:fa:33:ef:d3:
18:58:d0:8e:15:e2:3d:10:09:d9:16:95:4c:8d:f6:
d3:94:ad:e3:1e:2b:19:19:13:c5:a5:27:16:37:7b:
69:e0:7c:fd:4c:2e:70:af:42:c9:43:8c:68:87:a9:
3e:08:07:00:6c:df:b4:9d:46:c8:be:75:f8:89:d1:
21:fe:ea:43:e8:9f:40:85:39:44:82:41:33:cc:79:
c0:4e:5e:97:90:31:71:44:92:79:f6:8f:9d:c4:36:
5c:4d:87:2b:33:1d:4e:fc:69:b0:44:c8:18:f4:6b:
03:9d:d5:91:83:a5:9e:49:b7:18:9f:0a:84:3a:23:
25:f9:cc:08:1c:07:cf:75:f7:74:08:f8:24:77:80:
2a:5c:e3:2f:dc:f1:24:ee:a0:05:c9:ce:e4:7b:c6:
57:3c:28:fd:d7:c6:3f:4d:fe:d6:5d:3c:f3:41:65:
b1:65:be:91:b1:7e:86:41:3d:61:a9:0a:cc:c4:34:
aa:b2:c0:6b:42:45:20:7d:46:97:d1:42:4b:c0:14:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:23:9A:A7:FA:6E:AB:B5:1E:2F:B0:0A:09:C7:02:EF:FA:EF:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84FBDD7E3B1811F1960C20E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
Signature Algorithm: sha256WithRSAEncryption
99:22:4b:9f:2d:0e:ba:18:cd:8d:b7:5b:5e:cd:09:39:17:6b:
0d:b3:a6:45:1a:40:b0:f9:5e:cc:4a:04:b3:b4:cb:c5:c6:f1:
d0:92:3e:f4:79:89:b8:e1:68:aa:a5:e1:9e:b9:e7:3f:8e:73:
8b:2a:9b:d3:d8:0b:5e:20:95:c7:a1:e4:6c:e5:c5:62:2c:eb:
06:50:25:cc:bb:dd:07:ea:c6:91:b8:38:e8:e8:0e:e1:62:99:
b0:be:17:4d:7d:86:ac:02:c5:0d:9a:c1:3a:40:9f:44:2e:e3:
bf:e9:fc:69:2d:6e:62:5c:ac:68:70:e4:d0:4e:6f:e2:8b:42:
f0:1b:f2:25:6a:9c:72:8c:a4:94:d5:74:64:7f:15:3f:6f:50:
ba:0f:8f:63:ad:59:8b:f3:41:7a:28:a8:f9:5e:6c:73:9f:7e:
4a:5c:d8:20:2e:bf:b3:ef:c5:8c:36:2f:2b:ce:9d:46:28:63:
24:5f:4f:b7:60:ae:8c:2b:84:3b:de:8e:7e:1a:47:6f:cf:54:
f4:1d:53:19:89:c4:28:1c:36:45:de:3f:1e:cb:f3:97:c2:27:
f6:9b:b8:ce:c6:a7:d4:f7:3e:52:21:c0:24:2b:0a:c1:ba:a8:
6b:52:f6:4e:ed:9a:5c:ae:81:23:bd:6a:33:f9:84:52:2d:d3:
3e:39:8b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:19 2026 by rpki-client