Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A18FA100B0E11F1867F1A88DAE4EC9C.roa
File: 8A18FA100B0E11F1867F1A88DAE4EC9C.roa (raw, json)
Hash identifier: gIDOx5/MqZvo+7IH9t7qSSw0QyX9+7I5VEL5S5YeAys=
Subject key identifier: 85:7C:9B:37:1B:ED:33:ED:DC:D5:01:C0:64:BB:04:AE:01:B1:AB:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A18FA100B0E11F1867F1A88DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 08:07:30 +0000
ROA not before: Mon 16 Feb 2026 08:07:23 +0000
ROA not after: Fri 04 Dec 2026 08:07:23 +0000
asID: 154321
IP address blocks: 156.239.0.0/20 maxlen: 24
156.239.224.0/20 maxlen: 24
156.239.240.0/20 maxlen: 24
156.239.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106008 (0x19e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 08:07:23 2026 GMT
Not After : Dec 4 08:07:23 2026 GMT
Subject: CN=6992d042-6281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:4a:91:85:29:4c:33:cf:1f:20:ab:b6:bb:
cc:5b:f7:7c:97:e6:a5:b6:95:58:d5:46:1a:ee:53:
9c:28:c7:b4:84:25:b0:8c:c5:37:2d:8e:b8:c7:a0:
44:83:df:1c:73:89:15:93:23:b3:67:b3:64:b8:50:
9c:20:c7:7d:f9:be:51:d2:bf:a0:9d:a1:c3:53:56:
8a:ee:52:ab:be:46:88:d4:e0:84:a1:b5:28:78:d2:
63:2e:fe:aa:d8:39:24:85:5c:f7:2e:48:35:e4:9a:
dc:4f:2f:f2:69:de:6d:a0:23:a2:db:03:e5:3d:76:
2f:89:0e:f3:ac:64:d1:db:33:f8:f9:40:e6:1c:c9:
0d:bd:0b:ab:20:fc:73:8c:c7:c2:a4:73:bc:7c:e9:
89:8f:ee:c7:e6:dd:70:37:41:5d:b0:11:af:09:b9:
ed:46:66:6b:ad:b9:d3:c0:f9:c7:e7:71:5d:08:49:
01:bb:98:d0:6f:fa:72:33:17:f1:3c:21:ee:e9:96:
f6:b3:57:6b:d2:a0:1f:94:63:fd:21:1e:09:5f:84:
aa:ae:d7:55:29:97:31:be:76:97:00:80:4c:41:3b:
1a:30:01:8e:d4:44:e4:68:b4:1a:e9:36:bf:a2:9e:
e9:8a:58:14:2b:18:59:a5:de:7a:17:5c:82:11:00:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:9B:37:1B:ED:33:ED:DC:D5:01:C0:64:BB:04:AE:01:B1:AB:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A18FA100B0E11F1867F1A88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
156.239.224.0/19
Signature Algorithm: sha256WithRSAEncryption
07:a5:07:5a:72:35:4f:51:66:fa:77:8c:76:45:6b:d6:82:32:
23:0f:98:f3:6f:ba:b3:50:97:e0:f8:a7:e2:cd:3e:f7:55:82:
db:87:e6:7c:38:dc:8c:e4:4d:d6:29:fe:7e:8c:7c:a6:12:7b:
d6:5c:ed:9f:2b:a8:84:53:78:e3:0a:80:63:46:b9:42:b3:0a:
96:30:79:7e:6b:24:e1:59:e0:a2:2a:2c:0c:f4:fc:8a:4f:01:
2a:c4:cd:73:74:da:6b:2c:dd:27:87:a5:c0:28:00:25:4b:81:
1b:67:47:f2:20:0b:23:3b:e7:31:1f:00:2a:96:05:93:63:cb:
f0:68:ff:a4:d9:ff:3a:da:c8:44:73:63:44:a9:db:81:bd:81:
a2:91:a4:41:ed:a9:9a:73:82:59:94:f6:10:e5:fe:61:cd:5b:
be:15:2b:53:73:e7:5d:53:c3:91:84:c1:ea:b6:92:f7:92:74:
28:a7:ef:34:ca:d8:87:57:97:1d:a3:b3:8e:a0:1e:0f:e5:e6:
2d:df:ce:65:7d:98:75:a4:5e:c9:53:fc:f9:80:11:4b:32:1f:
43:36:86:d7:a7:37:9e:ff:f4:1f:da:07:a2:f0:eb:c8:00:f9:
18:8a:ed:a7:00:a3:22:d8:fc:e4:1d:56:21:8e:75:c3:35:68:
df:77:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:27 2026 by rpki-client