Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ADFF104FA9411F0A98A65C4DAE4EC9C.roa
File: 8ADFF104FA9411F0A98A65C4DAE4EC9C.roa (raw, json)
Hash identifier: iUCH52UyLjLPvUDD9qRc+t4n6KBCo/TOBtrhZM6Wc9M=
Subject key identifier: 51:FB:2F:18:1D:45:63:21:DF:D9:06:74:C9:24:CA:CB:C4:1B:F2:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0199F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ADFF104FA9411F0A98A65C4DAE4EC9C.roa
Signing time: Mon 26 Jan 2026 08:53:54 +0000
ROA not before: Mon 26 Jan 2026 08:53:49 +0000
ROA not after: Wed 04 Mar 2026 08:53:49 +0000
asID: 203607
IP address blocks: 156.225.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104946 (0x199f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 08:53:49 2026 GMT
Not After : Mar 4 08:53:49 2026 GMT
Subject: CN=69772ba2-0b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:89:04:d8:5d:41:ad:c8:18:c2:d5:b5:c8:
e3:c1:9b:4f:e8:de:28:e4:f0:68:ad:c5:d5:32:02:
b9:7f:b4:85:b8:ba:ad:eb:90:94:61:81:73:08:a0:
aa:3f:67:3b:13:4f:5b:22:48:00:bb:8c:68:ba:9c:
66:b9:13:b7:7a:11:3d:41:54:e6:3e:8a:34:72:35:
44:6a:2e:0b:f5:83:2b:30:0f:cc:7f:b0:24:01:92:
a5:bd:e5:09:35:c4:0e:99:4e:42:df:e8:1d:83:9b:
b4:12:65:59:cb:ab:2a:90:67:33:c0:67:e4:64:ea:
e5:b4:dc:2a:a6:fa:e4:fa:f7:18:56:dc:54:18:23:
60:dd:56:c2:a9:23:3e:7b:46:12:0c:57:2e:c7:5f:
4a:30:44:d8:0a:84:5a:f7:0a:20:81:d9:aa:a3:ac:
2c:c0:c3:6a:f5:25:d4:29:ed:4c:91:e2:9f:cd:0c:
b3:de:ae:10:a2:59:ca:aa:f9:44:ad:48:45:b0:86:
d1:5c:08:18:92:0b:3a:95:e3:42:a2:b1:40:58:f3:
bc:4c:9a:c4:c6:d0:4d:75:42:9e:11:58:e0:a0:d6:
81:28:84:f4:54:f5:a3:42:15:28:f0:1d:30:cb:e9:
0e:9c:07:1c:ee:e8:d4:88:52:59:e1:1f:69:68:7d:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:2F:18:1D:45:63:21:DF:D9:06:74:C9:24:CA:CB:C4:1B:F2:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ADFF104FA9411F0A98A65C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5e:1d:03:c4:e3:ed:e2:09:db:13:48:24:eb:b7:4f:0c:bb:
0d:c5:36:b2:ac:fd:21:16:bb:2c:d1:7a:e9:6b:aa:5f:f5:50:
d4:5b:4c:0b:5c:98:f6:9b:42:a4:7e:61:ba:cd:37:90:85:1c:
1e:de:ed:b1:5b:3b:3c:c5:35:b8:c3:5b:7a:94:e0:c8:b7:ad:
51:56:c2:ae:b6:cb:9d:7f:62:30:e9:88:3e:71:4d:b8:6b:40:
39:a9:03:af:c5:df:eb:c7:be:dd:51:a7:7b:c7:82:64:62:a6:
e8:a9:a7:9e:ac:81:7f:54:6c:01:d2:62:c9:54:52:79:4d:e5:
c0:e4:32:82:f8:d8:08:4d:b6:70:d0:b5:1d:22:09:e1:1c:3f:
c7:ac:6f:90:f0:56:8d:70:2c:56:a0:5d:63:35:82:c7:97:95:
ef:03:ee:83:7f:32:c2:12:1e:e4:40:c0:ab:3a:e7:6a:45:c0:
c9:49:b5:4b:4c:bb:f5:0c:a4:04:25:21:16:45:e2:1f:c7:6a:
38:78:d0:96:64:51:87:67:c0:43:26:97:3e:88:90:70:72:87:
97:bf:9e:c9:30:5b:10:77:d6:8a:4b:5c:f6:ba:86:50:0f:bb:
4f:22:ae:5f:7f:df:d9:39:83:d5:34:9b:71:6d:0e:b5:1e:3e:
ba:37:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:25 2026 by rpki-client