Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B29587E2E0311F1825BA0C8DAE4EC9C.roa
File: 8B29587E2E0311F1825BA0C8DAE4EC9C.roa (raw, json)
Hash identifier: ayd6cfOzkRIg/16EOmo9x+MfZiudws1MCao8DV5+AqY=
Subject key identifier: AB:F3:50:56:8A:A8:86:0B:DC:EB:B8:BC:C3:DE:78:EA:D6:83:3E:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A926
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B29587E2E0311F1825BA0C8DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 19:46:58 +0000
ROA not before: Wed 01 Apr 2026 19:46:53 +0000
ROA not after: Wed 13 May 2026 19:46:53 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108838 (0x1a926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 1 19:46:53 2026 GMT
Not After : May 13 19:46:53 2026 GMT
Subject: CN=69cd7632-0524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:18:ac:91:c5:79:05:d2:2f:b1:11:24:3f:
51:c1:05:ae:57:e2:b8:5f:60:d4:ad:6c:a5:a8:db:
05:68:e6:ae:1a:b6:92:fb:9f:5b:f8:79:1b:52:27:
96:59:53:6b:56:39:6f:e7:9c:76:f6:07:e7:36:3a:
fe:52:2d:d0:f9:ac:8b:41:26:06:e4:5f:3f:59:f9:
37:e8:2a:be:63:0b:66:63:cc:f6:9e:d3:d9:51:f5:
6e:b3:16:e3:72:67:28:f9:fc:53:6a:39:2c:e5:d6:
51:95:2b:10:34:bf:b8:8d:fb:f2:be:40:3d:c7:88:
99:57:2c:f2:d1:6e:99:a7:7f:a1:32:11:e9:e0:2c:
da:40:36:32:1e:ce:99:d9:46:5a:1e:95:56:af:38:
78:15:24:be:a0:aa:b1:46:80:b8:44:d1:72:dc:52:
f7:d9:ab:cb:71:12:a1:82:79:ec:14:d8:a7:46:b7:
a5:fe:b5:26:c4:89:5c:ff:86:70:23:74:53:7c:eb:
6e:dd:ac:82:3b:de:e2:c2:96:d3:af:2c:83:7f:48:
e0:d9:aa:98:a8:4e:3d:7c:04:01:fd:ea:c4:2e:68:
4c:a4:46:a0:8a:e0:ab:ad:cd:70:e1:0b:99:35:75:
90:2d:88:12:fb:ca:77:7b:02:b8:22:f9:04:28:15:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F3:50:56:8A:A8:86:0B:DC:EB:B8:BC:C3:DE:78:EA:D6:83:3E:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B29587E2E0311F1825BA0C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:bb:49:ae:d0:a5:37:38:9e:55:1f:a5:57:2f:2c:f0:91:a9:
95:d2:b8:75:59:26:3e:e1:fa:41:c6:b7:b6:f9:45:33:25:5e:
47:ae:c1:1c:17:3e:83:17:a5:59:2c:d9:b8:48:0a:b3:83:62:
d8:f6:79:82:f1:2e:09:d2:76:bd:e4:5a:24:e2:ff:e1:e8:08:
19:91:d8:89:c4:2a:3f:3d:d8:33:69:85:63:08:8c:03:dd:eb:
4a:06:7f:87:1e:25:9e:62:9f:fb:a6:5b:bc:77:08:8f:54:60:
45:ea:09:40:be:6c:60:1c:f3:f0:03:bd:53:6f:cc:8c:5c:e4:
ba:a2:60:47:ee:60:76:ed:a4:df:cd:b9:80:4a:bb:5d:03:3d:
04:c4:9f:37:f0:f6:23:a0:b7:08:46:23:99:1a:61:c5:c7:d8:
c0:0c:61:88:8d:13:37:4a:71:f3:f7:cc:3e:08:d2:81:9d:1d:
b7:1c:ff:4c:fd:4a:81:c7:52:50:33:84:4b:af:57:93:cb:f6:
ca:4c:f6:c5:92:30:2b:dc:ac:b5:aa:f9:88:60:3a:fb:d6:27:
ee:c0:ab:7a:97:3b:bb:c1:82:54:dd:06:9d:b4:1e:51:43:41:
b1:71:e1:54:ea:12:2f:75:ae:57:67:93:6e:00:f5:e6:eb:7c:
57:21:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:52 2026 by rpki-client