Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D3EE030FDAB11F0B70E52C4DAE4EC9C.roa
File: 8D3EE030FDAB11F0B70E52C4DAE4EC9C.roa (raw, json)
Hash identifier: Z8JpWj/NDGTr/ZaQh3mbaH2Z5cvFpeleJS5zpyFlU1s=
Subject key identifier: 64:53:C6:7E:2A:AF:99:85:20:1A:16:FF:57:B9:E3:17:4C:D7:4F:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019AB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D3EE030FDAB11F0B70E52C4DAE4EC9C.roa
Signing time: Fri 30 Jan 2026 07:16:10 +0000
ROA not before: Fri 30 Jan 2026 07:16:06 +0000
ROA not after: Sat 07 Mar 2026 07:16:06 +0000
asID: 20326
IP address blocks: 156.229.48.0/24 maxlen: 24
156.229.60.0/24 maxlen: 24
156.233.54.0/24 maxlen: 24
156.233.69.0/24 maxlen: 24
156.233.70.0/24 maxlen: 24
156.233.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105145 (0x19ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 07:16:06 2026 GMT
Not After : Mar 7 07:16:06 2026 GMT
Subject: CN=697c5aba-3360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:d3:87:af:0d:3b:29:3d:df:82:ed:b3:0b:
af:c3:ed:dc:08:3a:67:67:e8:71:56:a5:0d:fb:73:
83:ef:ba:d6:87:b3:e2:8b:54:fb:2a:a3:26:d4:5f:
8b:1d:04:6b:2e:5f:15:b1:b4:fc:13:14:0d:28:59:
7d:9a:2b:62:f5:a8:d8:ab:a8:da:46:8d:1b:67:28:
9c:ad:de:1b:f3:e7:20:e0:a8:4d:d9:57:c3:00:af:
e1:2d:56:c4:63:0a:1a:80:a5:8c:5c:ae:2f:63:07:
2b:ab:e2:c4:3a:ab:5a:22:75:c9:cd:f3:fa:64:0b:
46:ff:95:27:f4:d7:09:b6:1d:8a:fe:76:67:2e:c1:
a5:18:c6:8e:4b:eb:11:77:bd:cb:7c:dc:11:85:13:
b3:33:ba:38:d0:3e:8b:60:3a:8a:0a:8c:61:4b:8f:
65:f1:ca:c1:50:0b:dc:5f:93:4d:d2:34:e4:21:5d:
f7:f3:85:84:88:f9:5b:03:23:28:1e:45:65:0f:f8:
84:82:16:9a:07:f5:38:c8:64:6c:0e:87:50:b8:09:
d5:b4:74:45:ba:ae:14:87:96:2f:e5:81:89:61:09:
fc:30:9d:96:2b:3d:fb:65:25:43:cd:95:c7:3a:59:
a5:25:02:03:b5:5a:59:0d:a5:68:02:9e:52:11:38:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:53:C6:7E:2A:AF:99:85:20:1A:16:FF:57:B9:E3:17:4C:D7:4F:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D3EE030FDAB11F0B70E52C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.48.0/24
156.229.60.0/24
156.233.54.0/24
156.233.69.0-156.233.70.255
156.233.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e5:5c:b3:a3:bf:b8:5e:8c:c8:26:71:01:93:4f:88:19:a1:
a0:3d:a2:7b:85:b0:51:03:e7:b6:11:18:7d:b6:eb:5b:fa:5d:
51:74:11:9b:f5:4f:7b:e1:a6:75:fd:95:9a:03:e0:f8:dc:fd:
f1:81:a1:6c:61:17:ba:5e:eb:93:ed:13:88:2f:78:4a:c9:6b:
b5:40:92:10:e6:2b:d0:fc:3b:da:36:8a:85:2e:f1:67:f3:bd:
66:8d:09:d4:02:bb:5f:88:fa:8b:72:cb:e1:4d:50:37:4f:89:
b9:97:25:62:a5:9b:87:04:49:f9:e1:38:bf:89:f4:34:8c:d2:
cf:f8:df:05:c0:24:4a:2a:96:ba:fe:76:6b:ec:95:24:aa:90:
b0:4d:4d:de:9f:59:25:6f:1e:85:23:f5:68:72:fa:f5:98:f0:
4e:0e:fb:94:f8:9c:72:7e:02:45:05:4c:bd:5c:9a:1a:b9:e2:
1d:a5:c8:8b:07:82:e4:68:35:6c:ec:a8:a8:0f:66:61:bd:e3:
29:6d:17:54:01:e2:11:d8:e6:c5:c2:9e:b3:47:a2:91:bc:eb:
71:9d:ee:7f:bf:9c:f2:5b:58:09:8f:16:30:41:7d:8e:ed:d5:
ec:76:fd:f0:b9:10:d7:20:38:ff:2c:64:84:d4:c6:2e:66:99:
cf:60:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:40 2026 by rpki-client