Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FC576CC353A11F1AEE49DF2CE1D38B0.roa
File: 8FC576CC353A11F1AEE49DF2CE1D38B0.roa (raw, json)
Hash identifier: dVIVPDEnLscaewK0NnwxMc3DJtO89dfGCtswaAdPwLI=
Subject key identifier: 3A:77:E8:30:C0:84:98:2B:13:61:EB:46:00:B6:34:29:B2:5C:57:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FC576CC353A11F1AEE49DF2CE1D38B0.roa
Signing time: Sat 11 Apr 2026 00:08:26 +0000
ROA not before: Sat 11 Apr 2026 00:00:22 +0000
ROA not after: Sat 18 Apr 2026 00:00:22 +0000
asID: 137899
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109532 (0x1abdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 00:00:22 2026 GMT
Not After : Apr 18 00:00:22 2026 GMT
Subject: CN=69d990fa-63ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:ac:63:cb:28:8a:3a:27:7b:c9:12:73:65:
73:57:33:7d:28:bf:0b:3a:83:d9:4b:59:14:11:62:
60:4e:42:e6:1a:f6:65:b4:22:b6:70:fd:4a:6e:5f:
8a:83:d5:ef:80:44:79:36:93:a7:b3:7f:9f:55:83:
52:94:7d:25:5f:2e:63:b1:08:41:79:4a:71:b5:9e:
ac:4d:30:52:9d:cb:b6:e0:69:c7:78:8f:72:79:82:
b7:2a:53:30:7c:c9:5b:f5:3f:0d:f8:6a:7c:35:6d:
30:2e:5c:6f:b9:53:2c:d5:ad:0c:a5:f6:25:75:4a:
6b:d9:95:30:b9:e5:c9:36:ee:14:88:c1:ec:8d:e9:
d0:1d:c6:62:35:11:c0:3a:c3:05:8f:d2:6a:fa:49:
04:b1:92:66:aa:9f:13:e4:0e:2e:8e:f0:f5:36:0b:
ec:33:12:bc:92:49:65:38:2b:ef:75:e3:05:00:fb:
08:2d:71:94:4f:1b:b0:01:b4:c3:2f:b1:b3:25:f3:
69:7b:60:bb:d6:33:1d:be:7e:cc:75:02:a5:88:01:
61:5e:23:bb:cf:cd:62:2b:47:4a:86:68:88:86:7a:
1e:c5:1b:ae:a6:8e:97:fd:f9:2d:c7:68:84:c8:e9:
7d:63:01:3a:84:1f:06:f4:98:76:ca:ef:a2:47:8b:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:77:E8:30:C0:84:98:2B:13:61:EB:46:00:B6:34:29:B2:5C:57:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FC576CC353A11F1AEE49DF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:1c:85:21:34:bd:a1:31:6d:88:94:88:3b:0c:6a:a2:f6:42:
6c:df:8d:a0:4b:57:5c:0f:20:d5:7f:5a:db:07:f8:81:5d:47:
57:91:16:63:8e:10:ed:eb:ba:82:f9:cf:3a:07:bb:95:e7:ff:
62:ef:ad:ee:28:75:6a:d6:dc:06:be:75:ca:c1:8c:d4:ff:46:
de:96:1e:6a:a7:9a:b4:8b:1a:b3:87:d5:cb:c6:34:1c:85:41:
05:c1:24:64:ef:8f:31:f7:30:b0:7f:28:fe:a8:19:51:fd:16:
22:2e:5f:0e:8e:66:b4:1e:07:1c:24:3d:c8:0e:0b:8c:55:1e:
90:fb:82:76:72:45:26:a5:84:2e:90:47:71:3a:ba:78:4c:14:
3d:79:06:3b:3c:7e:cd:b3:b1:97:60:c3:31:4f:73:8d:2f:d0:
01:34:1f:5f:83:0f:1d:91:3d:ef:72:da:6b:ed:d4:94:cf:0a:
dc:a0:c6:e8:96:13:35:fe:b1:db:22:10:9a:4d:cc:5a:b8:8e:
ee:9c:52:88:9c:22:f9:7e:83:4c:e5:46:0e:4c:1f:03:6d:e1:
e3:07:bd:80:28:81:ed:75:36:35:6c:08:79:00:ff:be:43:64:
5d:f7:c8:a2:d9:48:55:29:27:d2:05:bf:cd:06:25:ec:57:94:
32:a3:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:18 2026 by rpki-client