Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90647CDE2CD111F1AFB382DFDAE4EC9C.roa
File: 90647CDE2CD111F1AFB382DFDAE4EC9C.roa (raw, json)
Hash identifier: XHC/ejCtZjiaFESerqTQpuTjE273bmvvYephdTo99ws=
Subject key identifier: D4:3E:B1:38:65:1E:BC:56:C7:2E:D0:55:35:01:7A:1C:5D:FF:B7:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90647CDE2CD111F1AFB382DFDAE4EC9C.roa
Signing time: Tue 31 Mar 2026 07:16:41 +0000
ROA not before: Tue 31 Mar 2026 07:16:35 +0000
ROA not after: Sat 31 Mar 2029 07:16:35 +0000
asID: 17561
IP address blocks: 156.242.82.0/24 maxlen: 24
156.242.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108763 (0x1a8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 31 07:16:35 2026 GMT
Not After : Mar 31 07:16:35 2029 GMT
Subject: CN=69cb74d9-c107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:ef:25:9f:cd:53:a1:72:b0:cf:e4:ce:f7:
7c:de:a6:01:37:cc:17:32:27:25:d8:58:a1:2f:96:
32:94:ec:13:f3:c2:00:3a:ac:eb:fe:58:cf:ff:f2:
ef:c4:10:a3:f6:a2:39:79:89:4b:63:70:e0:2c:d8:
55:ee:d3:88:f9:74:81:30:e9:52:7b:c4:7a:20:fa:
76:38:f3:b4:6d:c5:34:76:35:9e:37:39:3e:40:63:
57:6f:dc:39:f4:73:19:59:a4:e3:a0:01:7a:d0:0f:
36:5a:10:2a:93:c1:9a:80:96:1c:87:0c:5e:d8:75:
0b:d0:3f:e4:dc:a6:72:21:0d:cb:8c:7a:33:b3:f2:
3f:df:72:05:e0:78:4e:72:29:d9:e9:cf:51:b1:ab:
ac:73:da:c7:de:e6:c5:ed:56:51:0c:5d:48:b5:85:
ec:d5:96:2f:f6:17:62:30:bd:59:eb:5f:7e:63:cd:
cd:d6:6f:9e:a6:f4:09:b3:cc:2f:e4:61:da:92:5f:
2b:d0:e1:c9:53:4c:93:8f:01:aa:93:9f:7e:83:48:
7c:af:12:de:42:13:5a:c2:a0:75:03:70:6c:14:f9:
93:ee:b9:d5:a2:bb:13:56:59:59:30:be:de:f9:0e:
f0:6b:da:33:e7:6f:d2:ab:07:74:eb:25:04:cb:7b:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:B1:38:65:1E:BC:56:C7:2E:D0:55:35:01:7A:1C:5D:FF:B7:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90647CDE2CD111F1AFB382DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.82.0/23
Signature Algorithm: sha256WithRSAEncryption
43:31:5c:65:99:bc:44:a6:2b:12:0a:f8:f5:61:ef:00:d1:84:
c2:98:ae:c6:39:22:63:7e:3e:f5:ae:7c:7a:2a:82:cc:1e:f7:
1c:8e:c1:32:e1:63:1c:61:bd:78:71:8c:ca:cf:e6:86:3b:a8:
f9:6d:22:d2:77:f5:7d:ff:4b:3e:f2:84:17:40:82:0e:8a:62:
15:27:9b:ae:b6:9a:ee:2c:c9:6e:3c:79:84:a1:c6:a0:f7:10:
9e:be:58:1d:55:0e:ea:cc:e0:92:94:55:e7:92:ab:33:ed:5c:
48:40:ae:b6:df:b8:43:bd:1d:3b:fa:bd:ee:f5:e4:00:ce:d9:
f7:14:d4:1e:44:36:39:1f:34:23:5b:9a:27:8c:1a:f9:2b:fa:
b0:bb:ad:7b:ec:b7:7a:b6:52:cc:55:a6:ee:01:1f:f6:79:7a:
d8:82:1c:5b:cb:fc:eb:18:e6:31:c4:35:42:5c:97:ea:ed:ea:
7e:29:0d:c5:a3:ec:2b:c3:56:d8:53:19:3a:ea:3e:df:8d:69:
f9:3f:e0:6f:39:aa:b0:b9:3f:6a:00:e3:a5:4c:20:21:25:2f:
00:88:96:30:9b:49:b6:52:a5:ab:91:cf:48:cf:fe:17:9a:6a:
fb:47:44:97:7c:1d:04:36:e6:54:cb:63:7d:6e:e3:1e:94:72:
4f:50:c9:33
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAajbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzMxMDcxNjM1WhcNMjkwMzMxMDcxNjM1WjAYMRYw
FAYDVQQDEw02OWNiNzRkOS1jMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2sLvJZ/NU6FysM/kzvd83qYBN8wXMicl2FihL5YylOwT88IAOqzr/ljP
//LvxBCj9qI5eYlLY3DgLNhV7tOI+XSBMOlSe8R6IPp2OPO0bcU0djWeNzk+QGNX
b9w59HMZWaTjoAF60A82WhAqk8GagJYchwxe2HUL0D/k3KZyIQ3LjHozs/I/33IF
4HhOcinZ6c9Rsausc9rH3ubF7VZRDF1ItYXs1ZYv9hdiML1Z619+Y83N1m+epvQJ
s8wv5GHakl8r0OHJU0yTjwGqk59+g0h8rxLeQhNawqB1A3BsFPmT7rnVorsTVllZ
ML7e+Q7wa9oz52/Sqwd06yUEy3snawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNQ+
sThlHrxWxy7QVTUBehxd/7f3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MDY0N0NERTJDRDExMUYxQUZCMzgyREZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPJSMA0GCSqGSIb3DQEBCwUA
A4IBAQBDMVxlmbxEpisSCvj1Ye8A0YTCmK7GOSJjfj71rnx6KoLMHvccjsEy4WMc
Yb14cYzKz+aGO6j5bSLSd/V9/0s+8oQXQIIOimIVJ5uutpruLMluPHmEocag9xCe
vlgdVQ7qzOCSlFXnkqsz7VxIQK6237hDvR07+r3u9eQAztn3FNQeRDY5HzQjW5on
jBr5K/qwu6177Ld6tlLMVabuAR/2eXrYghxby/zrGOYxxDVCXJfq7ep+KQ3Fo+wr
w1bYUxk66j7fjWn5P+BvOaqwuT9qAOOlTCAhJS8AiJYwm0m2UqWrkc9Iz/4Xmmr7
R0SXfB0ENuZUy2N9buMelHJPUMkz
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:49 2026 by rpki-client