Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CFE5BC108B11F1BB18EBC9DAE4EC9C.roa
File: 95CFE5BC108B11F1BB18EBC9DAE4EC9C.roa (raw, json)
Hash identifier: Dpb2BOtu9GgqAOthAPNBeOIFmHEiruTCGGVhHbKLtI8=
Subject key identifier: FD:94:60:40:E6:8C:E8:82:AB:B9:72:E7:4F:DF:D8:86:91:93:B8:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CFE5BC108B11F1BB18EBC9DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:45:13 +0000
ROA not before: Mon 23 Feb 2026 07:45:08 +0000
ROA not after: Tue 10 Mar 2026 07:45:08 +0000
asID: 139880
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106458 (0x19fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 07:45:08 2026 GMT
Not After : Mar 10 07:45:08 2026 GMT
Subject: CN=699c0588-fdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:7c:87:30:ba:22:57:82:09:cb:39:76:ba:
f6:0a:c5:e1:7b:9b:a8:f3:ef:68:fa:23:14:d9:5a:
e3:a6:f2:99:5d:2b:ec:74:64:e9:65:4e:7b:1c:6c:
de:16:c1:ef:c6:79:7a:56:44:f8:45:4f:2d:f6:a4:
f8:dd:30:5d:ad:7e:44:b9:c3:bd:1c:ea:92:cb:be:
41:2d:59:17:1e:c3:26:e1:cb:64:1f:6b:c9:3d:61:
d3:3c:7a:b2:10:74:3c:eb:da:85:ec:7c:be:3b:71:
ae:55:f1:3c:bd:65:91:dc:aa:5e:ba:84:f1:d9:1b:
c6:7c:2d:0b:26:43:86:7d:d5:29:19:47:da:46:c2:
ec:ca:ea:9b:f8:b6:f0:0d:1d:5e:7b:42:8e:f7:91:
4b:1c:0f:b9:4a:13:70:94:f6:7a:78:c1:6d:e7:d2:
84:45:28:c0:dd:c7:e0:bd:a5:13:6d:40:1f:1c:c1:
b6:8f:42:0a:64:15:4a:1c:87:21:05:c3:54:6c:d4:
fe:39:15:36:6b:24:b4:ad:b3:4c:5a:12:3c:4d:84:
80:e8:78:e0:df:5a:33:15:82:f8:c6:1d:56:d3:31:
d0:8f:22:66:7a:a5:4f:71:04:ea:b1:e0:78:ba:07:
f3:1f:c6:1e:c6:c7:0c:37:90:99:98:fe:35:6a:8b:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:94:60:40:E6:8C:E8:82:AB:B9:72:E7:4F:DF:D8:86:91:93:B8:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CFE5BC108B11F1BB18EBC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
06:92:87:d9:9d:65:16:5e:8a:71:64:ba:ca:9d:d7:c7:5e:4d:
b2:04:a0:d4:9c:87:b2:1c:2a:73:2f:8f:81:b5:b1:74:30:34:
9e:b2:06:34:78:d9:0a:32:14:fe:a2:47:b2:28:22:77:0d:ca:
eb:0b:75:1f:1a:ef:71:ab:31:f0:9e:67:c5:fe:94:d8:e5:fd:
f7:cc:fb:71:85:a3:1c:d5:95:d5:e4:07:64:2f:94:c9:1f:44:
5c:bd:9c:29:0f:28:c4:f4:4e:26:f1:2a:8a:2f:aa:ca:35:cc:
a0:3f:5e:22:7b:6f:8b:40:4f:74:e7:53:ee:96:c0:3a:06:d4:
12:69:02:dc:88:dd:e7:04:e7:58:e6:db:34:07:ae:2b:ff:3b:
79:1f:52:f4:03:34:79:6e:d2:74:7c:37:2a:2f:35:8c:37:a2:
23:a0:64:12:2a:ad:08:85:cf:37:53:fc:7b:88:87:0b:7f:0f:
2d:da:35:36:4d:30:2d:29:06:ae:7a:68:35:e2:ca:50:da:d1:
c9:ce:18:4b:bc:ab:58:9b:d4:a5:96:92:a3:61:6a:74:7c:81:
3b:f2:66:b4:8b:9b:53:bb:17:9f:3e:58:af:7b:7e:9d:34:32:
e0:76:43:07:0f:0d:0d:95:80:e9:a8:5b:7e:bc:63:33:c8:69:
b6:d8:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:25 2026 by rpki-client