Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E10BAB813BE11F1AA6C68E7DAE4EC9C.roa
File: 9E10BAB813BE11F1AA6C68E7DAE4EC9C.roa (raw, json)
Hash identifier: K3QufK8sg1JhkRvK1LMjF2YO+YUhLkOEDFTuZHNONuI=
Subject key identifier: 70:8D:D0:87:89:14:34:B2:38:29:88:D8:08:02:F0:70:18:F4:7B:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A11A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E10BAB813BE11F1AA6C68E7DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 09:28:04 +0000
ROA not before: Fri 27 Feb 2026 09:27:59 +0000
ROA not after: Wed 01 Apr 2026 09:27:59 +0000
asID: 9304
IP address blocks: 156.245.136.0/23 maxlen: 24
156.245.152.0/22 maxlen: 24
156.245.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106778 (0x1a11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 09:27:59 2026 GMT
Not After : Apr 1 09:27:59 2026 GMT
Subject: CN=69a163a4-34bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:ef:20:92:ef:ed:7b:c9:c3:98:22:b2:80:
ef:68:d0:dc:e8:5b:07:ed:ce:e7:bd:cb:07:2d:4c:
ad:87:bf:57:ba:24:84:44:5a:6d:fc:e8:ce:8e:55:
65:a1:04:7a:9a:70:d2:22:b5:45:0f:91:ad:91:ae:
f5:f3:e3:2f:dc:50:c3:f4:1a:0a:f3:28:95:f2:aa:
67:f2:92:8f:67:b5:1b:93:8d:cd:0c:1a:83:3c:11:
ef:24:ba:fb:d5:c7:8f:37:fd:4a:fe:b9:3a:91:77:
b5:ce:8b:57:95:c2:68:77:d1:4b:eb:60:e8:62:90:
67:c0:0d:1b:85:58:87:06:67:87:1f:2f:96:4d:10:
4b:ba:6d:66:fb:24:2d:fd:17:99:03:98:8a:27:e3:
a9:6a:8c:53:80:6d:cd:87:eb:bc:00:9e:57:7f:a1:
8c:87:a7:b8:50:40:58:5c:3d:f7:17:d9:8c:9b:fe:
34:77:0b:83:4f:67:59:45:13:47:c8:02:dc:94:0c:
cb:35:a8:d2:60:84:96:62:03:b1:4f:31:c4:f4:c7:
bc:22:54:49:0d:40:af:6a:ab:5c:48:a4:5e:ed:d3:
3a:ce:c2:3b:1d:78:50:2c:55:13:87:1f:d6:72:6b:
81:b4:48:86:ba:52:33:3b:06:8d:ed:76:3b:de:79:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:D0:87:89:14:34:B2:38:29:88:D8:08:02:F0:70:18:F4:7B:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E10BAB813BE11F1AA6C68E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.136.0/23
156.245.152.0/21
Signature Algorithm: sha256WithRSAEncryption
99:ae:91:0f:77:e4:c5:57:8c:a9:ba:26:6f:95:41:89:23:7e:
c5:65:cf:da:38:9e:01:62:b9:9b:16:9b:3d:10:09:97:6d:87:
c5:f6:51:c4:ce:28:57:40:96:d2:bd:8d:9e:fc:d1:2b:c3:78:
ab:12:f6:d0:88:a9:21:9a:3a:2a:a3:6c:fa:31:55:85:94:f8:
f9:bc:14:d6:23:72:1a:6a:fe:f3:b8:5d:5d:76:c5:17:a4:a8:
06:18:cd:d4:90:ba:4b:22:3f:86:ab:66:fc:7c:8c:52:ab:54:
4e:90:86:26:9c:c6:c1:9b:37:f8:93:25:bd:95:2e:c6:2d:b6:
c5:41:bb:a1:44:fd:ba:99:8e:d9:fd:7f:6a:62:e1:08:2f:da:
7d:4b:1c:74:9d:43:e2:82:3d:ec:7a:67:97:b2:2c:08:44:58:
f6:15:74:dd:2e:84:05:36:3d:f9:33:47:9a:99:45:f4:d4:f8:
c6:e3:65:6e:f2:f5:5e:44:d8:94:cc:be:86:66:ad:7e:e9:9a:
6b:44:81:95:5c:9f:5c:90:ac:e1:ca:91:e4:47:e8:49:72:d9:
83:ad:9e:ef:ed:be:b6:73:e5:b3:b1:52:e0:9f:47:8f:dd:33:
3f:ff:78:48:2e:49:44:02:d5:52:14:c5:76:18:13:9d:b5:f8:
e4:fc:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:55 2026 by rpki-client