Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A45027B6097211F19ECB6BA4DAE4EC9C.roa
File: A45027B6097211F19ECB6BA4DAE4EC9C.roa (raw, json)
Hash identifier: N4B9KUFG+YjEpwF11n2spkLNagVfjJZHsP12SLn/UKw=
Subject key identifier: F4:80:98:33:8F:38:D1:7B:F6:C1:63:38:17:79:C5:1E:2C:FE:F8:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A45027B6097211F19ECB6BA4DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 06:59:02 +0000
ROA not before: Sat 14 Feb 2026 06:58:57 +0000
ROA not after: Thu 19 Mar 2026 06:58:57 +0000
asID: 202437
IP address blocks: 156.228.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105838 (0x19d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 06:58:57 2026 GMT
Not After : Mar 19 06:58:57 2026 GMT
Subject: CN=69901d35-e8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:06:71:04:1b:7b:df:88:25:a8:19:ec:ea:
67:19:00:0d:ec:72:3c:6c:3c:98:25:f3:88:60:63:
de:ae:6f:4d:c5:06:54:62:c8:19:6d:6b:15:bb:28:
8d:06:64:1c:4e:b6:b4:97:dc:b9:7e:f3:82:03:06:
20:b0:53:3b:05:cb:54:97:04:98:62:ae:70:c8:e4:
ec:13:aa:c2:17:ad:29:c9:75:71:99:38:f3:ca:d1:
ba:ca:01:25:7f:64:83:a1:f4:ed:bf:ab:fe:6c:a1:
19:16:42:fe:dc:03:f9:fa:91:18:0a:0a:e5:ff:42:
27:8b:e0:7f:35:af:60:3e:1b:66:50:60:43:fa:65:
9e:50:38:8c:b8:0c:ba:20:3c:19:8e:d7:89:87:5a:
f9:14:4c:ee:25:d5:bf:3e:28:c2:b0:97:d1:75:8d:
c4:29:e0:ca:a8:db:0e:64:71:74:0b:f2:1b:37:96:
4f:d3:82:cc:8f:bb:70:7b:b7:9d:e4:64:6a:9d:0d:
a3:3f:b4:5d:47:65:bb:e5:54:7e:c2:af:eb:51:ce:
51:9d:71:eb:d5:2d:d3:e5:23:f6:16:6e:b4:32:63:
db:f8:5d:b0:c3:ce:c2:d3:85:e9:5c:06:a2:27:ce:
7f:dc:52:64:3e:4d:50:20:db:73:fb:3f:76:42:6e:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:98:33:8F:38:D1:7B:F6:C1:63:38:17:79:C5:1E:2C:FE:F8:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A45027B6097211F19ECB6BA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.4.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4e:e1:c0:37:fd:94:86:cf:c4:9f:a2:6a:25:76:3e:b6:e4:
6e:f0:ad:39:5c:4b:c0:29:e2:46:e5:2c:0e:65:56:6d:57:8a:
1c:ba:1d:4e:6c:bc:e5:98:59:44:82:7e:8d:7d:27:22:7a:6c:
2c:36:1e:8d:36:1e:42:71:88:1d:9e:f1:c9:56:26:f2:a0:f6:
fd:48:25:02:11:0a:51:92:c3:17:e1:a6:ca:36:3a:51:56:47:
1a:ff:00:7f:5d:85:fd:fa:08:c8:1d:97:87:af:0a:a7:9d:3d:
da:d1:7f:0a:a9:40:63:b5:ce:83:d0:48:1e:a2:3c:16:d1:56:
a8:88:75:ae:11:31:86:36:9a:cb:84:a3:27:b5:b3:91:63:3c:
8b:98:2a:25:89:33:76:5c:0d:10:9c:c6:cc:81:9d:a0:12:39:
75:17:8b:e3:9e:04:12:df:93:87:ab:1a:3c:c6:7f:d5:9c:a1:
b3:05:56:e3:ca:1b:05:42:a4:5a:22:da:b7:d2:fd:58:e3:b3:
fd:9d:57:aa:65:33:68:ea:f0:5c:71:22:84:c7:6c:ef:eb:ea:
36:33:21:cd:3f:9b:06:f5:73:de:c9:e2:30:c2:a7:49:e6:61:
54:39:80:d7:13:54:e6:93:fb:e6:46:69:81:e9:6e:9c:05:cb:
9b:2e:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:37 2026 by rpki-client