Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8ECD1B815E111F194199E80DAE4EC9C.roa
File: A8ECD1B815E111F194199E80DAE4EC9C.roa (raw, json)
Hash identifier: cdCdUBnW9DeOSLY2CCuF2SPWdLRA1/fV5LPJIm6fc6I=
Subject key identifier: FB:5C:B8:D7:0F:34:6A:D3:CD:CE:98:63:D1:AD:05:A4:FC:68:7B:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A19B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8ECD1B815E111F194199E80DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 02:43:57 +0000
ROA not before: Mon 02 Mar 2026 02:43:52 +0000
ROA not after: Mon 09 Mar 2026 02:43:52 +0000
asID: 138990
IP address blocks: 156.227.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106907 (0x1a19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:43:52 2026 GMT
Not After : Mar 9 02:43:52 2026 GMT
Subject: CN=69a4f96d-dc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:a0:3f:32:3b:d9:c4:86:9a:47:f5:77:fa:
f0:a6:e8:fe:c8:67:f9:d3:e9:0c:e4:68:c5:65:2b:
a1:44:39:e0:db:a2:df:a1:a5:a7:61:1a:70:cb:40:
55:1a:a7:da:89:4c:b1:36:e8:91:d7:a4:e8:19:4c:
b1:1b:5a:a6:48:88:73:a6:e4:33:3f:b9:0b:f8:9f:
65:fb:20:17:8d:30:a8:03:31:43:5f:38:e3:4a:d9:
2a:06:97:cb:4b:c3:0c:3f:a4:6b:b5:33:1b:dd:95:
b0:61:db:08:7e:fd:60:07:03:f5:0c:a4:5c:93:e9:
33:57:97:3f:35:f4:c1:78:67:6c:53:fe:c6:c7:ff:
75:fc:27:c2:5d:2d:09:08:68:3a:0d:8a:32:aa:06:
90:f8:77:d0:87:64:51:9a:3d:67:de:4e:bf:d3:bf:
db:a6:1e:66:21:7c:6b:8e:1a:64:6d:dd:55:3a:e4:
85:67:47:37:fa:4c:8d:f4:e1:45:29:11:45:10:69:
63:1c:53:ba:80:26:c6:f4:2f:ca:97:41:ca:eb:71:
5e:29:86:19:b7:ad:55:c6:ff:0d:76:f5:38:f2:6b:
0c:93:5a:19:20:4a:9d:b3:2e:04:83:56:c4:b8:93:
ca:ea:26:67:40:e3:dc:5e:e6:9a:5a:47:32:9f:6e:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5C:B8:D7:0F:34:6A:D3:CD:CE:98:63:D1:AD:05:A4:FC:68:7B:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8ECD1B815E111F194199E80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
Signature Algorithm: sha256WithRSAEncryption
68:01:4b:ba:1c:fa:aa:99:7e:81:83:0a:72:a9:28:7a:c5:16:
e9:69:15:cb:4d:b2:52:39:04:d8:a5:43:93:de:e6:5c:22:5b:
e0:f4:a0:ff:0d:ad:91:45:8a:6a:74:4c:ee:f7:66:ff:a8:0d:
9f:f2:25:56:2a:a7:ca:2a:1c:e3:83:f7:d8:8c:88:bb:8e:ad:
b1:f8:07:47:23:91:4f:04:7f:7d:f4:1e:9d:39:c8:4a:67:06:
4e:c1:4a:ce:87:7e:0d:ed:4a:3e:25:00:f4:fa:39:21:94:2a:
7c:c6:52:d9:84:a4:53:de:f9:80:be:57:a6:4d:7b:84:73:3e:
7c:75:5b:b3:1e:67:b4:8d:d8:f2:ad:d6:17:89:30:15:5c:97:
80:6f:a0:aa:4d:da:90:0e:62:7b:18:be:0b:fe:4c:0e:ae:db:
d1:16:e3:8c:dd:e4:63:a2:46:b5:05:6d:fa:e4:56:58:d7:c8:
05:74:79:4d:98:80:b8:96:bc:85:31:00:63:07:2f:30:55:cf:
5a:9d:1f:56:fc:6a:17:64:30:ce:a8:98:5a:3a:0d:90:59:3b:
f2:47:71:62:3c:d0:1b:71:7b:58:8a:e2:6d:83:75:ac:08:f3:
c2:f0:6a:6a:14:97:15:f5:92:2c:ba:fe:e1:9c:b7:02:07:ba:
de:c4:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:53:38 2026 by rpki-client