Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C443CD08377A11F1851070BDCE1D38B0.roa
File: C443CD08377A11F1851070BDCE1D38B0.roa (raw, json)
Hash identifier: kqFfCJnKjYCiRUjZRngGf1gJzps1CdKjkZSejPhf/lk=
Subject key identifier: 9A:55:7B:22:77:83:0A:1E:51:91:3A:E0:66:BB:BE:DC:93:C5:28:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C443CD08377A11F1851070BDCE1D38B0.roa
Signing time: Mon 13 Apr 2026 20:53:05 +0000
ROA not before: Mon 13 Apr 2026 20:53:00 +0000
ROA not after: Thu 04 Jun 2026 20:53:00 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109712 (0x1ac90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 20:53:00 2026 GMT
Not After : Jun 4 20:53:00 2026 GMT
Subject: CN=69dd57b0-af64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:12:1f:09:47:6b:30:49:aa:2c:70:a8:0c:
fd:9d:50:73:44:82:d5:0c:7d:63:fa:61:9f:33:51:
62:71:c0:8d:0c:11:09:1b:9e:2a:25:c4:7f:b7:4f:
7f:14:b9:0a:54:90:f7:54:03:c3:ac:84:e4:76:18:
b9:25:8b:b2:2f:18:ba:b8:bd:dd:36:24:3e:84:42:
72:54:5d:f8:6b:30:04:d8:88:38:e0:69:0a:53:e4:
20:b3:75:64:c6:26:50:52:a8:f3:ed:7f:83:6e:4d:
62:45:06:2e:5c:55:35:7f:50:4b:5e:88:2a:ae:af:
b9:18:ae:e9:e3:46:6b:84:19:ab:41:e4:04:2a:42:
80:44:f4:57:19:24:bd:f5:18:55:ec:19:c9:a3:5d:
60:53:41:90:1f:8a:be:92:cd:fc:ca:6b:2f:1f:41:
6c:6f:96:0d:10:5e:16:41:c2:fb:6c:65:06:50:f6:
32:37:5b:1f:5b:d0:fc:ca:06:05:41:55:2d:9d:61:
ce:db:c8:b9:42:73:9e:17:02:f9:34:4b:48:8a:98:
30:13:42:88:c4:f5:2e:06:87:78:59:f7:25:66:b8:
0e:63:08:3d:b2:6a:92:6a:eb:cc:9a:9c:75:3f:6d:
98:3c:8e:5d:c6:74:52:c3:5f:9c:7e:76:51:aa:e8:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:7B:22:77:83:0A:1E:51:91:3A:E0:66:BB:BE:DC:93:C5:28:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C443CD08377A11F1851070BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:7e:f4:66:18:50:65:56:4d:45:03:d3:1c:be:58:0b:33:3f:
73:d4:af:28:78:53:fa:15:f2:42:3e:dc:22:33:c9:aa:f5:57:
9b:e0:8e:b7:95:ac:df:f9:66:c4:20:07:29:2b:6e:3b:81:21:
5a:10:5d:ed:f3:f7:95:d0:18:2a:a9:32:78:8f:43:cc:c2:f6:
2c:6d:d2:c8:66:40:ab:41:69:33:c4:39:cd:90:3f:2e:76:ed:
f3:93:f8:dc:b2:b3:47:e5:67:24:af:5e:2d:d6:78:65:2e:ea:
19:90:31:02:2e:20:4b:63:ab:7f:18:7a:e2:a9:cf:53:c9:3a:
89:b0:62:31:2b:95:b9:ec:e7:31:3e:f3:a1:77:6d:b1:be:08:
a9:d3:65:f1:f0:9a:ef:97:c5:3c:76:fc:03:34:7a:5d:be:41:
39:d2:43:e0:fe:fd:20:e5:b6:aa:74:c0:de:70:35:88:04:22:
47:e3:16:27:be:c5:61:04:e8:0c:58:b0:50:51:1a:34:6f:4b:
2b:6c:ad:58:73:de:6f:22:dd:83:77:81:db:be:17:f1:24:0a:
d7:fb:62:de:33:95:f8:91:a7:7a:7d:ea:92:f5:bc:8c:fd:bd:
7a:ee:da:3d:22:3d:8a:5a:c9:b3:98:26:71:53:68:a9:32:ef:
73:e7:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:18 2026 by rpki-client