Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA83E0AE073711F19E361FEDDAE4EC9C.roa
File: CA83E0AE073711F19E361FEDDAE4EC9C.roa (raw, json)
Hash identifier: +mQZbBGf5qH5m6QZNb7SoNTk4McN62OukjNWZbIRdVY=
Subject key identifier: 7E:04:01:83:2B:13:D3:96:9C:2A:C4:C9:DC:7B:71:FE:EA:33:28:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA83E0AE073711F19E361FEDDAE4EC9C.roa
Signing time: Wed 11 Feb 2026 10:52:43 +0000
ROA not before: Wed 11 Feb 2026 10:52:37 +0000
ROA not after: Sat 28 Mar 2026 10:52:37 +0000
asID: 63023
IP address blocks: 156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105737 (0x19d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 10:52:37 2026 GMT
Not After : Mar 28 10:52:37 2026 GMT
Subject: CN=698c5f7b-b22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:1d:19:a9:00:2f:35:f1:34:0d:b0:4c:c0:
a8:38:db:2f:d5:ef:5b:3c:d3:82:7c:a1:ca:4c:a2:
27:43:25:5a:31:fb:9d:cf:de:dc:15:59:a0:ad:91:
14:12:34:2a:65:b0:0c:a8:3e:3d:08:58:22:39:38:
c2:ff:2b:df:62:ed:1a:b9:1d:d6:ac:5f:9e:64:de:
c4:f0:e7:e8:c6:6c:84:74:91:46:e6:6f:85:7d:ad:
ae:5d:d7:44:d5:f4:cd:d1:16:a7:da:0b:ff:e0:4a:
af:49:6f:a8:97:ff:4b:9c:0e:e1:a0:b5:b7:c4:28:
81:bc:dd:e9:05:f1:00:01:52:84:6c:bd:65:3c:86:
1d:46:a9:56:d6:be:b3:0c:fa:45:bf:ec:89:9a:e7:
5a:02:25:13:62:72:4a:80:30:eb:3d:6d:82:c2:46:
95:68:f0:7e:8d:80:d6:f9:63:ce:a8:ba:41:ae:d2:
e6:73:0a:d3:6c:ef:b3:33:4e:4c:a5:b9:93:b0:af:
2f:43:69:a2:7c:31:6c:57:ba:41:a5:2f:86:04:d3:
c7:00:94:9a:c6:30:a1:37:39:b1:5d:54:c6:8f:86:
4b:86:cc:f8:e7:c2:f8:68:a0:e6:99:55:a0:ef:64:
43:13:11:37:a8:d2:74:f9:a0:79:d8:38:84:d8:85:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:04:01:83:2B:13:D3:96:9C:2A:C4:C9:DC:7B:71:FE:EA:33:28:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA83E0AE073711F19E361FEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e8:a3:c1:03:45:26:e5:65:40:b4:bb:d0:1a:eb:d9:44:bc:
e7:08:57:25:d8:56:8a:e0:81:d0:a2:96:12:2b:b7:a6:42:99:
86:ee:f7:8c:9d:96:e6:52:c4:2b:a1:e1:0b:14:47:56:fb:cb:
f3:02:2c:41:e3:49:44:b1:60:7e:5d:4d:0b:26:b5:26:62:51:
fb:6f:34:fd:2e:55:66:24:35:82:45:bf:82:2e:89:c3:f3:dc:
8a:57:1a:2d:c6:a3:e1:2b:84:0b:1c:91:80:9b:77:92:98:fc:
9a:8a:94:81:5f:c0:ec:c9:f5:7d:27:1a:83:64:5b:86:35:61:
b0:ff:37:8e:f6:24:0e:fd:12:d3:e7:a9:55:31:9a:f0:cd:ed:
c8:eb:d3:bc:cf:1f:58:ed:e8:92:9c:47:c5:19:b6:74:53:38:
66:70:34:d0:ff:05:5b:43:02:41:69:dd:4f:22:38:fc:2d:60:
77:df:dc:a4:2b:a4:f5:76:0b:4a:3d:24:a9:fb:ea:05:aa:57:
ff:5d:9b:3b:14:1e:96:fd:e1:43:10:bb:44:b6:51:a7:c1:1f:
4a:b1:e6:ad:2b:0e:8f:0d:af:34:60:64:cd:60:73:3d:be:60:
73:86:b2:a2:32:93:3f:f2:9d:f4:50:42:12:97:77:39:55:c4:
d4:c6:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:02:41 2026 by rpki-client