Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59FBBCFB5811F0A9CA1B7DDAE4EC9C.roa
File: CF59FBBCFB5811F0A9CA1B7DDAE4EC9C.roa (raw, json)
Hash identifier: O8xRv9NO26jsRnLKGRt9XWlSzSQkIYpoymImdQyk6Fw=
Subject key identifier: E3:E2:4A:BC:CD:14:4A:90:CF:8E:9D:29:60:55:7A:10:77:F9:9B:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59FBBCFB5811F0A9CA1B7DDAE4EC9C.roa
Signing time: Tue 27 Jan 2026 08:18:51 +0000
ROA not before: Tue 27 Jan 2026 08:18:46 +0000
ROA not after: Sat 07 Mar 2026 08:18:46 +0000
asID: 13335
IP address blocks: 156.224.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104993 (0x19a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:18:46 2026 GMT
Not After : Mar 7 08:18:46 2026 GMT
Subject: CN=697874ea-de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:10:0a:1a:55:ce:3a:91:f5:d1:ab:49:b7:
a1:e1:0f:7a:2e:7e:1e:1d:85:44:47:44:2c:88:35:
b6:7e:8f:3d:ac:d7:3d:47:2f:8a:2c:25:b4:6d:e8:
6c:6e:27:26:2b:1a:04:15:22:45:23:46:a9:ba:59:
83:17:53:e2:90:2e:6c:3e:9c:50:c8:5d:d9:00:1b:
c2:d9:69:42:54:46:8d:9c:a0:9f:ad:35:6d:81:06:
07:1d:23:7b:6c:ca:62:72:3e:6b:68:be:58:09:cc:
f3:01:b6:86:25:c8:b5:ee:17:c8:2e:70:9d:1a:c4:
cb:f5:a1:0f:35:67:dd:56:25:da:a2:e5:fc:b1:5d:
a5:83:3c:c1:bc:23:5d:e1:b0:da:3a:a1:68:61:3e:
94:b7:4b:f4:98:95:a8:99:18:a9:b2:2e:6f:a2:e4:
8d:b1:5d:ce:10:b2:74:b4:0a:77:ef:03:02:25:fb:
f6:d6:a4:c3:aa:af:e9:7c:9f:3f:62:40:bd:70:79:
d7:6a:17:a5:51:00:15:80:95:56:3e:89:82:01:97:
97:0c:4e:98:cc:b4:30:ff:3c:32:0f:35:44:9e:3f:
db:30:40:bb:4f:78:5c:5e:44:47:60:16:d4:22:a6:
f9:d8:8b:6c:a0:1b:4a:81:b2:01:df:3b:f9:66:aa:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:4A:BC:CD:14:4A:90:CF:8E:9D:29:60:55:7A:10:77:F9:9B:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59FBBCFB5811F0A9CA1B7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.73.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6a:88:73:45:e3:dd:79:52:ac:e2:0e:c7:29:fd:82:ab:73:
15:a6:34:b0:46:46:30:99:00:d6:f2:52:42:49:99:4d:bc:de:
fb:98:01:03:70:d7:7a:f9:47:be:60:50:db:ff:f0:8c:80:85:
ed:2e:0b:55:a0:1b:42:55:64:7a:97:cf:c7:7c:61:f5:b5:fd:
72:2d:3f:6c:04:9a:f8:b8:ef:56:cc:45:6a:75:c8:9a:54:94:
77:c8:f0:3b:e6:43:05:b8:29:a8:d1:1a:5b:c2:b1:ce:c8:29:
00:8f:3a:69:49:c5:4d:51:93:73:9b:a0:90:2e:32:09:5d:39:
e5:02:4a:27:34:de:31:b2:63:af:02:a9:29:96:cb:e8:9f:0c:
5a:ed:2f:c5:65:f1:e2:a4:e6:ed:ca:a0:e3:5d:77:48:36:8a:
e6:4a:57:b5:92:16:b5:2f:84:19:fd:52:e5:26:69:12:41:ec:
a3:53:dd:f2:cc:7e:ea:09:82:f1:2c:7f:2f:fb:b6:de:fc:3e:
32:c2:83:d8:45:fd:59:5d:32:1c:41:39:23:87:ad:ce:29:f9:
3b:7b:f5:f8:e1:ed:d3:19:71:06:ab:e0:6c:e1:e0:8c:62:6a:
dc:39:4a:e8:af:97:40:c3:ae:c6:51:fc:3a:e2:16:c7:bb:21:
53:40:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:29 2026 by rpki-client