Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2BF8904396311F19D689EFCCE1D38B0.roa
File: D2BF8904396311F19D689EFCCE1D38B0.roa (raw, json)
Hash identifier: 7nhGu3UwfZUnWCrXC/kgZlMGcdy2o4ZKbzhSj2pS5Ss=
Subject key identifier: 64:74:21:93:BB:F5:5F:79:12:0E:7C:75:5C:8B:4E:25:53:47:E7:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2BF8904396311F19D689EFCCE1D38B0.roa
Signing time: Thu 16 Apr 2026 07:13:53 +0000
ROA not before: Thu 16 Apr 2026 07:13:48 +0000
ROA not after: Sat 16 May 2026 07:13:48 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
156.226.180.0/22 maxlen: 24
156.226.180.0/24 maxlen: 24
156.226.181.0/24 maxlen: 24
156.226.182.0/24 maxlen: 24
156.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109823 (0x1acff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 07:13:48 2026 GMT
Not After : May 16 07:13:48 2026 GMT
Subject: CN=69e08c31-089c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:66:70:ff:bd:85:26:22:fd:53:50:06:d7:d0:
a7:54:4d:48:12:b2:42:ae:8d:a0:4d:f9:c1:74:d2:
73:96:b6:a8:8b:15:0a:81:00:a7:f9:ae:90:8d:7d:
fc:1d:88:90:17:5f:b9:61:0c:b2:9d:03:c5:33:b1:
67:b9:fd:0d:30:c6:ba:d4:4f:0e:8a:16:ba:8d:cb:
77:c3:3a:ac:cf:6e:33:81:12:fc:62:48:c7:df:42:
06:b5:ae:6c:ed:dd:90:4f:a8:8f:37:3c:81:e9:2e:
b9:e0:3a:1a:ab:47:63:b7:23:f2:eb:bd:12:b3:0e:
49:d3:a9:05:d0:64:c0:6e:c7:07:90:20:ce:5f:63:
58:4e:ec:24:b0:5d:32:9e:d7:75:25:be:03:9d:06:
86:6a:d5:93:b1:dd:d3:c9:4e:29:93:3f:85:d0:59:
71:4a:99:63:cc:a6:3f:7b:7a:16:b8:cd:f3:01:db:
b5:3c:d4:fa:30:03:f9:73:5c:a9:84:c6:28:32:13:
99:da:da:17:24:6a:f0:be:50:9f:98:13:1f:f3:94:
05:42:53:e4:2d:f4:ce:ed:2c:26:cb:da:35:e6:f5:
6e:17:ff:9b:d7:69:e2:5e:0d:db:8e:37:11:54:1e:
86:78:cd:15:60:56:10:b2:4b:c0:f4:bc:91:84:f8:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:74:21:93:BB:F5:5F:79:12:0E:7C:75:5C:8B:4E:25:53:47:E7:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2BF8904396311F19D689EFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:5c:ba:d1:79:4a:5b:eb:65:83:ef:64:d3:26:45:75:ae:05:
f7:7d:64:c5:94:78:c2:4a:a8:28:9e:b8:de:9b:0e:a3:22:1a:
be:49:70:51:4d:11:a0:05:13:c0:c4:39:82:50:2a:14:ce:e3:
ae:e9:f1:57:9e:46:00:3e:5f:1f:27:b9:0f:25:43:aa:e8:2f:
7e:2f:57:c1:e7:bf:7a:3a:b8:77:9a:01:fb:91:70:af:aa:2a:
72:8e:ef:98:d6:d0:ca:a7:19:2f:f6:73:97:d9:9c:c5:c4:79:
2e:89:ab:79:55:c3:41:44:20:8d:f5:72:73:5b:08:e3:24:e6:
83:82:a9:38:7b:a1:33:b4:60:96:98:07:be:7e:84:5f:cc:da:
d8:81:10:85:d2:77:0a:de:a0:37:fa:fe:0c:f9:84:8a:5a:c2:
4f:47:a5:c7:fa:e2:b3:1d:72:8f:45:b5:3c:9a:a6:17:8d:e8:
f4:64:00:cd:e7:26:64:88:bc:b8:a5:0b:d9:33:1c:5a:2e:56:
bd:35:52:9b:52:b4:38:35:8b:55:9c:0e:1f:73:6d:8c:59:1f:
79:f9:9d:2c:ff:b1:5f:fb:d0:be:95:4e:76:4a:e4:5f:6b:bf:
aa:d9:90:5d:d8:90:f1:a3:20:8f:06:61:6e:58:f0:fb:f9:f1:
f5:a9:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:22 2026 by rpki-client