Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D39DD5E4108F11F19A7E95E2DAE4EC9C.roa
File: D39DD5E4108F11F19A7E95E2DAE4EC9C.roa (raw, json)
Hash identifier: 9ueZyzKAg3eoRkbJwWmqR1Cs+SwJ8NVk0UkARj4JDG8=
Subject key identifier: 7F:48:46:1F:35:C5:03:A9:C5:85:A4:FE:FF:97:39:53:C6:AA:13:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D39DD5E4108F11F19A7E95E2DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 08:15:34 +0000
ROA not before: Mon 23 Feb 2026 08:15:30 +0000
ROA not after: Mon 30 Mar 2026 08:15:30 +0000
asID: 152705
IP address blocks: 156.245.200.0/22 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
156.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106472 (0x19fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 08:15:30 2026 GMT
Not After : Mar 30 08:15:30 2026 GMT
Subject: CN=699c0ca6-663a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:9c:ba:4a:e3:9a:4c:53:db:66:82:50:d6:
19:30:9b:d8:03:79:6f:0e:a5:59:78:2e:01:e8:bb:
28:8c:e0:59:91:d9:19:b2:67:38:74:61:04:34:41:
ea:4b:45:8c:3c:94:9e:36:5b:06:00:75:43:95:a4:
5f:f3:be:54:4e:dc:4d:31:68:b3:4c:5a:b0:37:fe:
3d:27:49:d6:15:b9:fc:17:f1:ac:1f:35:4a:a3:47:
a0:6c:fd:73:7b:29:c6:18:35:40:8e:00:7a:f3:c3:
ae:90:ec:89:25:91:1e:51:54:77:01:d8:9c:84:6d:
33:b9:49:2d:c8:99:94:99:86:0d:79:04:ce:5b:fd:
3c:27:68:13:c1:93:53:e5:d1:52:ba:ab:75:21:35:
3b:e1:38:9c:69:86:42:c7:94:90:43:5b:41:1c:c6:
e6:56:ef:85:8f:b9:1c:bd:fa:50:55:43:a9:e7:fb:
5f:8f:53:e4:83:95:0d:f8:0a:83:0b:b1:c1:23:83:
77:d6:d4:9a:4d:96:6e:49:b5:b5:20:6c:10:e9:69:
f5:df:de:36:6f:ff:87:22:8e:1d:28:f7:5f:66:10:
29:6e:0f:4a:ec:c7:5e:df:3f:d6:97:83:4c:89:bb:
7e:b4:07:16:9c:2e:24:69:4d:e3:55:9d:17:1e:04:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:46:1F:35:C5:03:A9:C5:85:A4:FE:FF:97:39:53:C6:AA:13:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D39DD5E4108F11F19A7E95E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
30:bd:b1:0b:57:63:a5:f8:9e:1a:2d:79:92:dc:77:e8:61:b6:
1c:c4:c4:68:ce:10:9e:6f:92:74:89:a2:3d:9d:3a:83:eb:ca:
4d:1e:43:68:03:b6:9d:1c:44:39:24:9b:92:ae:1b:e9:19:bd:
8a:1e:3b:51:59:7c:04:ec:04:b3:7c:1c:93:f4:e4:c1:3f:1c:
75:26:31:26:ec:6d:f2:bf:73:a7:6a:a4:0d:bd:e4:fa:4a:65:
22:e9:55:ca:f6:f6:f5:f3:90:b3:7e:cb:37:ca:43:e4:78:d2:
1b:c2:69:31:a9:00:82:df:4e:4c:17:22:4b:79:fe:5d:48:df:
d6:34:c5:d6:88:63:18:4c:57:f8:e6:a0:93:84:ed:6c:53:e2:
be:14:7a:36:49:aa:50:73:9b:f9:d3:f0:4b:72:92:56:55:7b:
7e:2d:b6:7b:5c:fe:33:1b:57:e3:a2:f1:af:c8:56:fc:08:1e:
06:cc:de:f6:09:92:cc:ba:15:6f:f6:d8:3e:73:59:80:cf:bb:
c2:64:3b:2a:7d:ef:1b:dc:7d:68:82:3a:a2:49:d1:da:74:b8:
dc:ee:f2:d6:d9:c1:03:39:21:21:56:98:54:c1:99:83:7f:a2:
63:4a:94:4e:c6:c0:95:25:21:ba:12:f5:42:13:4f:5e:31:5e:
f3:4c:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:40 2026 by rpki-client