Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8357CEAFA8911F09906C386DAE4EC9C.roa
File: D8357CEAFA8911F09906C386DAE4EC9C.roa (raw, json)
Hash identifier: Y0XKmpNjs9ksiP8vZybgM2FBysMGJhlkvmge806vtOY=
Subject key identifier: 95:A0:D6:45:18:D0:FF:0B:3A:03:EE:A4:91:4D:6E:E1:4D:BF:53:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0199E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8357CEAFA8911F09906C386DAE4EC9C.roa
Signing time: Mon 26 Jan 2026 07:37:20 +0000
ROA not before: Mon 26 Jan 2026 07:37:14 +0000
ROA not after: Wed 04 Mar 2026 07:37:14 +0000
asID: 205712
IP address blocks: 156.225.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104932 (0x199e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 07:37:14 2026 GMT
Not After : Mar 4 07:37:14 2026 GMT
Subject: CN=697719b0-593d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:e6:b7:aa:15:88:bf:dc:f1:5d:6e:77:46:
b4:49:55:c1:41:58:e2:69:b8:78:16:6d:8b:4f:92:
fa:e1:05:e9:d7:94:a4:db:2f:a1:37:91:ef:3d:99:
8f:e5:63:c8:fc:63:03:e3:f1:7f:e0:18:8e:5b:00:
80:2b:95:bd:29:7d:b3:b8:c7:e0:f9:4c:0d:19:6b:
f3:47:b3:f4:ee:ab:70:f6:bc:30:ad:d6:dc:cb:b3:
43:55:e0:b4:ff:5e:f1:ae:7c:1b:b6:63:d5:68:2c:
09:f4:11:a7:d7:0a:bc:7c:16:b9:07:55:99:c3:bb:
4a:e2:45:ca:a6:11:7c:01:4d:41:8e:25:9e:47:0e:
71:06:bd:e9:74:73:09:ae:59:50:8a:dc:a9:1c:b7:
ab:8f:07:fa:5b:da:66:02:5a:00:ea:8c:e6:f1:86:
55:26:fd:ce:b7:63:08:9b:ec:e3:5e:16:1d:e4:30:
f4:a4:d4:e3:80:df:96:8a:25:2b:33:d0:a4:d9:00:
52:09:3a:dd:a7:17:db:e1:5a:c1:78:d5:cd:cf:89:
54:04:73:61:8f:d2:5e:02:8f:e5:6c:64:46:8d:71:
ed:99:e2:be:2f:07:44:db:8f:f9:f8:6f:ba:e3:09:
a3:0f:60:03:cf:6b:ec:5a:18:79:59:c7:a0:37:48:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:D6:45:18:D0:FF:0B:3A:03:EE:A4:91:4D:6E:E1:4D:BF:53:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8357CEAFA8911F09906C386DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ea:74:84:c8:83:f4:f7:0f:20:06:72:43:29:f9:6a:df:52:
84:c1:9d:6c:b7:c3:f3:f4:78:78:3a:8f:89:39:5b:b2:06:cd:
ce:21:fd:44:85:c0:1f:1c:ae:58:64:de:20:57:87:82:97:08:
f3:91:ea:f7:86:b0:95:34:41:c7:2e:0f:25:64:45:8b:65:72:
cc:ba:37:c9:4a:83:30:62:d8:1d:62:fb:d2:fd:ba:8c:9b:b1:
b8:aa:e5:67:3d:3b:ef:00:64:11:b2:5e:46:d9:73:01:2c:6f:
20:d6:82:44:fe:41:9b:d7:81:0a:93:fe:04:16:fe:5f:fc:08:
75:39:68:1d:0b:fa:54:89:f4:c1:77:9b:27:f2:38:e5:cd:b4:
c5:22:04:0a:ee:94:9b:34:ab:69:9e:96:2a:ad:58:ef:73:a4:
67:02:e6:94:ec:73:e9:fb:dd:f4:40:92:5c:b4:67:2b:4b:1d:
f2:31:76:25:87:67:f7:79:b9:db:6a:20:c7:ce:d3:db:60:ab:
a8:88:e7:1a:9d:39:56:7b:0a:b5:4e:fc:21:76:d5:c7:87:65:
c1:7a:56:f3:27:ce:75:73:50:55:7b:e7:a4:0e:ee:1f:c2:b1:
73:45:fe:c9:25:d8:7e:67:7a:c4:1b:79:31:6a:f5:0f:51:52:
6e:04:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:25 2026 by rpki-client