Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB83C4E0F0711F1A80E707BDAE4EC9C.roa
File: DBB83C4E0F0711F1A80E707BDAE4EC9C.roa (raw, json)
Hash identifier: bhUhT1fqkyvh6IulEGcfNQFcHFJ7dU3pmH/bMRJg0DA=
Subject key identifier: C7:59:9A:CC:0D:0A:74:2B:59:F2:44:EC:56:7A:1E:74:C6:63:97:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB83C4E0F0711F1A80E707BDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:29:45 +0000
ROA not before: Sat 21 Feb 2026 09:29:41 +0000
ROA not after: Tue 24 Mar 2026 09:29:41 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106318 (0x19f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:29:41 2026 GMT
Not After : Mar 24 09:29:41 2026 GMT
Subject: CN=69997b09-d876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:67:11:5e:29:3c:8f:b4:82:45:7c:2b:02:
36:58:2e:e5:c3:10:76:c4:65:51:e0:eb:36:15:6e:
3d:a9:e8:47:79:a3:37:80:5e:70:46:e4:89:aa:1e:
d3:ec:6f:1b:34:d4:ca:95:22:07:1b:82:46:73:51:
15:a7:f3:ce:4f:9d:e3:92:56:56:13:98:f0:b9:dd:
5c:47:cc:96:bc:21:af:22:64:ba:59:a6:b6:e8:c5:
13:e2:81:d0:aa:a0:94:fc:e8:55:52:16:d8:ad:e0:
0f:8e:12:16:04:f9:f2:da:54:ad:a7:eb:d4:33:fe:
15:15:58:be:05:65:0a:24:c0:cb:6f:b8:29:3a:32:
1a:d2:29:22:e6:92:56:79:da:6d:3b:5a:18:b4:7a:
cd:e1:7e:85:86:4f:3f:12:3f:a2:fd:6d:01:f4:62:
d2:5f:0d:01:5c:cd:9a:01:74:c0:b8:6c:aa:03:b5:
cd:67:d9:a6:9f:9b:77:ff:b5:2e:c3:f0:b3:ae:a4:
8a:54:ce:b0:14:4b:eb:14:34:9f:73:87:25:ef:ed:
06:45:d7:a2:f0:57:ee:33:7e:dd:01:e2:d2:0e:98:
5f:ea:b3:90:ea:d5:b9:21:87:8c:29:79:1a:3d:6b:
ff:6f:f7:29:88:49:62:e8:17:35:49:4f:e4:3e:21:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:9A:CC:0D:0A:74:2B:59:F2:44:EC:56:7A:1E:74:C6:63:97:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB83C4E0F0711F1A80E707BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
87:5b:29:1c:a3:72:4b:0f:39:68:86:74:9d:77:b4:2d:fe:47:
87:d9:d0:63:8c:52:91:44:2c:89:0b:50:77:a0:59:ae:35:80:
a1:d6:c5:54:bb:c4:0f:b7:92:60:4e:bc:93:e8:25:33:14:da:
c1:fb:ff:5f:65:b9:d8:4f:11:75:40:fa:7d:fc:52:1d:6c:9a:
ba:99:5c:85:ef:c9:04:a0:3c:94:ac:68:f1:04:08:09:5f:72:
f5:90:4b:08:92:77:8f:e6:0a:39:69:8e:04:71:ba:45:b2:37:
36:63:da:14:d1:6d:1f:40:6f:3b:e4:e3:ce:81:85:d3:46:dc:
5e:61:9b:25:75:25:ac:13:bb:32:dc:ea:1f:63:de:7c:37:c7:
66:e5:39:00:24:5d:82:75:b0:3c:5e:86:93:49:e3:44:31:98:
20:37:da:f6:ec:a9:2b:01:fa:3b:e4:25:fc:d0:ed:32:c6:0d:
43:3a:5b:4e:ab:00:85:43:36:cf:dd:26:90:30:cf:08:3c:cc:
8a:8b:8d:a1:59:15:df:e1:2c:9d:65:7f:26:61:8f:a7:f3:f5:
b1:af:15:89:a4:89:0d:90:aa:39:fe:68:ec:44:15:61:4f:6b:
3f:46:b4:35:44:c2:02:a0:f2:31:90:3e:03:5b:3d:c6:48:67:
fb:9c:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:40 2026 by rpki-client