Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2BDB97E019711F1BC4AB0E4DAE4EC9C.roa
File: E2BDB97E019711F1BC4AB0E4DAE4EC9C.roa (raw, json)
Hash identifier: Aaxz5709xq1F6ZAOwzYQmMoJXkJmVZtnr7oNJbIpEUo=
Subject key identifier: 58:BF:F0:78:8D:A0:81:B5:52:DA:54:95:2F:1F:02:85:CB:6A:A1:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2BDB97E019711F1BC4AB0E4DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 07:05:28 +0000
ROA not before: Wed 04 Feb 2026 07:05:23 +0000
ROA not after: Thu 12 Mar 2026 07:05:23 +0000
asID: 138915
IP address blocks: 156.244.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105407 (0x19bbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 4 07:05:23 2026 GMT
Not After : Mar 12 07:05:23 2026 GMT
Subject: CN=6982efb8-ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:12:bc:80:74:25:4f:41:43:c1:b0:cd:d9:
d2:df:bc:68:80:dd:7e:40:fc:43:52:ae:96:e7:69:
eb:99:9c:5c:ec:b2:28:b3:93:06:3b:b7:71:71:0a:
bb:e3:6b:85:a8:ed:5c:6d:79:ba:50:da:27:4e:60:
18:c0:d6:34:d6:2a:71:c8:ba:9d:71:58:ca:45:0e:
09:95:0f:46:25:f8:2a:95:e6:9a:13:fb:b8:19:d9:
7b:74:6b:4e:f5:e0:20:da:d6:d6:fc:67:22:c3:ba:
28:2a:42:69:15:2e:40:68:5b:aa:00:37:1b:62:6b:
03:14:6a:2c:3a:35:bf:52:5d:12:d7:72:d2:d6:3d:
99:32:a6:cf:11:dd:22:80:60:7a:f5:a8:65:01:1f:
f0:a9:83:52:ad:25:fb:58:3f:f4:84:56:e2:82:78:
22:bc:e1:70:2c:fe:1d:aa:7a:9d:24:72:c9:4d:ef:
c1:7f:02:9c:55:f1:55:da:a7:20:14:22:81:ab:d7:
82:0a:5d:81:7f:db:6f:06:9d:dd:d1:30:ca:7a:cf:
50:ea:2d:b0:d0:aa:56:1e:f5:4e:7d:9a:e3:ad:33:
d9:d6:04:6a:b2:28:d5:7d:aa:2b:09:94:ea:97:3f:
bc:ea:4f:87:ff:a3:9a:58:7e:d7:21:ab:7c:45:9b:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:F0:78:8D:A0:81:B5:52:DA:54:95:2F:1F:02:85:CB:6A:A1:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2BDB97E019711F1BC4AB0E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:67:b3:70:c2:50:c9:2d:be:fe:7f:d4:b6:04:f8:3b:97:c9:
c5:4c:5c:ea:90:47:d4:6e:45:9f:86:3f:a0:6d:73:71:a6:14:
dc:72:df:f6:83:d0:7f:d2:81:ca:f8:71:8c:20:83:c8:9a:6c:
2c:42:af:17:ac:5f:57:f4:14:d5:90:66:e1:60:65:40:18:c6:
29:74:93:8e:86:66:b6:0a:42:75:a4:76:3b:f9:0b:48:fd:55:
10:22:b4:9a:ed:be:ca:a6:3e:6a:6d:a6:ae:35:29:17:0b:c9:
ac:cf:f0:b3:21:a4:22:cb:0f:09:72:9b:e2:a4:85:bd:c2:d1:
d9:e7:d3:bd:b2:a9:d3:45:14:c0:04:33:db:63:2c:b9:c9:0b:
e6:aa:c5:80:bf:50:48:9b:c7:f8:70:95:d6:f9:ae:d6:31:c9:
2e:f8:59:aa:1f:08:a4:6a:62:fa:08:91:5b:6e:1e:8d:bc:5d:
24:cb:64:61:e8:6c:63:2e:b3:61:d0:80:78:d8:a0:41:18:08:
b1:6a:d4:21:fe:c4:6b:ae:bc:34:d1:9a:ad:64:19:96:83:19:
b4:51:ff:12:0f:bf:ab:ae:54:95:01:5f:3b:4f:05:26:ab:a8:
cb:c8:17:3f:11:65:d8:8d:c5:00:15:15:c7:e2:d2:ff:09:87:
6e:2d:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:01 2026 by rpki-client