Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F972B2097E11F18B8A11EEDAE4EC9C.roa
File: E3F972B2097E11F18B8A11EEDAE4EC9C.roa (raw, json)
Hash identifier: 8bMrH1aJ6Kyh7fNlsxq+Qf/JQAEjG56qvLq4sXODacY=
Subject key identifier: 29:4F:07:A3:D9:32:20:5C:67:77:D3:7D:3F:74:A4:73:24:E1:E5:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F972B2097E11F18B8A11EEDAE4EC9C.roa
Signing time: Sat 14 Feb 2026 08:26:42 +0000
ROA not before: Sat 14 Feb 2026 08:26:37 +0000
ROA not after: Sun 22 Mar 2026 08:26:37 +0000
asID: 401696
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105870 (0x19d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 08:26:37 2026 GMT
Not After : Mar 22 08:26:37 2026 GMT
Subject: CN=699031c2-5e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:39:4c:15:44:e8:4f:c2:e0:3d:1d:d7:27:
50:31:14:48:d1:9c:df:e0:53:da:0a:31:e7:49:c2:
a9:31:48:03:52:6a:9f:7b:12:16:29:46:8f:5b:3e:
89:d6:2a:ea:8f:3e:e5:15:44:b6:f6:c2:02:9c:83:
7f:ce:63:64:5b:be:4b:c3:99:b1:86:19:4b:3e:99:
df:77:c4:77:b5:19:1e:f9:65:6e:73:c6:a9:e5:8c:
d4:7a:0c:65:a8:68:e2:65:b7:3f:01:de:27:e1:b8:
e7:94:87:ae:68:27:cb:c9:63:1e:d7:79:c6:fe:c9:
62:20:dd:31:96:3b:7c:1e:53:04:e6:be:be:3a:9c:
42:a7:76:75:cf:c0:16:63:6c:ed:8f:01:a1:57:01:
84:41:3d:ce:c1:04:2b:58:82:d1:fe:6f:8d:e2:65:
0a:aa:d8:d3:ec:0a:25:e0:de:7c:19:70:94:6b:5f:
ec:98:8c:7d:31:0e:b2:8d:bc:81:52:99:79:01:cd:
fb:84:aa:07:7f:75:04:0e:98:4b:b4:72:9b:d7:8b:
4d:d1:6a:ce:b9:73:81:55:95:ba:5b:c3:2e:7e:73:
2b:54:77:58:0e:91:0b:f0:11:d9:6c:e2:6b:3d:1b:
5e:44:02:9c:86:cc:bb:2e:ad:e3:8d:b0:38:98:9a:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4F:07:A3:D9:32:20:5C:67:77:D3:7D:3F:74:A4:73:24:E1:E5:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F972B2097E11F18B8A11EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
14:5e:86:3e:96:27:48:14:1a:e0:ad:06:52:bc:8e:bf:20:f4:
c2:2a:82:aa:48:d0:c1:0a:27:92:47:2f:d3:72:1f:93:21:09:
62:bb:e3:69:2c:ba:3e:65:37:7b:44:33:2e:4a:50:b6:f7:11:
a7:74:fc:8d:9b:b2:3a:94:92:7f:1c:9d:7e:d6:bb:a8:42:38:
c4:7e:ff:a7:6f:74:40:58:6c:e3:0a:e7:a6:53:d2:dc:a9:0c:
5e:02:3f:03:28:11:ae:bb:9e:82:76:d2:1d:5c:f8:73:90:41:
2a:c2:65:99:e5:70:00:81:73:98:60:f8:70:82:a8:e5:f8:06:
de:cc:4a:a3:3e:45:bd:62:15:7e:48:ee:d1:14:af:14:ef:c8:
d7:d3:f5:d2:d4:2e:73:7e:7c:0b:f6:0b:fe:f9:e2:1b:78:01:
60:55:36:b9:28:fd:bd:85:6c:84:da:e6:f8:ad:89:b3:73:4d:
9d:51:bd:6d:5e:46:52:eb:98:b7:50:8e:6a:74:40:fa:50:3d:
89:20:a6:0e:6b:86:f1:92:2b:37:92:1c:66:53:58:6b:66:cb:
e6:4d:23:e9:38:a6:1e:35:7b:aa:93:e4:de:21:35:54:15:30:
d2:bc:4e:d1:c2:e8:66:55:5c:6f:82:f6:a5:d0:0d:4c:b0:5b:
13:63:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:57 2026 by rpki-client