Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB5C918118011F18BCC06A3DAE4EC9C.roa
File: EDB5C918118011F18BCC06A3DAE4EC9C.roa (raw, json)
Hash identifier: LowCXrrHMmTRASFS/wXWj3YIIso4DB81X9BkmZkxIwM=
Subject key identifier: F9:9A:B7:AE:E7:3F:59:32:55:8B:82:C6:C1:AC:81:BB:B2:41:5E:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A017
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB5C918118011F18BCC06A3DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 13:01:27 +0000
ROA not before: Tue 24 Feb 2026 13:01:22 +0000
ROA not after: Tue 31 Mar 2026 13:01:22 +0000
asID: 44559
IP address blocks: 156.243.232.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.243.255.0/24 maxlen: 24
156.244.209.0/24 maxlen: 24
156.244.210.0/24 maxlen: 24
156.244.211.0/24 maxlen: 24
156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106519 (0x1a017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 13:01:22 2026 GMT
Not After : Mar 31 13:01:22 2026 GMT
Subject: CN=699da127-8afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:b3:fa:4e:0e:cf:df:ed:8b:f6:68:72:d7:
5e:ee:1a:b4:1c:57:00:26:9b:b7:de:b5:bd:95:b7:
17:7f:d7:1e:24:18:29:4c:1f:b6:d3:7d:f3:bb:08:
d3:b7:f7:64:cc:a6:59:2f:53:c9:85:d2:1d:6a:d7:
5a:e2:84:5b:e7:87:3a:26:9d:f7:7e:27:31:67:b8:
2f:07:81:46:2d:32:07:85:5a:b6:a1:55:50:e6:76:
82:b9:fa:73:17:d3:16:ce:c9:34:41:b9:9e:e6:ef:
1c:27:02:93:6e:e4:2b:2c:01:e2:5e:9f:c1:b0:9d:
e5:cd:54:2f:e0:1d:2b:43:bd:40:c4:5c:95:92:5b:
3c:71:ba:05:cf:c2:7a:3e:ea:ba:be:8b:9c:7d:e3:
54:2b:7f:f8:b1:37:42:8e:1d:49:ba:1a:9d:b4:4c:
f6:ba:7b:f3:5f:a9:2d:69:61:5e:b8:47:60:a2:2a:
68:1d:6a:f7:45:aa:ad:fa:20:df:57:98:9d:97:e5:
07:a6:fe:58:44:27:80:ea:e8:6c:00:5c:0e:5a:ae:
67:34:e3:1a:e8:5e:a3:e0:07:f4:4c:fc:98:92:9f:
70:7e:0b:1b:da:c7:26:cc:9d:b8:ac:8d:4f:d5:c6:
f7:36:34:b8:fc:29:ac:4e:2d:2b:fc:cd:b6:5e:7b:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9A:B7:AE:E7:3F:59:32:55:8B:82:C6:C1:AC:81:BB:B2:41:5E:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB5C918118011F18BCC06A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.232.0/24
156.243.249.0/24
156.243.254.0/23
156.244.209.0-156.244.211.255
156.248.6.0/23
156.248.20.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e8:ad:25:bf:2d:f4:bd:93:aa:11:49:93:a5:b2:39:c8:b7:
b3:77:c7:21:7a:89:76:01:61:ce:8d:b2:bf:da:3d:fa:03:6a:
ff:51:8a:12:40:88:44:ea:2f:37:9d:e7:1a:82:44:23:87:a5:
35:d7:09:95:25:4d:27:6c:b1:8b:ea:6f:cd:fd:d2:82:ad:95:
24:67:34:44:ae:f6:be:80:ea:52:5e:9d:6a:cb:28:17:6f:9e:
06:b8:c4:52:dc:19:57:cc:82:38:a9:63:47:ea:d1:69:c5:76:
8b:3a:41:0c:1b:f8:80:9f:aa:8b:91:38:e5:93:75:14:e5:95:
13:ac:d3:c4:8a:fe:a4:3e:8d:24:b1:cb:41:2c:54:48:11:64:
1d:5f:bd:c8:4b:80:19:e3:fe:e6:d0:f5:25:5d:a5:e2:2d:6e:
96:06:e9:47:c5:f9:7f:de:e0:bf:d7:8e:e0:e2:37:67:25:a5:
92:90:c1:52:5e:3a:60:0b:f0:9b:30:a8:7d:f3:c0:b4:1e:48:
70:6a:74:6b:62:25:fb:db:13:cf:b8:af:72:fe:8c:37:17:ea:
ac:aa:07:60:c5:13:cd:a5:05:3c:18:df:83:b9:69:b8:4c:15:
69:5c:e0:f0:d1:0f:d1:1d:03:81:2b:6b:b3:20:5c:d6:b6:19:
3e:7d:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:42 2026 by rpki-client