Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF55D2362CB511F1AC97F8BBDAE4EC9C.roa
File: EF55D2362CB511F1AC97F8BBDAE4EC9C.roa (raw, json)
Hash identifier: M2Gj3Ri3gyWxplr3fIHINvVtdu7SanTRGPU8INTTjWs=
Subject key identifier: 7D:F0:24:98:9F:A8:6B:11:18:5D:0C:37:DD:6F:36:FB:63:01:CC:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF55D2362CB511F1AC97F8BBDAE4EC9C.roa
Signing time: Tue 31 Mar 2026 03:58:54 +0000
ROA not before: Tue 31 Mar 2026 03:58:50 +0000
ROA not after: Tue 05 May 2026 03:58:50 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108749 (0x1a8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 31 03:58:50 2026 GMT
Not After : May 5 03:58:50 2026 GMT
Subject: CN=69cb467e-5b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:ca:52:2b:dc:1e:b6:cb:ad:03:4a:42:04:
4c:58:71:24:dd:13:f8:b2:7e:ab:15:33:1d:44:4c:
de:ec:08:5f:65:17:8a:cf:ff:f4:2d:f5:5d:0d:ce:
84:02:2a:9d:9d:d9:c9:a3:50:f3:21:34:f8:6d:c8:
34:32:10:3d:88:0d:49:86:95:c5:36:ba:97:2e:54:
44:e9:e7:ef:f7:a6:c7:bb:d0:1e:cd:30:d5:0b:61:
46:c3:9e:21:78:ec:e7:1c:52:2c:09:7f:60:fb:cb:
ad:0b:d7:3d:1d:61:59:84:e3:54:99:81:20:32:fc:
c3:35:13:83:ad:7e:51:09:8e:e5:f1:41:1b:4d:54:
60:5b:28:68:7f:2d:83:5d:d5:e4:f4:4e:dd:5e:b5:
23:49:a7:2a:2d:05:0f:f8:a9:dd:68:23:02:25:89:
05:c6:35:2b:39:1b:25:b3:12:d6:e1:59:cc:d8:21:
20:c4:87:09:2e:99:6e:c6:eb:d8:00:95:73:4f:da:
45:69:fb:fd:b4:12:d3:82:f1:31:d0:8c:11:ed:1d:
2b:49:1e:84:6a:01:ea:2b:d0:ba:71:29:78:6a:b3:
9b:51:ba:18:85:27:55:e4:ec:38:1c:d8:48:ca:15:
9f:bd:e4:27:db:8d:af:6b:d2:0d:6a:96:69:84:3a:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F0:24:98:9F:A8:6B:11:18:5D:0C:37:DD:6F:36:FB:63:01:CC:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF55D2362CB511F1AC97F8BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e5:cb:1c:67:31:c0:90:d9:91:44:2f:11:42:54:b5:9d:e2:
76:9b:b8:00:c7:57:11:c7:80:6d:4f:99:df:c4:8d:7b:eb:a2:
8a:a6:d8:56:9e:3a:d0:64:ed:51:74:01:30:3c:be:bd:85:69:
07:58:bd:95:f7:23:2f:a2:f2:1f:74:d8:c4:e1:e8:08:e3:c2:
52:e6:36:74:85:e1:c1:2a:65:9c:cc:76:38:81:76:ca:82:e0:
de:a2:72:dc:bc:21:7f:98:5c:e1:d8:38:8c:ab:2d:15:26:96:
14:43:ea:b7:df:8f:27:5c:ec:be:5e:07:d9:16:86:13:09:a1:
6a:db:11:ea:ee:a9:5e:bc:bb:23:56:f3:f1:0d:45:08:f9:1c:
f3:78:db:4b:0c:46:be:5f:ce:25:28:45:c0:22:51:04:71:f8:
20:b3:9e:ee:ad:30:e7:66:90:a8:ee:f1:5e:39:84:7f:da:b3:
9c:11:7b:8e:9f:2a:38:e1:ef:72:d6:88:a4:1a:fe:67:3f:b4:
a5:8e:fb:1f:fa:fe:e3:1a:cd:bf:38:54:8c:30:30:76:a6:66:
20:51:67:06:7b:1b:0b:1d:9a:1c:51:65:37:46:6a:17:4d:15:
73:08:0a:58:41:2d:a5:cb:e1:87:1b:8a:98:16:7f:54:50:cc:
6d:14:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:58 2026 by rpki-client