Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F30D3C4E0FA411F1A74E9CC7DAE4EC9C.roa
File: F30D3C4E0FA411F1A74E9CC7DAE4EC9C.roa (raw, json)
Hash identifier: BJL36Z+Ho314cWh+yAurYvU7q1ezb03qaeGsgvBMNGI=
Subject key identifier: AA:95:71:7D:E6:48:33:25:C0:75:10:EE:61:4C:CA:AC:AE:97:86:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F30D3C4E0FA411F1A74E9CC7DAE4EC9C.roa
Signing time: Sun 22 Feb 2026 04:14:15 +0000
ROA not before: Sun 22 Feb 2026 04:14:10 +0000
ROA not after: Thu 22 Feb 2029 04:14:10 +0000
asID: 17561
IP address blocks: 156.252.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106414 (0x19fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 22 04:14:10 2026 GMT
Not After : Feb 22 04:14:10 2029 GMT
Subject: CN=699a8297-a0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:ad:5c:c0:07:5c:3a:9d:d7:1d:7e:99:37:
88:44:35:fd:16:1b:12:25:bd:48:73:c6:a7:59:3e:
97:dc:ed:9d:82:e8:d9:cb:f7:5a:96:d0:72:10:f5:
6c:28:03:05:ad:66:8f:b1:59:ba:88:f4:24:77:38:
7a:65:a3:2d:cf:19:6d:d8:7e:2a:09:35:d6:b8:1f:
d6:42:93:33:01:e9:38:03:f1:d6:6c:9a:2e:93:56:
3f:93:e3:10:5f:a4:2a:23:c3:93:72:96:26:bd:aa:
fc:67:c6:48:b8:d8:02:6f:97:f2:ae:4e:af:6c:b3:
04:b1:68:f2:13:c1:fa:f4:9c:83:7d:a7:b2:20:6c:
5f:0f:93:61:d7:03:a3:47:ac:b6:76:d1:d1:b7:fb:
20:b9:09:6b:e6:7d:ed:a8:c0:6e:80:86:53:59:21:
ea:14:90:d5:b1:e9:b3:fd:34:7a:0f:f0:17:b4:ae:
73:75:76:38:2e:cd:4e:bf:6c:e5:ff:ec:45:23:25:
b6:50:9b:7c:62:41:9b:6f:ee:33:fe:5b:ed:0d:72:
c3:d8:25:7d:3b:e2:59:77:3e:2e:09:28:58:e9:bd:
7b:f9:33:d7:4d:72:9d:a8:4e:9e:b9:b4:6c:05:68:
ba:85:48:25:e7:53:42:f7:54:d9:77:09:0b:99:7f:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:71:7D:E6:48:33:25:C0:75:10:EE:61:4C:CA:AC:AE:97:86:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F30D3C4E0FA411F1A74E9CC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.1.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2a:9c:aa:36:48:79:56:50:72:89:cd:80:15:37:25:44:fc:
6a:5f:68:5d:99:2c:24:0f:04:70:2a:1e:3a:f1:d3:6a:a4:b7:
b0:7d:26:04:ac:de:88:0e:f0:af:3d:ad:90:2f:1b:30:a9:68:
e4:8e:7b:18:57:16:48:b3:07:dc:3b:62:7f:36:9f:c1:6a:f3:
16:e4:95:f5:05:88:d9:1f:5e:c0:75:78:8c:ab:53:86:ac:85:
d7:c3:9d:6c:80:b1:35:ec:0d:72:db:7a:e0:8e:7c:e2:bf:e8:
a6:d6:32:6f:f3:ef:c3:97:8a:c5:0c:75:22:b0:13:d9:6b:e3:
a7:97:e2:08:55:29:e1:19:1c:58:3e:8d:30:9f:a7:35:d8:d8:
8d:0f:83:9a:ff:17:f2:c9:35:cd:ff:1d:9d:c8:63:0f:67:88:
ff:95:9f:a5:9d:80:3e:2e:9f:2f:39:69:e3:62:aa:40:f4:4c:
fd:8f:dd:1a:14:25:f5:7f:44:06:be:1f:9b:5f:78:0b:74:4e:
7a:fd:89:7e:d6:6b:df:cb:25:86:6a:fe:87:7b:53:f3:e0:75:
69:c1:81:04:36:d2:97:83:6a:6c:ad:2a:67:f3:aa:a1:b0:a5:
94:be:c2:5c:85:9c:4e:2b:6b:99:d2:e4:f7:ff:ff:13:54:26:
30:d6:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:41 2026 by rpki-client