Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46DB410001311F184B71F91DAE4EC9C.roa
File: F46DB410001311F184B71F91DAE4EC9C.roa (raw, json)
Hash identifier: nEYLT8J1+/HHvUUM1OTnjEBqIVAOr4hBizWCDHV+0cc=
Subject key identifier: 33:D0:42:72:0A:51:B6:14:B6:78:22:08:21:7F:8D:BE:43:FD:F0:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46DB410001311F184B71F91DAE4EC9C.roa
Signing time: Mon 02 Feb 2026 08:48:33 +0000
ROA not before: Mon 02 Feb 2026 08:48:27 +0000
ROA not after: Fri 13 Mar 2026 08:48:27 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105343 (0x19b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 2 08:48:27 2026 GMT
Not After : Mar 13 08:48:27 2026 GMT
Subject: CN=698064e1-919f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:1b:9d:d7:fa:2b:31:f5:24:a2:17:b0:20:
6e:2a:ce:91:c4:73:f5:f6:45:29:e6:f9:45:07:ed:
b8:5f:94:ec:40:00:ed:1d:2d:14:15:06:eb:58:6c:
3c:eb:6b:aa:11:f9:9b:f0:7b:15:44:c9:db:91:fd:
73:ce:72:d6:d5:0c:38:28:04:7a:b7:59:90:a0:cc:
30:eb:ab:ba:25:08:fa:b2:aa:14:48:e7:b3:5c:a3:
b7:70:02:18:fb:f7:0d:fe:44:f9:e1:3f:65:4a:32:
cc:cd:04:4a:e7:d8:a1:73:cf:c9:6c:0e:38:19:27:
d3:35:85:db:f5:91:f3:52:9b:06:a5:02:4c:f8:10:
d0:21:ac:de:8c:f6:0d:98:ac:dd:a9:62:8b:f5:ea:
8d:32:70:47:ad:58:e7:03:35:04:4d:9c:95:b9:ff:
ae:5a:09:5b:0e:73:45:37:58:45:17:f5:b2:b6:b9:
5f:34:e1:8a:ca:a5:8e:3c:62:96:31:69:0f:4c:d3:
27:1a:72:c8:e4:68:51:18:57:72:0d:0f:1d:ab:22:
94:f4:bf:f1:56:b3:9b:a3:c6:8a:36:73:04:95:11:
21:3f:f1:8b:a3:2e:c4:af:00:03:c0:05:b5:21:d9:
4b:ab:8c:b0:cf:2e:a1:a9:0c:a3:95:ef:ef:e5:40:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:42:72:0A:51:B6:14:B6:78:22:08:21:7F:8D:BE:43:FD:F0:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46DB410001311F184B71F91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
02:75:2b:77:f5:32:27:02:02:b7:eb:8a:68:05:1a:99:19:82:
ca:95:91:77:f0:91:5b:d8:48:76:8e:27:13:8d:fb:94:8a:ca:
a3:5a:fb:9b:91:5c:f0:25:57:92:f4:1e:fa:8e:69:a5:63:08:
e9:30:5c:bb:0b:e9:79:13:65:61:3c:55:a2:39:ff:9e:1a:e2:
1d:08:bd:69:29:35:7c:66:06:9a:41:a1:1d:e3:83:4d:2e:45:
88:c9:f8:4a:bd:a7:c3:c0:29:f0:c7:79:70:d5:fb:f7:88:35:
bc:29:f8:7c:4e:4b:f1:b6:4d:ee:89:b7:8a:1a:4a:43:cc:55:
74:dd:5f:e7:22:33:29:10:bb:3e:f7:f2:7e:4b:0b:80:16:0d:
3a:e1:64:09:a7:af:d7:59:f4:b4:f7:58:d0:2d:51:07:ca:24:
6a:74:ca:b6:12:f9:17:51:d9:0d:94:5c:2c:86:34:01:dd:5c:
c1:16:31:ae:a8:36:12:12:c2:5c:8e:8d:d8:75:95:59:62:1b:
14:c6:1d:7b:b4:7f:a0:5d:b7:12:77:7a:e8:3e:be:c7:34:09:
0d:b2:b7:10:cf:30:8b:dd:b8:79:27:57:1f:5c:c5:04:e3:f9:
02:73:3a:12:9d:e1:49:a2:a3:7f:e3:54:3c:aa:e6:3f:19:53:
ab:4a:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:24 2026 by rpki-client