Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F54FD8FA026A11F1A31C1BF3DAE4EC9C.roa
File: F54FD8FA026A11F1A31C1BF3DAE4EC9C.roa (raw, json)
Hash identifier: DPSbQn12PiGZLcEfyQIke82W6qXZgdnJjXlcEoklz78=
Subject key identifier: 04:D7:66:97:BA:6A:A1:9A:06:45:84:49:53:5D:60:04:E0:0D:52:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F54FD8FA026A11F1A31C1BF3DAE4EC9C.roa
Signing time: Thu 05 Feb 2026 08:16:23 +0000
ROA not before: Thu 05 Feb 2026 08:16:18 +0000
ROA not after: Mon 23 Mar 2026 08:16:18 +0000
asID: 214025
IP address blocks: 156.229.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105444 (0x19be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 5 08:16:18 2026 GMT
Not After : Mar 23 08:16:18 2026 GMT
Subject: CN=698451d7-2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:9d:54:4c:02:34:18:28:fc:d8:1d:b4:41:
f9:9e:62:f5:c9:31:e6:fe:a4:61:af:eb:ca:94:32:
81:08:07:95:e1:fe:26:46:f5:8e:11:49:bd:9d:50:
f5:74:43:4d:68:ef:95:a3:d0:78:c7:13:cb:8a:9d:
39:b3:f6:a5:40:84:ef:e0:50:e6:a2:72:44:cb:be:
90:72:56:4c:72:05:d9:65:24:20:c3:4c:6f:8c:a6:
d1:66:a8:e5:c4:86:d5:3d:23:aa:66:e0:34:a1:cd:
97:e8:d4:e5:c2:4e:7f:f1:f6:d1:69:fe:1e:04:d9:
de:b4:8a:75:75:c4:42:80:61:7c:18:4a:fb:4c:92:
b6:76:92:a2:e3:dd:26:5e:ed:39:7a:ea:f7:1f:a9:
37:5c:0c:14:d9:50:52:40:8a:55:71:27:b4:1e:0f:
e7:ec:c5:65:1a:3b:27:08:6a:ee:9d:9d:de:c6:09:
ba:fe:13:46:fe:46:4d:8d:a0:ec:c3:b1:03:b0:a9:
44:ba:19:d2:d4:2f:29:47:f5:4b:9d:c8:4a:d4:54:
99:4b:d4:ca:90:9b:c5:c4:8b:3c:ff:8b:1a:0f:ec:
53:ee:8b:21:a9:30:ff:2f:e9:8d:af:eb:17:0e:e1:
24:ed:70:78:41:6a:c3:d7:73:71:8c:3a:2f:0b:2a:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:66:97:BA:6A:A1:9A:06:45:84:49:53:5D:60:04:E0:0D:52:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F54FD8FA026A11F1A31C1BF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e3:b1:ee:7c:aa:37:f0:fe:f3:8a:5a:71:fa:9e:06:66:cc:
4c:45:b8:d9:c5:4c:de:bf:31:ba:3c:ec:b2:cf:c6:29:f4:2a:
ed:bd:78:dd:cf:98:88:4a:ea:6e:2f:62:51:5a:00:05:46:38:
44:9a:01:0f:3a:84:3c:90:c9:4d:09:59:e2:03:bc:dd:33:58:
29:2d:0b:cc:1d:0e:d6:39:2c:0f:d5:af:38:81:2c:e1:eb:15:
b5:ae:b7:22:31:00:c8:74:fd:59:1b:e7:02:3b:42:6d:e7:fc:
ce:ed:e7:59:47:9c:00:cd:f0:3c:7e:a5:5d:88:59:42:97:3f:
67:1d:f6:08:ee:22:d8:d5:49:57:c4:3d:5c:7f:ef:e8:95:01:
b6:20:80:b9:77:5a:d0:6c:3e:fc:3f:22:2c:68:2f:13:dc:af:
ac:ed:c3:58:98:9e:29:4b:25:13:ea:61:85:72:12:1c:3a:d4:
c3:b8:dc:ce:e1:1d:f5:10:b5:fb:ee:48:ee:98:12:68:05:46:
b4:db:66:a3:cd:06:bf:0b:7f:14:a3:82:b8:ca:57:81:49:5a:
de:5a:04:f3:ee:ee:af:de:5e:4b:78:9c:99:87:0d:4a:76:8d:
e5:4f:19:7d:82:f7:80:78:c8:6d:39:8f:12:21:30:21:94:8b:
e5:9c:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:28 2026 by rpki-client