Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDD5502639A711F1A8499C0ECF1D38B0.roa
File: FDD5502639A711F1A8499C0ECF1D38B0.roa (raw, json)
Hash identifier: QNyspUyp1Slr5czxVVyGVQKJLsEeThD/ItZ9qatEDtg=
Subject key identifier: 6B:F1:D4:8E:F0:32:76:E5:B1:4E:8A:58:77:56:CF:C3:6D:30:33:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDD5502639A711F1A8499C0ECF1D38B0.roa
Signing time: Thu 16 Apr 2026 15:21:51 +0000
ROA not before: Thu 16 Apr 2026 15:21:46 +0000
ROA not after: Sat 16 May 2026 15:21:46 +0000
asID: 216211
IP address blocks: 156.231.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109899 (0x1ad4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 15:21:46 2026 GMT
Not After : May 16 15:21:46 2026 GMT
Subject: CN=69e0fe8f-c14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:57:55:65:66:34:4c:6a:7c:27:39:d8:c4:
41:22:a9:da:5e:cb:ad:31:a3:ea:e2:13:53:9d:e2:
52:5c:ef:30:77:01:cb:89:e8:05:ac:3d:81:9e:04:
5d:f5:f0:82:f9:de:1c:26:26:7f:79:c0:a6:82:17:
db:71:83:99:94:b7:5d:ec:9d:37:a0:26:96:79:aa:
93:b4:e0:8e:64:e9:db:6b:8c:76:79:cb:e5:c0:3f:
df:b1:e3:9f:a4:24:83:fa:67:1b:8b:4d:8e:93:01:
30:e2:32:76:dd:82:3f:70:f0:83:8a:9e:1e:24:97:
a8:eb:83:fb:a4:08:b9:67:13:9d:75:74:5f:b7:02:
7e:d8:e3:8a:83:60:03:9c:50:b9:c4:1f:ed:09:83:
ca:27:fc:96:d9:61:2c:2a:a7:95:c2:f8:1e:1a:57:
ad:01:40:ab:9e:68:4c:6d:99:fa:e8:51:04:c8:ad:
56:fb:50:35:3e:b6:d2:2e:19:11:b3:84:3d:68:c2:
e6:f0:77:1d:d5:4a:3d:ea:15:5b:57:32:f4:19:fe:
eb:3b:ae:4a:a3:a7:54:d7:c4:ca:75:14:f2:ec:73:
fa:48:09:f3:30:1a:38:cb:f1:fd:dc:8c:9a:a0:1e:
f9:ae:5d:79:e0:d0:f0:d5:86:14:33:c7:30:f5:94:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:D4:8E:F0:32:76:E5:B1:4E:8A:58:77:56:CF:C3:6D:30:33:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDD5502639A711F1A8499C0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:e2:fd:41:3d:47:50:08:11:af:45:70:b0:7f:ce:26:8a:79:
87:d9:c0:3b:29:58:8e:64:e7:85:9d:2f:bb:67:46:8d:c4:21:
c0:60:2a:4d:ac:e0:b3:c3:cd:e4:cf:b5:3d:dc:fa:63:cd:02:
60:bb:fb:3c:1e:90:ef:57:8d:2d:88:83:ac:92:06:5f:12:b6:
b1:e0:16:ff:1d:a1:f6:76:c8:9a:29:61:e6:f2:ae:25:4b:87:
7e:2f:da:ac:19:65:b7:c0:29:ae:c0:cd:3c:88:77:3f:bc:d2:
e5:17:5e:20:4a:ee:53:eb:c1:b1:c7:da:6f:a3:7d:74:35:d3:
b3:63:66:26:7d:47:d9:b6:e7:85:6a:db:b0:7a:1f:ac:5e:d5:
a3:dd:a2:6e:a7:b2:da:cd:a7:a2:81:d2:20:3c:c7:5a:2e:4d:
3e:22:ff:9c:30:15:ef:6a:26:3e:45:47:f2:35:28:58:83:53:
13:ae:4d:4f:3e:4b:2d:01:91:b3:ac:60:1d:5f:c6:11:3c:5f:
2f:f1:ee:a1:94:3f:f7:4d:1b:da:81:4f:6d:e3:ed:77:2a:44:
8a:7c:6d:28:b7:78:1a:ef:3d:3e:57:ee:78:ce:14:fe:9c:85:
64:29:0a:9f:cc:01:cf:b4:54:62:2d:70:31:72:a0:4f:e9:54:
a5:66:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:01 2026 by rpki-client