Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF055902ECC11F1B4BA3BE1DAE4EC9C.roa
File: FEF055902ECC11F1B4BA3BE1DAE4EC9C.roa (raw, json)
Hash identifier: 8v4rnaNliuXayBDJ6HYacVY4KoBZPxn8vVhG6VgULEM=
Subject key identifier: CC:DD:2B:4D:C8:11:EB:FB:A6:24:C8:B2:B4:BD:D1:4F:A3:75:91:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A979
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF055902ECC11F1B4BA3BE1DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 19:49:01 +0000
ROA not before: Thu 02 Apr 2026 19:48:56 +0000
ROA not after: Sun 10 May 2026 19:48:56 +0000
asID: 138915
IP address blocks: 156.244.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108921 (0x1a979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 19:48:56 2026 GMT
Not After : May 10 19:48:56 2026 GMT
Subject: CN=69cec82d-ccad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:20:f5:ae:71:77:51:c1:21:89:9a:84:21:
97:af:b6:20:dd:0b:f3:d5:94:78:0b:d8:0b:80:c0:
81:b9:1e:c4:70:37:bc:16:f1:16:c0:af:1f:fb:96:
42:c0:ba:db:26:50:ae:21:8c:eb:39:6e:10:11:c2:
7b:1b:b7:ae:95:fc:85:d0:f0:29:f2:a5:10:a3:c7:
66:8e:d4:e2:b1:0b:61:46:e2:7b:1f:6e:e7:4c:8a:
31:8d:34:8a:56:bd:29:d7:00:19:13:79:e4:eb:97:
45:cb:72:ca:de:25:ae:66:36:66:32:33:38:0c:22:
1f:14:be:dd:31:de:7a:b3:8c:36:67:75:d7:e8:0b:
b0:db:6d:46:5b:d3:aa:d9:80:4a:9c:ae:03:b0:4b:
d3:cf:ac:de:ae:0e:90:8b:76:47:91:2b:3c:3a:b9:
39:90:a9:de:df:d3:ca:a4:c7:85:80:be:36:1a:0e:
bd:f9:8f:b3:e1:83:09:23:74:0d:88:fa:27:9a:dc:
26:f8:f7:66:28:c5:38:9d:b6:61:4e:b5:03:ff:7d:
c0:89:cf:1d:7d:c1:92:14:9c:5e:95:ad:48:24:05:
ea:bc:b8:e3:d1:61:74:ec:de:7e:99:f9:5d:a8:4c:
29:41:37:79:19:e1:ff:89:f0:35:66:e3:d0:0b:5a:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DD:2B:4D:C8:11:EB:FB:A6:24:C8:B2:B4:BD:D1:4F:A3:75:91:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF055902ECC11F1B4BA3BE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.61.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d8:a5:03:a0:1e:e2:11:bb:4c:9d:46:c7:cf:73:2f:dc:f3:
79:81:f0:b8:c4:2d:07:51:df:37:4a:ad:34:bf:13:75:3d:ef:
7c:20:8e:0b:ae:c2:31:b4:36:7a:a1:d4:2e:cc:0a:98:65:3f:
9c:92:a9:ff:7f:5e:b2:3d:90:33:cb:dd:4c:6b:10:93:54:5c:
65:c5:5e:d7:80:6a:a4:05:e1:a2:b1:68:e6:29:74:71:20:6e:
bd:d3:cb:33:28:b6:5e:26:52:55:df:31:0a:1d:3d:64:42:c2:
df:4b:36:88:31:a7:cc:c3:57:3b:c1:c6:25:93:9e:a0:8c:7e:
5e:3c:84:e1:ac:0c:71:51:8c:17:64:04:2d:79:41:c5:cc:22:
be:be:74:ff:e1:32:b4:94:8f:ae:a6:cb:d9:58:f5:96:f4:29:
94:b4:31:7f:0b:d8:7f:87:3c:fd:ea:a8:58:4a:9e:1f:43:52:
3f:14:2c:cc:2f:e4:2e:0c:4f:97:37:12:cc:c3:7c:52:5b:d3:
42:89:a1:c4:b8:11:a8:51:ce:14:1d:91:f6:e7:57:c4:79:e8:
48:15:e6:04:76:3a:06:a9:40:f5:83:5f:a2:61:15:1c:68:1b:
60:10:ad:e6:df:7e:21:f7:16:c8:f1:96:9e:2f:e8:0e:c9:c3:
ba:f7:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:01 2026 by rpki-client