Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08BB96B422BD11F19C7245D9DAE4EC9C.roa
File: 08BB96B422BD11F19C7245D9DAE4EC9C.roa (raw, json)
Hash identifier: re4FNqn60S85B/qXcTVbeEox3hL9JpBL7vnAuEEIQPI=
Subject key identifier: 4C:F7:59:F5:19:82:CC:7F:C0:A6:9E:7D:A6:60:AA:0A:4A:BC:48:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08BB96B422BD11F19C7245D9DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 11:24:32 +0000
ROA not before: Wed 18 Mar 2026 11:24:27 +0000
ROA not after: Sat 28 Mar 2026 11:24:27 +0000
asID: 24435
IP address blocks: 156.238.82.0/24 maxlen: 24
156.238.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107989 (0x1a5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 18 11:24:27 2026 GMT
Not After : Mar 28 11:24:27 2026 GMT
Subject: CN=69ba8b70-b3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:4b:c2:0d:b4:2b:66:8a:43:eb:8b:f9:2c:
2f:b1:83:c4:c0:3b:11:43:e8:58:cb:79:b5:d6:12:
41:3d:23:22:90:3b:8d:3a:8c:65:ae:76:cf:a7:00:
6a:ab:b1:7e:e8:9e:99:c2:f3:bf:e0:a8:27:71:ec:
ca:5f:57:bd:64:ce:90:f9:24:3d:60:2f:32:22:be:
de:d4:9f:1d:02:ba:18:58:d5:ec:b2:3c:99:4b:b5:
8b:83:65:bd:9d:13:46:47:96:24:0f:2e:f7:d8:48:
6a:af:92:ae:e4:d2:41:75:81:8e:a4:f3:01:62:1b:
7c:71:69:49:c7:1f:d8:3d:18:6b:30:f0:c1:bf:86:
d7:f6:a8:66:45:15:c6:33:1c:fa:06:f7:13:0a:d5:
68:da:d9:54:32:8a:5c:82:de:34:44:fa:e7:4b:f1:
d6:0e:ea:54:fb:11:4e:a1:b3:41:75:72:95:60:d9:
ab:14:68:88:48:b8:88:0b:f0:fc:73:fe:1b:10:a3:
12:68:77:b5:59:b0:22:33:17:ab:20:77:29:14:87:
d9:9f:fe:e3:82:cc:e4:dc:da:43:fc:8f:39:35:e2:
41:55:46:32:11:f1:ff:f9:1d:fd:6f:39:01:7d:64:
ea:f6:f4:3a:5f:0e:dd:d2:64:6a:10:4e:12:15:b2:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:59:F5:19:82:CC:7F:C0:A6:9E:7D:A6:60:AA:0A:4A:BC:48:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08BB96B422BD11F19C7245D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.82.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a5:48:69:02:a9:ed:02:88:81:97:b2:e5:6a:e7:0a:38:7d:
c8:2b:68:34:07:8e:c6:6f:77:4e:ad:c8:10:a8:41:55:0b:af:
80:ba:64:8d:5f:3d:31:51:60:b0:9c:98:0c:fc:73:8e:e9:76:
cf:8b:0a:3d:c9:fa:b7:75:1f:3b:22:3a:cb:5f:ab:e4:96:7f:
b6:d0:77:d5:e0:12:d7:42:d0:6a:b3:46:c8:eb:51:e2:ae:dd:
b7:84:5e:02:d8:3f:3a:f4:bb:55:f5:ec:4a:0f:2e:24:da:a5:
86:1e:65:c4:45:43:42:2c:54:4b:f6:91:f3:37:d0:0b:85:9a:
db:9c:d2:2a:64:20:de:be:ee:85:db:cf:8d:88:c2:4e:40:94:
32:fb:47:36:4c:00:55:a7:26:6d:d0:6a:bc:50:6b:d5:7e:52:
2a:d1:91:77:b9:ce:49:83:af:ef:8d:1c:0e:43:b2:eb:31:fd:
6d:13:9b:0e:6b:7d:aa:02:cd:f7:60:67:b8:6e:e7:5c:dc:79:
16:9e:28:cd:1e:cf:73:0b:c6:93:5d:48:9d:01:5f:9e:45:58:
ab:eb:9d:bc:a4:eb:4e:14:03:89:f0:94:12:a1:3d:00:08:06:
4c:a5:c6:d9:35:85:d9:1d:72:09:93:64:f8:98:0a:6e:72:c6:
71:a2:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:41 2026 by rpki-client