Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40957D5E1DF211F182CE72E5DAE4EC9C.roa
File: 40957D5E1DF211F182CE72E5DAE4EC9C.roa (raw, json)
Hash identifier: 6MR85JhAnvGQoZzoCQjcz6X10UksQNdBkjlzuCvc4d4=
Subject key identifier: 82:74:FE:E6:CD:B3:27:BF:FF:38:0F:60:A9:68:60:EF:F8:04:1D:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A470
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40957D5E1DF211F182CE72E5DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 09:02:53 +0000
ROA not before: Thu 12 Mar 2026 09:02:48 +0000
ROA not after: Sat 13 Jun 2026 09:02:48 +0000
asID: 142286
IP address blocks: 156.253.64.0/18 maxlen: 24
156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107632 (0x1a470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 09:02:48 2026 GMT
Not After : Jun 13 09:02:48 2026 GMT
Subject: CN=69b2813d-4abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:a8:a2:80:ed:e8:d1:74:bd:79:db:39:1c:
6c:a6:76:37:6a:80:53:c4:fc:07:43:8c:84:af:e0:
cf:8d:eb:25:93:50:b8:e0:70:e4:7a:f2:09:fe:0c:
b9:2c:e2:05:c2:9f:71:a4:e3:16:e4:31:8e:83:a8:
11:87:45:54:94:9f:1e:1f:97:17:fe:d4:66:0e:25:
e4:10:6b:6f:8f:c5:73:5b:fb:82:f5:78:68:c6:fe:
38:f6:94:56:40:a7:6a:c0:44:7f:42:55:31:a1:ca:
c3:41:28:f3:8f:2f:08:23:f5:02:91:ba:63:19:4a:
eb:e0:60:01:83:b1:47:9f:63:53:d7:3e:bd:7f:4f:
80:26:d2:96:1f:21:62:36:7e:2b:09:d8:af:65:f0:
aa:b3:c7:89:a5:fd:5b:a5:46:6e:c8:d5:98:a7:e0:
1d:ba:4d:8c:81:9f:15:36:c8:a0:05:0a:99:71:78:
38:d9:8e:84:53:73:6b:d2:8a:7a:2f:a3:14:6e:ac:
d1:3a:e6:17:ed:fb:2c:7c:d0:1b:a7:0a:2e:73:c1:
ec:7d:e7:7f:41:07:24:d8:64:b4:58:05:b2:49:ca:
cc:13:f0:72:12:27:ef:a9:df:27:ec:73:32:2d:f3:
6e:03:e9:d0:ca:81:1e:ee:fc:59:fc:8c:4f:f1:30:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:FE:E6:CD:B3:27:BF:FF:38:0F:60:A9:68:60:EF:F8:04:1D:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40957D5E1DF211F182CE72E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.64.0/18
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
89:18:68:25:cc:78:33:3a:d1:78:58:92:de:d7:f4:0d:26:10:
3a:60:59:34:79:6f:74:2f:da:33:d3:be:8b:c0:9d:c2:ff:6e:
90:92:77:18:6a:2a:2a:55:11:32:5b:3e:ef:cf:b0:a0:d8:28:
02:1c:07:ab:ab:b8:f2:2a:f0:5a:ff:c0:65:3c:fb:36:c8:0b:
d7:d4:30:7f:14:f3:98:07:80:0e:20:64:86:60:3c:4d:bf:ed:
70:4a:e5:bf:ff:e4:0d:28:a0:ba:04:fc:47:48:d5:33:a2:4a:
36:4c:ce:7d:94:b9:58:9b:d9:66:42:6a:54:51:72:59:ce:38:
bc:e0:23:7e:19:ba:91:6b:75:89:d4:6f:ed:4b:6e:22:ef:e7:
b8:3e:41:88:e4:84:44:80:a4:d4:82:4f:f6:10:ff:cd:dd:b7:
4a:a6:bd:83:6b:89:2e:a7:0a:69:0b:91:ae:c3:93:54:19:54:
da:40:99:07:25:9f:ec:8a:79:4f:e2:76:a6:80:03:93:58:08:
1e:3c:ed:32:e1:8f:ac:7c:ae:16:39:8a:23:30:b0:e4:1e:eb:
4b:59:a0:62:94:7c:88:a1:44:7d:1a:57:b4:d0:d1:58:e2:d0:
97:9d:48:d1:81:c1:bc:45:a8:83:e8:c3:cb:da:32:be:ec:f8:
92:84:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:58 2026 by rpki-client