Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AEDD88245711F198094BABDAE4EC9C.roa
File: 40AEDD88245711F198094BABDAE4EC9C.roa (raw, json)
Hash identifier: y/4qQ8iXDMGafzo8KUrWP7XpT9Wj+cKrIQ6QY5MNwBM=
Subject key identifier: 19:FE:14:6A:7A:CA:CA:8E:E6:3A:41:99:FF:29:F5:D8:B4:10:38:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A62A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AEDD88245711F198094BABDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 12:21:00 +0000
ROA not before: Fri 20 Mar 2026 12:20:54 +0000
ROA not after: Thu 23 Apr 2026 12:20:54 +0000
asID: 138648
IP address blocks: 156.247.62.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108074 (0x1a62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 20 12:20:54 2026 GMT
Not After : Apr 23 12:20:54 2026 GMT
Subject: CN=69bd3bab-da16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:52:07:84:0b:ca:b2:66:99:90:af:f3:1b:
b9:cc:46:ec:f1:06:b6:2d:83:9a:f9:e4:b3:7c:2b:
43:3c:cc:a8:62:96:64:0e:71:b9:37:6e:88:45:39:
ec:ce:83:b7:aa:15:ce:a4:10:e2:00:6c:30:e7:83:
6b:bc:c7:d0:06:5d:8a:6e:f0:6f:e8:bb:c6:b3:75:
a8:69:6b:99:70:30:f0:9f:a4:ad:a3:df:db:1a:c0:
57:7a:43:d8:dc:c9:76:74:49:f8:fc:c1:4d:fd:d8:
08:98:b0:8c:27:2e:de:44:04:a9:ea:66:81:02:78:
89:8e:80:45:3c:45:cd:5d:68:1d:fe:a2:bb:6e:fd:
75:42:02:e1:59:1e:37:a4:0c:24:72:f5:8f:c5:26:
63:e0:46:ed:2a:5f:5e:ce:b6:4f:7a:85:e2:3b:1a:
24:a5:60:52:c9:87:9a:d6:28:e2:ae:eb:fb:68:08:
d2:56:cd:bf:1a:da:c1:43:d6:5f:8b:84:fd:3a:f8:
f3:a8:91:9b:27:44:26:e8:7e:9a:35:c3:a6:40:f6:
a8:d0:6c:e5:30:82:e6:5c:d3:71:63:1b:af:57:b6:
1e:34:e0:5f:3e:08:86:c5:e4:d2:fd:7b:00:a5:29:
26:1d:b8:34:5b:72:97:3c:70:0b:f0:73:35:db:4b:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:14:6A:7A:CA:CA:8E:E6:3A:41:99:FF:29:F5:D8:B4:10:38:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AEDD88245711F198094BABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
58:47:6c:ea:58:3a:67:b8:a5:0b:6b:ab:8c:0c:a1:97:29:48:
88:74:d4:4f:d2:38:ee:93:66:1e:2c:1a:5b:9e:1d:ed:8a:5d:
86:66:cf:d7:99:d0:6d:2e:6d:54:33:ed:8e:76:2f:60:6b:6b:
0c:69:2f:a2:08:11:61:92:46:e4:c8:01:24:70:ee:36:fd:7c:
67:47:13:08:51:d4:86:be:a9:57:af:93:84:21:05:fb:13:b5:
e3:c7:27:cf:d3:cf:73:e9:eb:17:63:4f:b4:ea:c3:a1:09:3f:
65:57:a0:47:7a:66:8b:27:44:ab:4e:d3:54:79:15:df:b4:58:
90:15:fb:4a:5e:02:ec:fd:41:a1:ef:58:11:36:ae:33:6c:a1:
b7:aa:de:ff:fa:cf:0a:37:2b:5e:b5:8d:c7:6c:3b:0c:e4:f2:
eb:3d:c9:8b:70:14:54:e1:6c:ec:11:93:6a:de:f1:55:8a:f5:
fc:d5:c0:df:a1:2c:ad:31:97:66:72:55:0e:d9:72:ae:ed:1d:
88:6e:cf:6d:ad:fc:3d:6a:eb:b7:09:e3:c8:07:70:0e:db:40:
90:0f:5c:06:59:f0:9f:28:bf:58:e6:91:43:9a:a3:d1:1b:34:
b4:42:e0:74:00:89:07:58:69:62:82:84:a2:22:f7:6d:bb:72:
12:85:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:47 2026 by rpki-client