Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BEB72A44CE111F1B7B153D4CE1D38B0.roa
File: 8BEB72A44CE111F1B7B153D4CE1D38B0.roa (raw, json)
Hash identifier: iGZRp8diTuKOw1e+T93rmtjDy1oUzWTRb9qmmXYgHl4=
Subject key identifier: ED:71:FB:AB:24:CC:BB:C5:8A:74:71:AB:D6:E6:66:A8:47:8F:34:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B391
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BEB72A44CE111F1B7B153D4CE1D38B0.roa
Signing time: Mon 11 May 2026 02:31:43 +0000
ROA not before: Mon 11 May 2026 02:31:38 +0000
ROA not after: Thu 21 May 2026 02:31:38 +0000
asID: 17497
IP address blocks: 156.245.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111505 (0x1b391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 02:31:38 2026 GMT
Not After : May 21 02:31:38 2026 GMT
Subject: CN=6a013f8f-af78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:37:dd:20:de:2d:53:f4:8f:00:0e:83:6b:
24:38:1c:42:81:d9:03:f6:52:ce:11:82:8a:8c:be:
18:2b:c5:8e:c5:10:35:e3:1a:ad:1e:bf:bc:79:38:
22:38:6d:42:23:ae:04:5d:31:53:06:c3:1a:01:67:
72:ae:60:31:53:2a:31:dc:3d:16:2d:a9:29:dc:43:
71:47:ef:66:e0:10:bc:77:56:7f:4a:4f:c1:64:b4:
e8:85:14:ed:ad:bf:6d:d6:af:60:8b:f1:2b:b3:bc:
39:e8:98:de:c7:fc:dc:64:76:e8:d2:fd:8b:bf:cf:
a9:ac:33:63:63:42:26:af:3c:dc:14:7c:a9:b5:6b:
ee:a1:04:68:4a:fb:12:22:b6:31:3b:56:8b:8a:ee:
76:7b:d8:86:0d:00:6b:9a:b3:64:b2:46:7f:c5:6b:
d2:cd:cd:d0:d2:17:44:49:16:07:6b:4a:18:8d:f5:
27:ba:6c:6d:ec:c6:c7:9d:44:59:b6:c1:4e:b5:3e:
45:ed:81:26:a7:b0:f1:79:c5:48:34:1c:19:e3:b8:
54:9d:36:87:f5:cd:69:c9:89:f8:ce:9d:ec:70:9b:
4a:2e:00:88:6a:13:dd:f2:9f:89:85:91:f4:b1:97:
28:a7:6a:80:a6:1e:d5:a3:8b:b4:a2:04:b8:fc:e7:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:FB:AB:24:CC:BB:C5:8A:74:71:AB:D6:E6:66:A8:47:8F:34:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BEB72A44CE111F1B7B153D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.176.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:b4:59:f0:86:97:10:4e:07:fc:c1:79:89:9d:df:3f:5b:9d:
f3:78:a4:fc:c9:bf:04:7d:cc:75:c2:26:99:b8:d2:8e:cf:11:
52:b6:9d:ed:4a:5c:08:48:16:98:d8:51:21:86:2d:7b:ba:c8:
49:c3:78:45:6e:0a:86:cf:ea:a2:d5:cc:80:8e:02:aa:7e:ad:
91:50:36:6f:15:ff:f4:67:3b:da:ed:ba:7b:b8:ba:56:94:8c:
92:a5:a1:44:20:65:4f:93:21:a4:52:76:62:f0:73:e9:3a:bc:
49:4e:36:e7:0d:82:75:a4:fa:7d:65:34:30:dc:ba:67:53:96:
a0:ac:a9:f2:69:ac:64:5e:e1:c5:5d:31:83:21:96:c1:f9:3a:
c8:aa:ff:8d:17:3e:ec:b7:b3:4b:b2:89:48:16:32:92:70:b2:
ce:cb:82:ef:36:dd:57:b2:40:35:1a:3f:37:64:71:74:2b:b3:
53:58:d2:0b:f3:4b:f3:74:10:1d:2a:fb:a5:64:a0:5f:b9:3f:
94:05:11:43:cc:7a:e4:c8:8a:e3:ae:80:cd:3e:ea:a7:29:23:
0b:14:cb:a4:cb:17:3f:a0:eb:9f:08:fc:79:c0:d5:13:94:9e:
2e:8b:a8:3f:53:90:31:13:5c:1d:ba:80:3c:cd:68:1f:8c:23:
88:93:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:45 2026 by rpki-client