Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFEDA9681EAD11F1ADC61CB0DAE4EC9C.roa
File: AFEDA9681EAD11F1ADC61CB0DAE4EC9C.roa (raw, json)
Hash identifier: c5xCyDqHO9Q0gJ+w2+E7JaDYWF/vqBd/rP/h4+JBAjk=
Subject key identifier: 55:6F:E4:B0:27:82:0A:AB:14:28:03:8E:95:09:B3:09:BF:47:AB:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFEDA9681EAD11F1ADC61CB0DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 07:24:36 +0000
ROA not before: Fri 13 Mar 2026 07:24:30 +0000
ROA not after: Sun 19 Apr 2026 07:24:30 +0000
asID: 202437
IP address blocks: 156.228.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107731 (0x1a4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 07:24:30 2026 GMT
Not After : Apr 19 07:24:30 2026 GMT
Subject: CN=69b3bbb4-8f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:a0:e1:2b:e4:23:df:8f:d5:fb:fa:75:bc:
72:bd:9c:b9:26:18:f4:7f:f8:a3:e6:b4:40:a4:58:
e4:c2:e2:bd:dc:83:81:d0:2f:9a:5c:25:31:95:78:
80:57:44:55:6a:04:67:ce:43:e6:66:e0:5e:06:95:
44:30:98:79:1b:59:d3:8c:8e:ed:19:d8:d6:f9:2e:
8f:ad:58:45:5e:2c:8a:01:96:ab:80:dd:08:bf:48:
e0:2f:ee:76:a0:6c:a7:c7:95:0a:16:99:f5:ad:ca:
6f:f9:1f:e9:70:b5:34:bf:06:b2:af:5a:c9:b9:58:
0d:ad:2b:67:9e:46:03:47:97:d8:65:08:38:58:ee:
a7:48:f4:76:eb:39:c8:b4:bd:41:fb:5b:8c:f5:d4:
aa:1e:98:5d:31:65:8b:26:22:45:28:6c:e8:4d:31:
c0:50:be:91:8f:2a:34:ec:c9:d3:44:fd:60:b4:26:
72:e5:50:f2:4c:d1:ca:17:d2:cf:e9:99:d7:65:55:
34:20:23:1b:f2:8e:10:50:02:4e:62:2c:cd:74:ce:
11:69:8c:49:71:e8:80:af:cc:17:f1:43:a1:47:4c:
da:33:5e:32:db:af:14:9c:29:b0:c6:89:a6:0c:65:
38:da:4c:fa:3b:cd:33:6a:de:e4:3e:47:58:69:4d:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6F:E4:B0:27:82:0A:AB:14:28:03:8E:95:09:B3:09:BF:47:AB:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFEDA9681EAD11F1ADC61CB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6a:0b:ac:61:db:ed:8a:84:2e:d3:6b:95:96:3f:8d:68:b0:
4f:84:23:a8:fb:c8:a3:88:21:6d:1d:8a:98:a9:da:91:61:c8:
ff:13:da:ba:2a:3e:d2:a5:47:98:92:22:52:82:b7:79:65:4c:
ca:83:2e:58:89:48:c9:ca:14:bc:5d:22:88:57:a6:f4:89:90:
f5:0d:f3:13:fb:b6:ca:2b:c3:96:b7:ca:1b:0f:5b:de:6e:24:
c7:36:f9:07:84:88:c9:c1:93:10:aa:55:a3:19:4f:1d:c2:56:
b7:00:99:6c:50:df:c8:91:cc:96:69:0d:4a:ca:08:b8:25:a2:
5b:bd:26:37:0e:2e:34:16:62:ac:73:bd:4f:cc:a3:47:6d:e1:
5d:b7:64:2d:51:a7:99:6b:05:69:09:65:d4:74:87:c0:10:9a:
51:d3:49:5a:cd:ab:10:e2:ec:b6:8d:b5:e5:ed:b3:d6:1a:7d:
84:f8:b4:6c:b5:a6:06:01:59:64:45:6d:71:bc:6b:10:13:46:
52:b2:43:24:57:d5:6b:aa:e4:90:bb:00:14:9c:41:34:37:ee:
08:8c:c5:95:4f:b5:86:3b:71:4f:76:4a:47:3d:9a:61:4d:fd:
4e:b3:13:a1:69:59:76:34:b8:43:58:fc:33:74:1d:7c:25:1b:
ac:26:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:52 2026 by rpki-client