Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B26CBD4C459E11F1BA2E7BAACE1D38B0.roa
File: B26CBD4C459E11F1BA2E7BAACE1D38B0.roa (raw, json)
Hash identifier: uRPmdnEqZ4vsG7EhMWB0bJvxUwCGrNt6qyKH4Dqsk2E=
Subject key identifier: 69:AE:3E:3A:F4:06:56:00:46:B0:DE:C2:08:E0:CA:54:F7:E4:99:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B26CBD4C459E11F1BA2E7BAACE1D38B0.roa
Signing time: Fri 01 May 2026 20:45:33 +0000
ROA not before: Fri 01 May 2026 20:45:26 +0000
ROA not after: Tue 09 Jun 2026 20:45:26 +0000
asID: 44559
IP address blocks: 156.246.21.0/24 maxlen: 24
156.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110832 (0x1b0f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 20:45:26 2026 GMT
Not After : Jun 9 20:45:26 2026 GMT
Subject: CN=69f510ed-1f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:fb:c1:ae:f3:0e:60:31:85:7d:70:d6:dc:
e6:30:1c:25:f0:cc:28:4b:87:c9:87:85:2d:aa:dd:
3a:1a:5e:d9:8a:1e:cf:84:87:e4:ac:e0:e2:0e:1e:
bc:2f:18:9e:b7:6e:ae:a0:71:d0:c5:e5:0d:87:09:
d3:35:19:b8:a1:74:e3:d3:21:0e:20:fe:05:5d:b9:
ea:20:3a:b9:a4:69:25:35:01:c6:86:ff:29:83:1a:
18:59:67:d0:33:2f:0f:7f:89:9c:7e:e8:2c:13:46:
ee:bc:59:ee:02:d4:3a:4e:68:63:16:1e:b8:01:79:
37:bb:78:89:ae:2b:83:ec:2a:17:69:42:be:52:9a:
04:ea:87:fb:ff:ab:3c:7e:00:9c:12:20:69:5f:30:
fb:9b:fd:a1:2e:c2:eb:e5:83:ce:ce:18:7b:09:90:
f0:c9:25:55:1e:ff:32:8f:d9:53:1e:5b:ba:ea:cd:
b2:0b:b7:73:d4:10:ca:75:06:1e:e0:4d:a6:cf:79:
3c:53:ce:ba:a6:c4:28:79:d2:38:f7:d6:e8:5d:8a:
19:be:f9:14:67:c2:35:32:c6:d2:89:e1:56:47:10:
0b:c6:94:b7:79:be:3f:c9:28:d3:cd:8d:75:db:f0:
9b:ba:23:4a:0d:ef:f7:fc:fe:8e:a6:49:cd:93:8c:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:3E:3A:F4:06:56:00:46:B0:DE:C2:08:E0:CA:54:F7:E4:99:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B26CBD4C459E11F1BA2E7BAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.21.0/24
156.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f7:0a:7e:9c:ad:bb:0e:60:74:d2:dc:c5:d2:d5:36:dc:05:
91:45:35:81:0b:28:ae:4f:78:99:c1:08:8e:2a:eb:90:fe:3e:
bd:d0:a1:66:6c:04:8b:c2:55:ff:b6:6e:e8:fe:22:7c:d8:15:
6d:2a:b0:b1:16:d6:f0:5b:60:ef:da:47:23:b8:5c:16:d9:8a:
42:ba:f9:6c:92:c5:f7:2f:99:70:54:d8:68:0a:e3:84:c1:25:
47:5c:e6:8e:51:fb:af:0f:87:22:fb:f9:b2:ab:63:d2:46:63:
3c:e9:40:ed:d4:57:37:66:40:64:3d:99:68:d4:7e:66:74:32:
1b:c9:13:22:47:4e:7f:fd:66:41:3f:15:60:94:66:d9:b1:49:
94:03:f6:55:40:56:2a:15:46:67:a3:a3:5f:d4:d0:5a:6b:66:
83:00:eb:da:79:55:5f:03:ea:da:ac:da:e2:1d:4e:33:be:51:
ff:b7:d4:f1:a6:29:57:80:1a:a3:f8:91:24:84:12:41:f5:78:
76:a0:1d:ba:da:84:cd:67:97:62:0d:9e:43:2a:4f:77:06:ac:
a1:51:1d:c8:a9:a8:a0:9f:90:2a:f8:7d:df:77:10:cb:b4:ca:
7f:b7:7e:b2:71:ac:33:88:3a:f4:63:a7:90:34:e0:c5:de:bc:
a1:04:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:51 2026 by rpki-client