Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C81209B64A0511F1AAB8FEFCCE1D38B0.roa
File: C81209B64A0511F1AAB8FEFCCE1D38B0.roa (raw, json)
Hash identifier: utFkfjyJluv47UXNeOMNTDATuSoc6HpUDX79pr+o8KE=
Subject key identifier: 00:30:DC:64:23:AF:D4:FB:35:1D:FE:60:9A:39:09:78:3A:42:01:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B23C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C81209B64A0511F1AAB8FEFCCE1D38B0.roa
Signing time: Thu 07 May 2026 11:13:32 +0000
ROA not before: Thu 07 May 2026 11:13:27 +0000
ROA not after: Fri 22 May 2026 11:13:27 +0000
asID: 8796
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111164 (0x1b23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:13:27 2026 GMT
Not After : May 22 11:13:27 2026 GMT
Subject: CN=69fc73dc-a009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:16:f5:af:f2:5b:86:e1:66:79:f9:36:0b:
fd:5d:21:53:75:fd:b3:77:24:6a:b0:50:46:a4:38:
ab:33:ed:fe:f4:a1:20:44:2f:19:f4:1d:9a:43:f6:
ab:f6:92:d1:67:74:b8:f6:01:26:3f:d3:b8:1e:b1:
e1:dc:ed:d5:c4:79:d6:8b:50:62:cb:44:f6:44:d9:
17:53:5f:9c:2f:a4:e9:ed:7c:0c:dc:f6:01:3f:a7:
21:b8:c1:7e:05:47:02:55:96:13:e9:05:6e:91:87:
d5:2e:45:23:b1:f5:6e:ea:d5:e9:e5:fb:e5:69:ad:
4b:1a:77:6c:25:2b:7b:b9:86:9f:ea:6b:f4:d8:68:
9f:25:98:cd:9e:f2:aa:e6:fa:8a:39:3a:69:56:4b:
fa:c3:a8:09:bb:b3:90:f9:fb:62:7f:02:c2:f2:61:
9e:35:d8:9c:6f:a5:30:5a:aa:bc:99:3b:c5:7d:1e:
e9:2b:c4:8c:e7:61:49:03:fa:76:aa:e8:b7:21:50:
fb:2d:a1:ba:38:08:5e:cf:8d:b3:2d:22:c7:c9:00:
01:d0:eb:87:59:31:99:63:85:3f:40:f0:ab:5b:9b:
10:ae:1c:3d:97:31:4c:c6:71:be:d9:c4:50:d0:d8:
06:3f:59:bc:a4:d1:95:fa:24:ba:5d:fa:f0:f3:83:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:DC:64:23:AF:D4:FB:35:1D:FE:60:9A:39:09:78:3A:42:01:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C81209B64A0511F1AAB8FEFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:d8:80:e8:8a:5f:7b:57:9b:fa:ae:db:cd:2b:e3:fa:d5:c9:
6d:7e:a8:8f:ca:fc:f7:6c:0f:9c:e6:c1:4f:5c:26:05:2b:fe:
4f:1f:ef:38:92:a2:2e:7c:fd:84:7b:68:63:07:ed:83:43:01:
86:53:da:e0:26:34:5e:a0:6e:7b:b9:3e:f8:22:8a:6b:6d:49:
c2:f8:7e:b5:6c:00:8a:01:ec:1c:a1:af:56:c0:30:51:50:76:
10:b3:c2:7d:94:c2:f4:8f:66:c5:e7:aa:02:f0:46:de:99:f4:
ab:1d:be:c0:e6:39:92:73:6d:67:10:f0:e7:95:b0:ec:36:7a:
01:38:4f:ac:a2:fa:87:2a:a1:28:6a:4a:18:a1:d3:16:fa:3d:
65:e6:fa:81:84:f9:fe:12:cb:42:6b:b1:54:be:93:f1:0c:9d:
a4:71:3f:c0:e3:2e:39:bc:63:f7:b6:b3:e5:0d:41:f0:39:40:
b3:e6:10:29:bd:d4:4e:37:48:79:91:44:1e:25:1b:24:04:7f:
00:f0:ce:17:c0:34:5f:54:9d:5a:cf:b5:fd:e4:83:c7:0f:04:
94:e5:0a:d8:9a:d3:76:91:ba:b5:c8:e3:06:92:68:0c:e3:e8:
95:49:7e:e4:66:a3:ce:bb:1c:3a:dd:c8:1e:33:06:db:50:13:
3d:ab:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:40 2026 by rpki-client