Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D992887E43A611F18A4064BECE1D38B0.roa
File: D992887E43A611F18A4064BECE1D38B0.roa (raw, json)
Hash identifier: uqL1bzGba70j7+K8lw0XmDrTrLumFtGl4vLkr2vT3x8=
Subject key identifier: 34:D6:E9:7A:88:BD:95:0B:82:6C:FE:BC:DB:F6:4D:8A:BD:A1:40:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D992887E43A611F18A4064BECE1D38B0.roa
Signing time: Wed 29 Apr 2026 08:38:52 +0000
ROA not before: Wed 29 Apr 2026 08:38:47 +0000
ROA not after: Thu 04 Jun 2026 08:38:47 +0000
asID: 136800
IP address blocks: 156.234.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110535 (0x1afc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 08:38:47 2026 GMT
Not After : Jun 4 08:38:47 2026 GMT
Subject: CN=69f1c39c-3480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:2f:7a:77:58:b5:ad:fd:4c:62:78:1b:7d:
a6:12:4b:50:a4:9b:ac:f8:80:73:f6:87:93:21:b5:
54:87:b8:ea:ab:69:1b:89:b7:61:c4:67:72:bb:73:
e9:6f:7b:83:d9:cf:68:22:85:63:ab:08:6b:60:3e:
f1:58:73:45:1d:09:cc:28:85:38:74:d8:6c:16:4a:
d3:84:15:60:27:38:6b:18:3d:2a:3a:28:de:ed:66:
db:f0:83:5a:cd:ae:77:0d:0b:75:60:10:57:70:0f:
e8:71:3b:d8:9a:9c:25:e9:84:3c:cf:43:48:8f:75:
db:97:37:d7:5c:8d:7e:e6:f1:e2:00:fc:ce:15:88:
85:bd:d3:63:5b:4e:0a:d3:0b:3d:61:0d:35:14:cf:
65:d0:74:30:d0:cf:6d:80:d1:02:9c:fa:c6:f6:14:
67:77:4b:99:35:07:34:77:9e:35:4b:12:ae:74:a5:
ab:46:46:87:c1:49:e3:48:bc:06:fa:dd:cd:79:01:
1f:9b:bf:b2:56:f1:64:0d:c5:9c:06:c5:57:4b:0d:
b6:24:59:64:ad:ca:30:e4:78:02:54:cf:41:7e:ca:
69:cd:94:35:3d:b1:ca:95:06:ba:fb:5b:7c:4d:ac:
e0:c1:00:81:5a:d4:2c:80:c1:b2:9a:21:fc:22:42:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:E9:7A:88:BD:95:0B:82:6C:FE:BC:DB:F6:4D:8A:BD:A1:40:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D992887E43A611F18A4064BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.77.0/24
Signature Algorithm: sha256WithRSAEncryption
51:06:5e:c2:db:8d:a6:31:5d:77:ec:ef:51:cf:84:8a:8e:08:
69:2d:6b:33:37:f4:f8:ae:24:fc:01:76:b1:68:83:ae:da:f6:
0e:50:22:7d:79:54:9e:45:bd:66:88:f0:3c:7b:a5:52:99:9f:
f7:a7:bb:cf:cf:e7:4e:37:90:21:49:66:90:61:ed:9f:0f:5c:
5f:b4:ea:6a:64:9b:64:4f:1e:c0:be:b8:24:fe:79:02:08:75:
ef:2f:69:66:89:5f:a9:5e:7f:8c:72:6d:4a:58:03:e3:cd:70:
7e:c7:9a:93:8e:ac:44:1f:d4:b2:4f:2f:88:c6:86:bf:e5:37:
02:d2:89:6e:21:4c:f5:fe:a8:f1:5a:c6:c2:dd:ff:e5:f1:da:
34:3f:5f:f1:2c:d2:ee:19:d1:8e:ff:9d:28:39:83:4d:5b:b3:
56:94:bb:88:69:6e:f7:c8:79:04:96:35:f5:d8:1a:d2:08:23:
9e:3c:8b:70:7f:04:e6:54:c1:65:8d:0e:5f:be:fe:40:2b:c6:
3f:3e:5a:8d:c9:5c:93:a8:ea:d5:c4:29:1d:69:d7:51:22:64:
21:08:71:55:48:b3:7f:3d:84:35:0c:75:61:86:7b:86:a3:64:
60:e2:ea:0b:b9:99:5d:ef:59:62:a3:70:05:6d:cc:9c:27:6d:
8d:78:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:18 2026 by rpki-client