Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB9C16DA439C11F1BB2DE701CF1D38B0.roa
File: DB9C16DA439C11F1BB2DE701CF1D38B0.roa (raw, json)
Hash identifier: j3ODoUd8S9gJTKv6pPyfBRuO7dluuDOUj3jV5eqyAQI=
Subject key identifier: B6:2A:E9:B1:BB:E5:0D:AB:FE:D5:C7:23:47:33:2F:45:57:F1:CD:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB9C16DA439C11F1BB2DE701CF1D38B0.roa
Signing time: Wed 29 Apr 2026 07:27:21 +0000
ROA not before: Wed 29 Apr 2026 07:27:15 +0000
ROA not after: Fri 05 Jun 2026 07:27:15 +0000
asID: 137899
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110523 (0x1afbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 07:27:15 2026 GMT
Not After : Jun 5 07:27:15 2026 GMT
Subject: CN=69f1b2d9-791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:91:8d:4c:aa:fb:13:46:eb:61:f3:16:07:
1f:69:92:6a:12:2c:82:b2:c3:47:51:27:9f:2e:19:
81:04:9d:c3:27:bf:48:e0:4c:71:cf:e1:ea:b1:3c:
a7:c6:58:d2:27:c8:01:d6:2f:23:79:3f:81:c5:1d:
7c:98:df:dc:eb:9c:94:80:fd:c1:5a:63:12:b2:77:
51:50:81:b7:62:63:87:02:bd:60:bd:ee:70:5a:03:
ec:4a:88:4e:21:1b:80:11:91:17:bc:21:cc:91:ec:
d3:bb:b2:44:fa:96:dd:50:c5:c7:1a:3b:39:69:0b:
9e:dd:26:4b:4d:90:75:43:17:67:bd:70:92:6b:ea:
bc:2c:73:39:48:19:a3:66:7c:03:97:9c:b8:c3:70:
04:64:64:4b:10:9c:b8:3f:a7:be:9c:12:11:49:7f:
22:46:ab:64:46:b1:f7:27:65:a2:48:38:f2:64:1a:
8a:ba:bd:73:d0:aa:88:30:dc:8c:7c:e8:43:7b:44:
82:ae:62:e6:e2:31:37:44:ba:dc:ab:22:3a:bd:15:
51:15:8a:b6:a4:88:78:46:60:ab:7c:44:cd:c2:d6:
60:2b:7a:b8:87:e4:72:f0:f2:06:30:02:87:ca:54:
68:0f:b1:d1:b5:44:cd:a1:e6:ac:56:9a:6b:57:0e:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:E9:B1:BB:E5:0D:AB:FE:D5:C7:23:47:33:2F:45:57:F1:CD:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB9C16DA439C11F1BB2DE701CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:16:0d:22:fa:5b:1c:c5:ef:0b:ae:15:70:ba:47:69:cf:63:
2d:39:7e:c1:1b:af:2c:b1:a6:e3:f9:c7:41:a9:ea:c4:5d:8b:
0a:73:44:9b:31:48:72:04:37:99:7e:20:4c:14:f2:7a:3d:a6:
03:f5:82:03:88:57:45:43:99:8d:07:b9:aa:2c:8d:e7:47:7a:
22:39:d9:dd:ee:72:77:e9:80:78:a9:69:d0:dc:57:b6:95:5b:
fa:72:d4:38:b3:50:2c:ce:8b:95:f7:6b:f7:51:03:62:00:cd:
68:73:2f:7c:87:97:60:76:92:ae:1e:ab:25:a3:ce:f1:d4:87:
d0:4d:6c:6c:22:45:59:65:86:ff:53:a8:7b:87:56:72:f1:30:
02:24:98:55:13:32:5e:30:9f:b3:6a:f2:f4:3e:3d:b8:80:d5:
27:a4:9c:e2:4c:3b:fa:48:3c:b5:38:06:d2:a6:be:d9:c1:72:
0c:9c:31:ba:6a:92:70:ee:97:d0:8b:e0:10:da:c5:47:cb:35:
b7:49:b0:9b:da:4f:5b:03:5c:31:1b:aa:e2:03:28:21:62:59:
9d:61:92:eb:f3:99:14:70:a9:d0:df:86:99:e4:97:4e:3d:71:
17:dd:b2:9b:5a:62:57:23:de:af:29:1d:2c:b0:d4:b7:44:cc:
1a:49:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:12 2026 by rpki-client