Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC612A76210611F1883F30E2DAE4EC9C.roa
File: FC612A76210611F1883F30E2DAE4EC9C.roa (raw, json)
Hash identifier: ML1yeDlXT1yJoPtGNBEv3HkKYELZ/MmXcBdoFspePnQ=
Subject key identifier: B4:39:49:4A:B4:C4:02:83:EF:B4:85:D3:5D:5D:2B:4D:FF:AA:F6:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A55A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC612A76210611F1883F30E2DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:08:52 +0000
ROA not before: Mon 16 Mar 2026 07:08:47 +0000
ROA not after: Mon 20 Apr 2026 07:08:47 +0000
asID: 139923
IP address blocks: 156.254.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107866 (0x1a55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:08:47 2026 GMT
Not After : Apr 20 07:08:47 2026 GMT
Subject: CN=69b7ac84-9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:49:8c:71:b0:e6:4b:cd:96:13:82:f1:0e:
04:89:d2:7c:59:8f:0b:e7:be:fb:6a:04:9f:1e:a3:
bb:a9:a8:7e:a2:20:f4:fd:8e:ac:25:1d:7a:7c:30:
1a:b2:b2:a5:11:cd:46:ee:6a:9d:90:e2:0c:9e:48:
2b:0e:2f:27:c7:06:e4:2a:a3:fe:23:1f:37:98:59:
81:ad:f2:2e:2f:2f:4b:1c:78:56:a8:33:96:6e:b5:
bf:38:af:75:a7:50:f3:b1:25:6b:4b:08:8f:6c:5e:
c3:07:21:f2:84:18:f1:08:a6:b2:08:c4:4d:ff:a8:
62:d1:3b:64:7e:24:50:ca:f3:2a:8b:58:f8:dd:c5:
2b:03:a2:3b:33:fa:66:db:e4:e6:d5:27:ce:c8:65:
13:59:4a:8e:e8:1c:0e:80:2e:10:9a:4f:c5:5c:bf:
0c:dd:cd:7f:b6:36:94:58:aa:66:48:2c:8c:28:3b:
17:c7:14:6b:fa:5a:7d:d7:fd:99:82:de:25:94:3d:
db:f2:68:86:3b:18:e7:ca:2b:5f:f9:c5:02:89:09:
fa:75:86:ea:c1:3f:0c:09:ab:c0:58:cb:f8:98:d2:
41:d1:e1:40:1d:95:56:0a:81:05:6f:7f:97:35:47:
7a:d0:78:16:67:a7:7e:2c:42:a2:7e:c6:a7:a4:f6:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:49:4A:B4:C4:02:83:EF:B4:85:D3:5D:5D:2B:4D:FF:AA:F6:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC612A76210611F1883F30E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.5.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f1:f3:9c:52:d6:7b:85:8f:65:33:d3:00:07:eb:bd:53:ed:
ba:09:64:85:15:99:ed:cd:50:c8:b6:73:7a:06:73:10:73:c8:
ee:8f:3f:d4:67:ff:44:a0:a4:9f:bb:78:09:96:ee:35:dc:86:
cf:50:78:d5:3e:f1:8b:5c:cc:1f:58:47:8f:01:b7:ac:32:fd:
1e:e1:de:d9:73:6d:2c:40:6b:cc:d4:43:03:d6:88:67:0f:be:
1d:27:fc:ff:41:48:80:89:6c:0b:ff:ee:b7:c7:5f:a9:02:b6:
59:2f:0f:c2:06:25:ac:ca:7c:fa:3e:78:97:12:7e:a6:4f:e7:
f3:29:88:06:b0:dd:a9:f9:21:a1:14:fb:b4:88:33:1a:7b:df:
d7:d7:6b:a1:ca:0a:0b:8c:c3:e4:00:76:e9:2f:0c:c9:70:4f:
16:0e:24:89:d7:04:8b:4f:b4:89:78:db:2d:2b:76:00:bc:fb:
be:4a:bd:33:e4:03:f5:95:c2:51:94:dd:06:44:70:5c:62:97:
fa:70:0f:6e:ca:1f:3e:2f:12:6a:48:70:16:9e:a1:79:50:53:
a1:b1:d8:c5:4d:19:41:9e:d2:58:9b:6d:6b:51:4b:4f:cc:de:
27:96:b7:f2:26:d8:e9:7a:f7:39:78:33:87:c0:50:6d:cb:56:
5f:5e:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:21 2026 by rpki-client