Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD8C53A581111F1B5A667FBCE1D38B0.roa
File: 4DD8C53A581111F1B5A667FBCE1D38B0.roa (raw, json)
Hash identifier: GVJsaClIBlkXNpDHZKxi3M9U0avQRaGyUpTCz8IClug=
Subject key identifier: 79:17:50:B5:0A:5D:B7:2E:89:99:89:9F:01:86:3E:D5:99:53:30:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B966
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD8C53A581111F1B5A667FBCE1D38B0.roa
Signing time: Mon 25 May 2026 08:11:19 +0000
ROA not before: Mon 25 May 2026 08:11:13 +0000
ROA not after: Mon 01 Jun 2026 08:11:13 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
156.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112998 (0x1b966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 08:11:13 2026 GMT
Not After : Jun 1 08:11:13 2026 GMT
Subject: CN=6a140427-1884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:e7:55:3a:0b:d1:e3:72:41:3c:52:eb:c3:
ea:c9:95:7a:ef:2d:07:ec:a5:d8:52:05:18:30:b9:
ff:67:f2:0b:08:b2:2c:0e:5b:28:e6:7b:a5:37:ad:
4c:c9:c2:57:45:56:cf:1d:bc:6b:12:12:a8:c7:f9:
38:2e:95:f8:85:50:c5:8a:0b:32:e5:6a:74:ca:a3:
37:d6:69:55:6b:fb:2d:11:92:4a:60:28:76:ac:8c:
dc:48:80:45:68:64:8d:4c:85:c4:9b:bd:ed:cb:46:
7d:ad:92:01:79:33:90:77:68:ca:4a:67:96:9f:1c:
44:41:17:64:f8:42:1d:d6:71:6c:3c:46:36:e6:c2:
18:99:b4:d8:59:a8:8f:06:03:5f:41:11:7a:ca:0f:
c1:c4:bc:4b:8f:d4:10:eb:67:3b:99:dc:9d:7b:6f:
ea:7e:3e:16:2e:51:33:78:37:a8:4a:b5:3a:73:9d:
fc:02:dd:61:4a:d7:cd:e8:78:38:5f:e5:ad:e3:0c:
f4:c6:d9:48:6b:74:2b:ca:c6:63:7e:2a:dd:9a:2d:
f3:53:1e:02:56:30:d8:b0:4e:59:57:07:ca:98:18:
f4:b7:66:22:4e:71:6c:87:62:c3:0f:1a:4c:93:b7:
39:bc:21:90:be:74:16:3f:bf:26:7f:f7:e8:10:e2:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:17:50:B5:0A:5D:B7:2E:89:99:89:9F:01:86:3E:D5:99:53:30:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD8C53A581111F1B5A667FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5d:30:45:77:0a:44:c4:7a:a4:27:1a:65:58:c8:fb:7d:99:3c:
f8:a8:a5:89:56:c0:2d:f2:97:37:1c:b8:08:f5:11:fb:f0:f7:
05:42:eb:e8:12:96:3e:6b:c1:54:ec:f2:18:93:66:b6:be:be:
26:48:0c:0a:f7:6c:7e:5e:af:c5:48:d1:d7:d2:1d:5d:1c:a3:
07:8d:31:86:d2:73:f3:3b:69:89:7b:2a:0c:27:6e:db:25:d8:
58:b3:69:4e:38:d7:c2:29:4b:cb:3b:a5:60:e6:2c:a0:84:aa:
43:27:62:07:63:72:ee:92:d3:a3:e0:2d:e5:6d:bd:d5:0b:3b:
fa:64:6d:65:ba:4c:06:b2:10:95:cc:8f:88:1f:bb:70:7e:a1:
4c:2f:95:5a:4d:ea:5a:e1:90:e7:65:30:9a:19:fb:b0:b6:a8:
83:af:d1:1a:86:49:0f:09:4b:c3:54:f4:bc:66:17:f3:de:00:
5c:af:a2:de:98:9d:f5:47:9e:1d:d9:0e:fd:13:bb:fe:55:b0:
d9:a4:68:05:da:e2:29:fb:a5:74:d3:63:7f:98:44:19:c4:cc:
6d:37:b3:e9:75:5f:5e:e9:54:a1:03:df:e9:60:0a:dc:0e:47:
15:98:c0:ec:2b:3d:21:12:63:32:d6:e6:58:88:53:da:5b:28:
fd:38:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:40 2026 by rpki-client