Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/156898525F5911F1BE0CD5B2CE1D38B0.roa
File: 156898525F5911F1BE0CD5B2CE1D38B0.roa (raw, json)
Hash identifier: fUAjVdVLuz/P7h4EhzSUpz1BimD4ahaM3FOhSa5PEpg=
Subject key identifier: 69:87:6B:9C:DE:E5:CD:6D:0E:12:CC:DC:A3:40:4C:73:A6:D4:97:A7
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 0365
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/156898525F5911F1BE0CD5B2CE1D38B0.roa
Signing time: Wed 03 Jun 2026 14:32:44 +0000
ROA not before: Wed 03 Jun 2026 14:32:39 +0000
ROA not after: Mon 30 Jun 2036 14:32:39 +0000
asID: 328866
IP address blocks: 41.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Jun 3 14:32:39 2026 GMT
Not After : Jun 30 14:32:39 2036 GMT
Subject: CN=6a203b0c-dd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:ba:aa:14:ac:9d:96:5f:28:7f:58:ee:79:
5e:2c:83:19:e5:c7:4e:d7:00:b9:a3:e8:58:8a:41:
bf:5f:50:da:ec:1e:e0:3c:5f:26:bd:ab:82:6e:07:
2b:17:4b:c8:e2:24:4e:bb:9d:ce:1c:c2:f0:79:b7:
c4:6d:35:23:6e:85:20:31:c7:40:8c:59:ed:ed:09:
17:93:b9:d2:03:2b:cc:62:e2:a4:72:47:c8:76:56:
e1:77:3f:fc:cc:5d:da:d5:d1:85:fe:09:2f:10:26:
ce:c9:01:ea:f1:7c:f6:61:98:c5:f7:9c:d1:f9:c9:
50:62:14:78:89:87:24:2a:05:27:b6:02:e3:64:14:
ea:5f:fb:16:a4:19:22:f3:05:81:d6:a9:ef:b9:3b:
e2:59:1c:4d:28:8f:8b:14:96:e6:54:f2:54:15:68:
39:8c:3a:b7:e9:73:86:59:24:28:45:c2:bd:ce:d9:
f8:e4:d7:d5:b5:ab:be:f9:2b:ed:c1:0c:02:40:00:
13:60:b9:e1:a7:8f:33:24:41:ce:57:ec:b0:de:d6:
ec:27:a4:66:c2:f3:a7:3d:70:3b:c3:e1:25:41:af:
10:89:d1:3d:91:8d:42:5d:2c:b4:9d:c9:5f:e5:a7:
88:0e:37:e0:b8:86:d6:67:f0:2f:48:59:1f:98:6c:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:6B:9C:DE:E5:CD:6D:0E:12:CC:DC:A3:40:4C:73:A6:D4:97:A7
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/156898525F5911F1BE0CD5B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:d4:12:20:f5:b3:dc:c7:0b:5e:7f:18:f8:42:54:fb:45:39:
05:26:c8:c8:df:68:ea:0e:b3:15:b1:43:95:fd:7a:62:6b:7a:
29:d7:0b:40:14:66:dc:c7:dd:d9:d6:13:2b:bc:ed:8d:e8:89:
13:f2:fd:e9:bf:37:b6:c7:5f:8c:86:f7:54:df:04:46:b7:60:
cf:ef:aa:35:dc:1c:19:d1:74:fa:26:57:49:cc:5c:70:3b:43:
a9:67:28:83:08:df:41:18:1d:3b:35:85:b1:5d:eb:d3:1c:31:
01:69:f6:b1:db:de:aa:fa:3d:0f:e8:0e:0e:05:42:73:0f:4b:
45:8e:17:c8:42:69:3b:19:b6:9c:7e:aa:dd:54:40:02:78:7a:
87:ba:a4:09:e8:55:90:85:e7:40:ff:3f:04:a2:f0:5d:4c:4b:
90:29:e7:28:d3:27:39:20:9e:bb:0a:be:5f:d4:88:b4:06:f7:
bd:75:4b:b4:16:b2:c2:33:c3:d2:a3:75:9d:cc:74:a5:3c:de:
d0:f1:0d:bf:27:d7:49:eb:a1:ac:9d:76:46:cd:07:42:87:c9:
f2:29:5b:87:1b:98:db:46:75:eb:77:93:5f:b3:45:c3:60:3a:
a5:fa:0b:30:3d:5e:cf:38:8e:9f:81:c2:e5:03:c3:63:a6:42:
b0:bf:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:43 2026 by rpki-client