Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030F9270699D11F1BD7F8B14CF1D38B0.roa
File: 030F9270699D11F1BD7F8B14CF1D38B0.roa (raw, json)
Hash identifier: eN0afz+HYM58YKSmi7O94TQiGtx20dUh+5x93+1MX2s=
Subject key identifier: F7:7A:B6:7C:BA:DF:AB:49:20:D3:01:D4:94:DF:40:3A:B7:F5:6B:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030F9270699D11F1BD7F8B14CF1D38B0.roa
Signing time: Tue 16 Jun 2026 16:04:11 +0000
ROA not before: Tue 16 Jun 2026 16:04:06 +0000
ROA not after: Mon 27 Jul 2026 16:04:06 +0000
asID: 63023
IP address blocks: 156.229.119.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
156.233.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Jun 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114228 (0x1be34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 16:04:06 2026 GMT
Not After : Jul 27 16:04:06 2026 GMT
Subject: CN=6a3173fb-b89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0e:43:b4:2c:95:9a:4c:7a:eb:cf:ed:eb:12:
4e:1d:06:3d:74:8a:7b:11:25:ae:ed:4a:6c:bd:5f:
b8:a2:a7:96:b4:0f:63:50:2b:7d:e0:d9:54:2b:90:
4f:db:b0:e3:87:d1:0b:fc:ca:af:66:d9:b5:d5:f5:
15:bd:c8:15:48:ec:06:7f:61:d3:6a:62:af:83:a9:
82:9e:18:ca:36:9a:e6:11:85:64:99:0e:b7:9a:9a:
58:77:74:eb:30:4f:c1:58:bd:8d:fc:6e:f2:a9:7d:
a4:f2:c0:35:ca:13:38:f3:f6:88:83:a8:17:1b:4f:
6e:98:0b:6d:ec:c7:0c:65:eb:86:12:f1:84:5a:31:
da:b2:8b:d4:76:ed:d7:24:76:c4:0c:93:cc:73:62:
11:8f:a1:14:c7:7a:02:5c:68:d2:ac:4a:b0:11:59:
7c:10:eb:a2:8d:4a:95:ed:70:8a:15:3f:51:be:18:
30:76:2c:0d:68:f5:1f:78:3a:e7:da:96:c2:4c:a4:
ce:08:e6:a9:52:e4:b4:11:8e:4c:c5:d4:17:d8:6c:
14:52:a5:8a:d4:e1:0b:64:bf:d7:3a:37:2a:b3:73:
b0:72:a7:f4:33:28:5b:70:69:e2:54:60:bf:86:a5:
e9:83:3c:5f:c8:aa:cb:d1:24:7c:ab:f8:2e:96:3a:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:B6:7C:BA:DF:AB:49:20:D3:01:D4:94:DF:40:3A:B7:F5:6B:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030F9270699D11F1BD7F8B14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.119.0/24
156.229.239.0/24
156.233.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cf:f4:85:f0:f8:34:f7:2e:c8:ee:f6:2d:0b:2f:99:f6:4d:
a1:2b:d6:93:5a:c4:b6:ec:4f:6d:19:df:73:7f:36:03:6b:fa:
b0:78:07:1f:cf:72:a6:e0:65:70:a5:4e:2a:b8:9c:6c:b3:23:
10:22:07:57:84:8d:b0:39:42:e5:7b:63:1e:29:b4:d0:cb:5e:
de:66:6d:c1:d3:4f:b1:24:99:8a:4f:ef:db:81:f2:72:ad:77:
c0:0e:3b:4c:4a:39:dc:76:5b:5d:13:77:51:90:73:44:00:b7:
88:8a:f9:59:16:1f:dd:b9:79:e7:2f:33:12:bc:58:eb:94:cc:
0f:85:32:52:2d:a1:73:5d:b1:55:f8:23:6c:56:87:12:87:be:
9b:2e:65:19:31:e8:90:25:81:b7:ba:4f:4d:b3:7d:bf:bc:7b:
52:01:e3:e8:ce:31:82:29:50:55:44:42:3c:cc:85:e2:a7:b9:
4b:00:6b:12:6b:04:4d:33:e8:19:30:16:47:c7:f1:11:96:c0:
80:ef:fb:a9:a9:9a:b9:03:81:ae:d0:4b:ea:b9:b7:64:8e:98:
87:b2:d1:78:06:51:31:db:ce:c9:bf:cd:3b:fc:e8:00:ca:d6:
51:32:5d:8f:fd:c5:3f:0f:0e:b5:ec:a9:3a:15:c9:41:d0:89:
df:87:31:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:19:52 2026 by rpki-client