Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/065DDD0E569411F1B3A33BE8CE1D38B0.roa
File: 065DDD0E569411F1B3A33BE8CE1D38B0.roa (raw, json)
Hash identifier: B+O9GCN0aQddA1G78tjVoucjRMt47KXcVPdpjHY//Cc=
Subject key identifier: 58:95:43:97:0B:3A:43:76:53:A9:BF:F4:D1:0E:35:03:C1:B8:C0:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B87F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/065DDD0E569411F1B3A33BE8CE1D38B0.roa
Signing time: Sat 23 May 2026 10:41:59 +0000
ROA not before: Sat 23 May 2026 10:41:54 +0000
ROA not after: Tue 16 Jun 2026 10:41:54 +0000
asID: 401739
IP address blocks: 156.247.40.0/24 maxlen: 32
156.247.41.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112767 (0x1b87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 10:41:54 2026 GMT
Not After : Jun 16 10:41:54 2026 GMT
Subject: CN=6a118477-c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:71:f6:79:99:2d:11:91:70:0d:34:03:df:
3a:9c:03:13:36:e9:34:10:1d:29:f0:08:86:93:2e:
c9:3d:1e:12:44:6f:a9:72:0d:4d:20:b9:32:da:fe:
bb:53:d0:4e:6d:25:2f:fa:9c:65:17:5d:9d:d2:2c:
7e:25:5e:7d:a1:bc:1d:e4:17:7a:50:c6:ff:f2:2f:
e4:ca:ce:b3:95:01:66:e6:95:d8:f8:bb:f4:7d:3c:
e2:79:10:cb:85:b1:09:cd:02:98:50:15:e9:79:3f:
49:5d:ab:63:69:a6:75:b2:34:2a:aa:0d:ca:b4:78:
39:3c:79:a8:59:50:cf:62:0c:10:4d:d6:af:14:43:
ff:8c:b0:c6:55:17:1f:d6:9f:71:be:94:08:b0:21:
d2:9e:c9:6b:0b:5b:78:ed:82:00:1c:b8:f5:c6:64:
19:c6:18:25:45:98:c9:96:7a:4e:76:86:74:bc:5b:
33:a4:62:7a:a5:a3:13:5a:0b:eb:47:e4:a7:ff:e9:
7a:71:aa:8b:f5:44:da:30:12:51:18:51:cf:b5:d1:
1e:5b:aa:8f:92:0d:58:a9:ce:b7:51:3f:41:e0:c4:
51:a2:cb:fd:02:3f:61:50:1c:45:f8:a3:3d:01:f5:
d6:ea:67:f8:54:65:08:46:12:91:35:17:9b:f3:54:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:43:97:0B:3A:43:76:53:A9:BF:F4:D1:0E:35:03:C1:B8:C0:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/065DDD0E569411F1B3A33BE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/23
Signature Algorithm: sha256WithRSAEncryption
04:9c:4f:29:5e:ea:b4:52:c3:ed:eb:a8:c6:18:96:11:f5:f3:
11:8b:46:bb:a8:b8:a2:50:bb:14:68:a8:48:2e:e2:43:23:ec:
d8:59:83:3d:6d:09:b2:97:90:2a:8b:aa:8f:76:52:d2:d8:3c:
75:9a:d5:ab:a0:8e:75:ff:8a:1d:4d:bc:3e:ae:da:44:64:e3:
3a:54:3a:c9:97:eb:5c:ae:0c:5d:39:79:26:aa:fc:10:3c:51:
ba:a4:1b:3c:4d:83:dc:24:e6:22:1c:72:80:d5:b4:a5:8f:13:
eb:8e:d2:5a:7a:7f:8a:4c:b6:d6:d3:b7:9c:16:77:7d:5a:a9:
86:0b:3e:a1:04:16:dc:c8:90:51:c7:ce:9b:71:e2:e3:f9:81:
fc:b4:66:88:25:79:2a:ea:e2:be:7c:71:01:a8:91:86:68:75:
64:56:98:5d:21:c1:4a:8b:f0:35:e1:8f:a0:67:ec:e2:49:78:
2c:10:05:4c:89:87:ac:16:6d:90:88:69:bb:d4:0e:40:d4:1a:
5d:f6:54:42:03:a8:74:d2:7b:cc:36:85:b9:d4:7c:b5:c8:fa:
e7:4d:f9:81:69:91:26:fd:28:41:a2:a7:d1:37:c3:1f:14:3b:
aa:2b:f5:8c:44:36:c7:aa:14:0e:bc:7a:36:89:0b:2c:20:87:
5e:a8:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:14 2026 by rpki-client