Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06896100560711F18E4E1104CF1D38B0.roa
File: 06896100560711F18E4E1104CF1D38B0.roa (raw, json)
Hash identifier: hATujRHlc13D+/Me1IrVJ6nc7vKhdbgHJSVyXkJR/vE=
Subject key identifier: F6:4D:9C:68:15:9E:12:C9:0C:03:9A:41:FE:78:63:7E:3E:F3:B8:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B82E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06896100560711F18E4E1104CF1D38B0.roa
Signing time: Fri 22 May 2026 17:52:40 +0000
ROA not before: Fri 22 May 2026 17:52:36 +0000
ROA not after: Mon 29 Jun 2026 17:52:36 +0000
asID: 141167
IP address blocks: 156.225.0.0/23 maxlen: 24
156.225.12.0/23 maxlen: 24
156.228.3.0/24 maxlen: 24
156.238.2.0/23 maxlen: 24
156.254.120.0/22 maxlen: 24
156.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112686 (0x1b82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 17:52:36 2026 GMT
Not After : Jun 29 17:52:36 2026 GMT
Subject: CN=6a1097e8-3508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:da:2c:48:56:56:d6:9a:0f:61:ea:a3:e6:
4c:17:fd:16:dc:96:5b:26:d7:3c:35:9b:76:16:4e:
9f:db:2b:12:5a:da:5f:90:93:10:5f:3b:23:08:da:
0b:e4:01:6a:08:ed:f5:45:0d:4c:0c:ac:a6:f7:25:
e2:73:29:2e:56:9e:e7:75:6b:bd:73:eb:99:57:8b:
7e:8a:d7:61:40:8d:c8:8a:4f:b2:a7:56:3b:d1:91:
1c:d6:0e:a7:dc:83:25:f4:55:98:7c:75:90:24:94:
5a:4b:c0:28:ab:cc:6c:9e:9c:07:5c:13:d8:d4:77:
5d:2e:12:9c:89:00:b2:fa:ed:f9:6a:4f:25:bf:c5:
7e:ae:bf:9d:d9:6d:22:a3:83:10:f2:fc:20:9f:f4:
dc:c9:44:dd:25:65:d5:9c:70:c9:d6:0d:1e:59:f4:
e7:a9:d4:84:b8:a1:0b:6e:dc:25:48:56:a3:bb:df:
c4:64:3e:2e:b0:99:8e:f8:fc:84:89:e5:8b:7f:d3:
f8:70:b2:8f:62:70:25:e9:ae:3c:1c:2a:c8:bf:cf:
b6:d5:dc:60:85:d1:e9:de:aa:65:50:1a:67:73:2b:
e9:fe:17:a5:a1:c2:2e:e3:a7:9f:2e:55:fb:f8:0b:
11:fd:74:b7:32:00:b7:af:c8:a5:b1:b2:e1:7e:0e:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:9C:68:15:9E:12:C9:0C:03:9A:41:FE:78:63:7E:3E:F3:B8:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06896100560711F18E4E1104CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.0.0/23
156.225.12.0/23
156.228.3.0/24
156.238.2.0/23
156.254.120.0-156.254.125.255
Signature Algorithm: sha256WithRSAEncryption
1b:6a:97:2d:fd:38:71:3b:e3:cd:14:95:8f:60:fa:db:7f:da:
08:8a:fe:1f:af:7f:9a:f6:6a:38:96:13:1b:4f:e1:ba:2a:c1:
fd:b7:69:52:91:1b:16:0c:2c:e6:01:e1:a7:f4:6e:04:72:03:
87:b2:8d:93:66:e3:76:07:4f:96:33:55:cf:fd:5c:5d:4f:b3:
25:92:7c:e2:e8:39:4f:1c:7e:a6:04:57:69:ca:4b:2f:be:0c:
8e:c3:d8:c2:eb:ac:84:5a:ef:86:3e:35:f1:62:a2:01:db:72:
46:d5:49:8f:bf:0b:15:70:5a:8e:d3:20:04:1b:72:2b:dc:01:
07:f3:fb:7b:c0:73:f5:5f:77:9c:9d:a8:1f:35:d4:c2:b3:e4:
d2:94:c4:8e:46:1b:68:9e:44:33:6f:2f:cd:34:d1:6d:68:5d:
0e:34:6a:2c:fb:02:36:94:02:06:46:81:8f:99:c6:89:a4:f3:
71:dc:8f:29:be:7a:84:2a:b2:10:5b:2b:b5:03:92:7f:87:7e:
52:94:62:f9:bf:32:cb:b4:d3:ea:5e:b4:1f:26:a5:a1:dc:81:
b0:6a:59:ee:e6:b3:2b:98:97:66:23:68:29:7c:4d:d9:c0:b9:
db:2b:55:60:4f:7d:fe:57:79:7e:65:06:8e:0f:f7:81:47:68:
3f:9b:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:40 2026 by rpki-client