Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E86AB451C611F1829977A1CE1D38B0.roa
File: 06E86AB451C611F1829977A1CE1D38B0.roa (raw, json)
Hash identifier: 0T6iFMLPHCOmV1A8O291TkE0IFu9g2FcGj1wErEYAG4=
Subject key identifier: E3:ED:69:09:A7:58:D4:4A:DD:D8:BB:45:72:8B:62:17:33:00:26:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B55B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E86AB451C611F1829977A1CE1D38B0.roa
Signing time: Sun 17 May 2026 07:57:19 +0000
ROA not before: Sun 17 May 2026 07:57:14 +0000
ROA not after: Wed 24 Jun 2026 07:57:14 +0000
asID: 402169
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111963 (0x1b55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 07:57:14 2026 GMT
Not After : Jun 24 07:57:14 2026 GMT
Subject: CN=6a0974df-9f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:2a:90:22:c3:a8:6f:2e:55:92:e0:78:73:
ad:3e:30:55:46:75:1f:51:77:5b:a9:99:cb:b6:7a:
99:bb:dd:f8:52:8e:bb:6c:3e:ea:44:71:d5:0d:f1:
fa:3b:d7:70:59:93:0b:1f:ef:f8:ed:c2:85:15:60:
ec:66:89:93:cc:0e:d6:65:84:13:74:b9:70:bf:8e:
b5:ff:e7:8e:37:18:4d:f9:64:d2:e4:48:24:28:dd:
07:a0:01:71:96:5e:6f:7d:7e:3a:9a:9b:4d:a3:b1:
46:5e:cd:5e:43:93:a5:d9:c7:2d:bc:31:1c:f7:06:
e9:b2:98:ec:91:33:5f:bc:50:2b:84:04:4c:b6:44:
93:4c:4f:58:67:57:aa:40:37:a6:ff:32:9a:f1:78:
66:74:da:28:0f:0e:1b:f2:f7:4c:74:cb:f3:e6:35:
86:79:88:64:dc:45:e9:37:12:08:19:82:e2:70:d1:
8b:c7:29:f9:32:bb:77:db:11:a5:16:4d:44:16:e9:
ff:81:c1:f3:b4:a7:e0:a3:5e:7e:64:9e:90:96:fc:
4d:bc:51:9e:4c:54:6e:04:a6:f1:eb:22:71:c6:6e:
58:2a:75:78:cf:63:f7:5f:9f:08:96:bc:8d:93:18:
f9:79:d5:e2:06:30:df:ed:87:78:de:ec:02:c2:22:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:69:09:A7:58:D4:4A:DD:D8:BB:45:72:8B:62:17:33:00:26:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E86AB451C611F1829977A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0/21
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
42:21:11:40:17:1a:16:75:54:65:c7:1b:51:9b:82:79:dc:b4:
c3:2a:80:ab:8e:79:19:82:f8:8b:f7:d2:50:8a:e9:7b:3f:22:
e9:89:8d:85:65:ef:cd:b9:a3:7d:f5:25:1b:4d:77:3a:3f:0c:
c2:fb:f3:26:39:d6:f6:6b:b6:cd:5a:51:be:fb:e7:95:7f:4b:
9a:cf:69:57:b0:fd:03:be:23:5f:0c:ca:4c:d8:45:ed:07:78:
c1:bd:21:64:23:5e:73:95:5f:1f:3e:fe:44:3e:fd:89:cd:ad:
cf:55:f0:ac:5a:25:94:07:73:0d:82:34:ee:33:ef:a8:c9:27:
bc:87:0a:7b:e0:d7:08:3f:eb:76:d7:8e:ca:a2:4e:ad:b5:52:
eb:34:b5:82:d4:64:c9:ed:e8:96:97:fb:9c:62:04:4a:ce:49:
b3:4d:f2:56:e6:c0:28:90:26:f0:ee:3e:4e:96:69:5e:76:26:
df:bd:26:bc:c5:25:cc:85:6f:12:ed:d7:6f:3e:ae:e0:00:bf:
81:e2:c2:17:ab:33:6d:4a:45:27:c8:cd:f7:ea:98:16:75:82:
00:84:19:0c:36:43:96:2a:16:bf:0e:e4:c5:18:9a:79:43:e0:
6e:05:14:80:a7:63:cb:16:17:c4:91:65:c8:f8:88:55:bd:f4:
da:d1:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:36 2026 by rpki-client