Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B5B06E86A3411F1B37D1DB5CE1D38B0.roa
File: 0B5B06E86A3411F1B37D1DB5CE1D38B0.roa (raw, json)
Hash identifier: HBJm2Jq71xYLEQk7SWkAMv137Z04YUf61PYGLCPDlq8=
Subject key identifier: 39:5E:AA:1A:3C:6B:88:E1:10:00:D2:8E:D9:CE:32:00:1C:A0:E0:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B5B06E86A3411F1B37D1DB5CE1D38B0.roa
Signing time: Wed 17 Jun 2026 10:05:19 +0000
ROA not before: Wed 17 Jun 2026 10:05:14 +0000
ROA not after: Mon 20 Jul 2026 10:05:14 +0000
asID: 139923
IP address blocks: 156.254.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114324 (0x1be94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 10:05:14 2026 GMT
Not After : Jul 20 10:05:14 2026 GMT
Subject: CN=6a32715f-b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:85:88:2c:2c:44:6f:51:aa:21:34:00:94:
70:4e:fc:87:24:03:8f:6c:66:2b:04:41:ca:18:fb:
eb:99:f7:80:58:bb:1b:9b:9b:11:1a:11:47:3c:04:
09:38:01:3d:98:48:43:1b:d6:7e:a2:e2:7e:32:b1:
bb:41:d9:20:de:c9:1c:2b:9e:52:ae:ac:67:ae:d4:
ba:bd:2b:78:1b:46:4b:4a:6e:c5:2d:6a:18:a9:4e:
39:b7:b2:17:ed:d2:8c:87:bb:9e:0f:2d:cd:98:dd:
bf:ad:10:92:4e:26:88:72:ad:c2:33:48:3f:3c:d5:
ec:20:e3:ce:59:49:5f:8f:c8:27:ac:d8:4d:bc:c6:
e5:9d:f6:64:81:8f:4a:f2:a0:a8:8e:65:ad:70:16:
07:62:88:74:82:13:39:dd:3c:bf:ec:b7:a1:58:eb:
68:d1:92:e2:44:ec:46:87:8b:60:f0:e3:47:30:b6:
07:be:e5:5a:91:24:4e:29:b7:68:64:03:29:c6:0c:
65:6d:ea:36:f9:f7:83:a0:4c:98:b0:65:80:55:72:
d6:d0:9f:5a:59:74:a8:ab:74:ba:36:d7:67:3e:2d:
d8:ab:24:02:22:fc:f1:73:eb:87:98:fc:fd:7d:bc:
e2:92:77:ad:af:2e:ee:6d:6f:23:51:d9:7a:0c:05:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:AA:1A:3C:6B:88:E1:10:00:D2:8E:D9:CE:32:00:1C:A0:E0:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B5B06E86A3411F1B37D1DB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.5.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3a:db:1e:6f:f0:ec:01:8d:22:10:04:5f:0b:5c:8d:52:7c:
8f:bb:a5:9b:1e:95:bc:9a:e4:78:87:a6:35:f4:6d:14:47:10:
80:2b:30:41:b3:ad:8e:61:a4:81:81:fc:de:10:a4:e6:d2:64:
b1:94:d7:32:61:33:fb:d5:23:33:4b:63:9e:34:e6:4f:9b:54:
cb:ec:4c:4c:5b:81:e0:3a:ea:3e:c4:23:3d:39:57:01:26:1d:
e2:f0:93:a6:66:af:9d:c9:48:1e:6b:ee:5a:72:04:86:21:39:
2d:2f:85:10:99:54:f3:a5:17:71:ac:b8:19:18:ff:fd:b8:47:
90:aa:7f:12:99:4b:bb:29:8e:83:52:07:c6:db:00:b6:05:c9:
62:5f:58:80:83:68:7d:58:f4:12:4b:b8:e2:9c:ba:da:aa:86:
af:f4:3d:a4:02:4c:85:47:6e:92:5e:65:3c:7b:ba:72:44:24:
19:d8:f7:ff:51:8c:ba:d4:8f:69:5f:b2:11:4b:50:b5:ef:d8:
78:8d:fb:2b:c3:96:cf:9b:06:bc:df:a3:fb:7a:a5:aa:b4:66:
69:ef:06:13:f1:1b:c6:b6:1b:10:12:60:db:2a:d2:7f:24:a1:
0d:9b:45:2f:30:07:38:f9:2f:a1:29:5d:ff:81:9d:ce:7f:ae:
b6:cc:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:10 2026 by rpki-client