Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10FDA5345E8F11F1BFFAE9E5CE1D38B0.roa
File: 10FDA5345E8F11F1BFFAE9E5CE1D38B0.roa (raw, json)
Hash identifier: I6119Z+A01YiLAFW9mDtVQVczdq+ClFw++4M9HnFP94=
Subject key identifier: F1:AA:78:32:08:34:6D:2B:5F:AB:CE:3D:98:0F:00:AC:BB:81:E5:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10FDA5345E8F11F1BFFAE9E5CE1D38B0.roa
Signing time: Tue 02 Jun 2026 14:26:39 +0000
ROA not before: Tue 02 Jun 2026 14:26:33 +0000
ROA not after: Sun 28 Jun 2026 14:26:33 +0000
asID: 8254
IP address blocks: 156.246.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113468 (0x1bb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 14:26:33 2026 GMT
Not After : Jun 28 14:26:33 2026 GMT
Subject: CN=6a1ee81f-7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:96:f6:26:2e:09:b2:84:dd:58:2a:47:03:1a:
5c:f3:e2:71:78:cc:01:bd:11:7e:f3:79:ff:ba:a0:
0a:0c:8d:ee:79:12:2d:c7:18:b0:98:be:73:40:d7:
8f:27:8e:ff:f9:e3:ff:f3:5f:da:bb:f6:d9:1d:53:
83:33:57:d2:34:7f:04:93:09:5c:cb:f6:9d:9b:a7:
3b:8e:83:63:11:9b:df:03:68:26:9a:7c:c2:40:15:
62:06:35:77:35:f3:91:e6:39:26:21:45:49:7d:be:
20:c6:ce:17:34:df:f3:34:54:b9:ad:da:f2:00:9b:
1f:e9:82:3d:12:e8:70:7e:1a:ca:e5:32:8a:17:b0:
c3:60:07:d1:cc:5f:c9:8e:2f:50:27:c1:bf:55:14:
84:a4:50:ff:67:bc:b8:3b:8a:eb:01:8c:63:58:a9:
da:21:d6:5b:8a:ac:c2:17:ef:d1:24:20:ff:ea:ea:
9d:22:3f:05:8a:f9:1c:6e:af:9e:eb:fb:ec:c3:6c:
94:96:37:e1:2c:1a:41:4c:84:c3:8b:02:20:f7:0b:
63:14:ed:98:d0:ff:1f:ad:7c:fe:d6:06:85:c0:16:
9f:0b:62:4c:ae:cd:b1:3f:93:fb:b0:34:9f:b1:08:
b6:09:db:e4:35:e7:51:eb:79:c4:36:a7:6d:89:c1:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:78:32:08:34:6D:2B:5F:AB:CE:3D:98:0F:00:AC:BB:81:E5:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10FDA5345E8F11F1BFFAE9E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.181.0/24
Signature Algorithm: sha256WithRSAEncryption
02:da:11:6c:22:b2:d9:6a:f9:94:23:8e:65:5b:dd:7a:ae:b0:
10:1e:2f:2e:a1:84:7b:6c:25:25:a9:a8:18:b8:f7:a7:7f:49:
c9:08:92:e5:1e:60:5f:9e:a8:97:2a:0f:4c:d4:b3:06:2a:e9:
73:52:0c:74:92:6c:0e:f5:9e:1f:dc:32:6a:c7:e9:da:52:ea:
3b:ea:0a:e6:e9:af:ce:48:c2:91:ce:5a:28:d6:7d:fa:de:28:
70:9a:ec:c4:2f:d4:7d:dd:69:f4:b3:4c:80:97:e6:62:42:fa:
90:fe:e8:28:8d:17:6d:9b:dc:ff:a6:02:08:2a:7d:3e:3a:79:
5b:28:bd:d0:7d:a1:d7:d1:9a:df:2b:12:2f:fc:f1:2f:e7:a7:
54:6f:e3:76:71:fa:0e:36:c1:af:c9:89:3f:dd:68:63:a2:75:
ae:f3:ba:0d:ec:a9:9d:66:e7:21:2c:40:5e:02:20:7e:d2:80:
e8:26:e3:04:7c:9e:d8:ae:ba:53:29:c0:d9:84:c9:45:82:86:
65:44:93:1c:8b:4e:23:05:2c:17:6b:a9:4b:d4:32:ac:76:14:
6c:41:fa:ee:f7:c8:ec:7f:4f:cc:4e:13:6b:a6:7c:85:09:39:
ac:65:0d:99:15:c4:21:1f:f4:76:cf:02:95:06:f5:8c:59:fc:
5a:ec:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:17 2026 by rpki-client