Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B1DD2A755911F1AE5A8DB1CE1D38B0.roa
File: 11B1DD2A755911F1AE5A8DB1CE1D38B0.roa (raw, json)
Hash identifier: sFqSEmw9eAiU7KUK5a/DUBQ5ow9EYf5LcvfXu5Perq8=
Subject key identifier: 28:F6:FE:12:8A:E0:D1:C0:C5:9E:8A:EF:99:35:35:B6:8A:C1:48:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B1DD2A755911F1AE5A8DB1CE1D38B0.roa
Signing time: Wed 01 Jul 2026 14:28:04 +0000
ROA not before: Wed 01 Jul 2026 14:27:59 +0000
ROA not after: Tue 04 Aug 2026 14:27:59 +0000
asID: 211961
IP address blocks: 156.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115196 (0x1c1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 14:27:59 2026 GMT
Not After : Aug 4 14:27:59 2026 GMT
Subject: CN=6a4523f4-680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:ef:dd:5c:20:06:0a:ed:a8:e4:2e:1f:ea:
59:91:61:a1:68:a8:c4:88:ca:31:c0:02:a5:1f:d7:
8f:e5:d9:b3:4a:1b:c7:a3:e5:4c:d5:fb:53:cc:8c:
3f:05:e6:ce:03:a5:2e:91:ae:53:f7:1f:cc:91:50:
cf:7c:08:db:0a:50:e8:5a:9d:25:d4:74:15:f5:e6:
f8:66:46:c5:92:27:58:b1:58:bc:74:9a:98:2c:05:
de:e5:11:58:3e:97:21:1e:35:13:1d:37:83:32:54:
40:db:fd:da:c6:25:bb:89:00:80:ae:a7:d5:08:af:
9a:c7:85:92:11:9e:82:2b:f8:83:c3:e4:95:ba:07:
61:cf:9f:61:33:8c:1e:df:8a:ea:fa:c7:ca:00:bd:
59:4b:ad:84:85:3d:ed:ad:59:f1:cd:c2:84:1f:0b:
d1:98:8a:fe:d6:23:fe:eb:44:1b:f9:f0:0d:7e:77:
b6:4b:fb:1e:e0:fc:0d:a9:de:73:50:50:cf:fc:c7:
a5:dd:ad:27:6d:9b:e4:29:9b:ff:87:ac:53:2d:e5:
2d:f6:95:aa:00:97:81:92:e7:96:b9:14:c2:96:a7:
36:b6:00:56:63:cd:dd:e0:5f:7d:f1:a6:e9:c3:2a:
73:75:fd:b0:d4:3b:f4:83:51:ef:0d:90:21:0f:39:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:FE:12:8A:E0:D1:C0:C5:9E:8A:EF:99:35:35:B6:8A:C1:48:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B1DD2A755911F1AE5A8DB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d0:c5:af:2f:79:68:a8:6a:8f:9b:70:2a:35:59:05:9b:9d:
60:a0:33:46:39:2e:c5:3f:e5:ae:2e:29:89:5b:f1:be:07:eb:
1e:b6:9a:12:97:37:40:80:5b:02:7f:45:39:a5:b0:00:73:76:
29:b5:1c:52:81:94:09:13:44:f0:36:8c:25:76:43:8b:4b:e9:
c5:3b:b0:6c:7b:b0:18:0e:a5:c3:7a:be:40:9b:5b:4f:64:80:
c8:31:ee:24:38:d2:d0:9c:64:10:2a:4e:8f:f0:91:d8:dd:0e:
36:33:ff:a0:f2:c8:b3:c9:67:15:43:c2:03:5d:c1:93:5a:3a:
12:17:b2:00:82:88:3a:d6:bb:30:fc:79:3b:07:db:5e:7c:be:
45:fb:58:07:66:90:39:21:2b:0f:7a:05:ef:67:65:28:4d:db:
1f:49:91:80:b8:ae:e8:ea:09:e2:c6:46:d6:70:68:57:86:72:
5b:33:99:5c:43:ae:62:7a:4a:21:21:5d:b2:42:17:59:76:4d:
f6:d4:d6:cb:57:13:ac:d0:5c:8a:ee:92:f7:92:6e:39:28:7f:
a1:d1:84:4c:cd:17:ca:70:21:c3:41:06:f5:b5:24:e2:0a:61:
98:a8:67:f6:a5:8b:44:51:a4:a2:20:19:10:5b:62:2b:73:b0:
a7:f3:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:00 2026 by rpki-client