Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A66BB5455E511F19B1511BACE1D38B0.roa
File: 1A66BB5455E511F19B1511BACE1D38B0.roa (raw, json)
Hash identifier: x1SU8UuDplSbxUptuA60r0OCvnPgbaArB/kuWAd2aXI=
Subject key identifier: FF:AC:6C:B9:E9:14:0D:BF:16:41:44:87:E1:D4:E7:B2:33:50:52:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B804
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A66BB5455E511F19B1511BACE1D38B0.roa
Signing time: Fri 22 May 2026 13:49:51 +0000
ROA not before: Fri 22 May 2026 13:49:46 +0000
ROA not after: Fri 14 May 2027 13:49:46 +0000
asID: 135097
IP address blocks: 156.224.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112644 (0x1b804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 13:49:46 2026 GMT
Not After : May 14 13:49:46 2027 GMT
Subject: CN=6a105eff-6465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:0e:73:d6:66:ed:dc:34:bd:eb:85:3f:4c:
8c:7a:fa:0d:f9:b0:d1:4d:75:c0:32:98:ad:a6:3d:
f3:56:82:45:b2:5e:b8:cb:99:09:c7:f5:41:84:b6:
78:33:50:00:f0:42:f3:95:a4:a3:dc:90:70:0f:be:
a8:0b:7a:74:41:46:b5:ef:a5:e0:37:4f:af:0c:2c:
53:ea:df:fe:ea:ef:cb:06:b8:e3:9e:d1:18:97:7c:
f2:5c:53:0d:af:a8:7e:4b:32:a7:11:d2:54:10:0c:
dd:3b:e6:d1:a6:a4:86:cb:91:dc:ef:76:3b:42:04:
84:88:fc:92:1f:25:2c:de:cf:3c:15:58:e7:22:0d:
6c:23:de:2a:52:f1:f1:13:90:78:f8:6a:d4:f2:34:
47:c8:fc:0e:be:cc:9c:42:11:4d:76:63:da:9a:1f:
20:a4:cd:2c:fd:c7:57:27:16:59:71:ea:85:af:8c:
9c:31:77:ca:74:85:47:be:56:5c:3e:2b:f5:83:53:
0e:45:9e:07:22:4a:a0:2b:eb:a5:55:71:87:4f:08:
83:c6:7e:b6:b2:3d:98:21:8c:cd:9b:0f:b3:f0:47:
42:6d:fc:07:72:56:e3:04:82:8d:90:05:55:b5:46:
12:e6:13:36:d3:b5:23:e5:d2:53:47:af:f7:cd:02:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AC:6C:B9:E9:14:0D:BF:16:41:44:87:E1:D4:E7:B2:33:50:52:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A66BB5455E511F19B1511BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:78:a9:7f:16:96:f2:d8:44:8e:22:57:28:24:32:53:bf:d4:
b4:e4:f5:a8:ac:ee:19:0a:17:b4:e1:3b:40:41:9a:57:01:df:
23:b8:9c:3a:5a:dc:16:ab:6b:1c:95:f2:ff:1b:2a:e5:7c:72:
32:18:f8:20:12:6b:a5:60:21:06:25:52:67:2f:5e:eb:1b:78:
9c:9a:b1:27:4f:69:32:50:0d:b4:79:1d:a5:90:37:a6:12:5c:
7d:7c:8d:57:ed:f3:15:65:27:a3:44:b3:b7:81:1f:c0:9d:ec:
74:be:02:3b:46:2a:6d:0b:8c:d1:5e:83:cf:8c:35:83:ce:d7:
47:55:ae:2f:50:81:f0:07:4a:42:95:16:78:21:b6:f5:18:62:
a2:6a:d0:ab:40:4a:d9:d9:39:14:ef:13:d5:ce:2c:3f:13:24:
ac:42:24:7e:f7:90:ea:6d:f6:02:d5:ad:94:24:64:e4:02:7e:
a2:7b:99:72:92:1e:42:60:d3:d8:08:bd:bd:4f:9b:73:b3:54:
a9:df:f0:5e:4c:61:ed:d0:e4:69:5c:09:06:4c:8b:f3:fa:f9:
26:5b:f4:2d:32:4e:7d:78:c6:c5:c6:bd:10:fa:32:f1:f2:48:
e3:57:08:42:17:01:cd:1f:17:c2:b8:d6:4c:a4:7c:68:2e:a7:
98:9b:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:17 2026 by rpki-client