Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EB5481C55CF11F1A254BDB3CE1D38B0.roa
File: 1EB5481C55CF11F1A254BDB3CE1D38B0.roa (raw, json)
Hash identifier: /3uLsgxshbHAZsuCcsCBsb9riNuBt+hScq1Gg3AxsZs=
Subject key identifier: 8A:6D:F4:9E:29:0A:80:91:01:35:3B:12:DE:48:3F:EE:A1:A3:B6:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B7DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EB5481C55CF11F1A254BDB3CE1D38B0.roa
Signing time: Fri 22 May 2026 11:12:29 +0000
ROA not before: Fri 22 May 2026 11:12:24 +0000
ROA not after: Tue 23 Jun 2026 11:12:24 +0000
asID: 13335
IP address blocks: 156.247.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112603 (0x1b7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 11:12:24 2026 GMT
Not After : Jun 23 11:12:24 2026 GMT
Subject: CN=6a103a1d-b11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:8b:61:b2:e7:71:22:fc:a9:73:a9:f6:d8:
a0:23:94:6c:b2:8d:3e:0e:4f:e9:c3:9f:62:a7:34:
f4:34:fb:33:59:3a:67:82:bb:d1:47:fc:eb:8a:b4:
a3:00:91:fe:f7:9b:48:a7:75:6a:b3:85:29:d1:cc:
5d:80:eb:3a:34:78:61:9a:b1:19:c2:ec:10:0d:6d:
9c:4c:66:6d:90:25:10:1d:c5:e0:fe:71:67:5c:66:
86:a4:20:2f:c4:5b:02:79:80:af:86:cb:5a:83:45:
ec:d9:50:02:b8:35:9b:e8:de:aa:ff:d4:b9:93:36:
35:d2:7d:41:89:26:a3:d8:bb:0e:e7:99:a1:d5:92:
83:bb:da:d9:b4:69:99:1e:90:74:ad:92:4e:ef:d3:
d3:2d:b7:38:e0:f9:e7:24:19:67:c5:0c:d3:72:e0:
64:e2:1f:f9:08:9b:52:b1:dc:a2:b9:de:83:f1:66:
4f:af:e0:74:8b:f4:f1:92:57:7e:9d:9c:04:98:3f:
39:a5:dd:cb:49:ea:90:63:ce:0f:d4:e6:5a:8e:64:
bc:fd:07:aa:11:cc:c1:40:49:ce:a2:b6:fc:f4:ae:
26:04:11:c5:b9:26:71:38:d2:b0:a7:32:86:51:d8:
53:97:7a:72:47:57:aa:b1:b8:e5:49:48:60:95:d5:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:F4:9E:29:0A:80:91:01:35:3B:12:DE:48:3F:EE:A1:A3:B6:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EB5481C55CF11F1A254BDB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.36.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2f:2c:36:d8:a5:82:d2:fc:87:62:5d:7f:77:71:98:e9:86:
aa:5c:df:94:39:85:26:16:d0:80:d5:48:53:93:25:3e:2e:a1:
f8:4f:32:f3:9a:2e:bc:c0:b2:e2:d5:9a:3e:ce:a9:8a:ba:ea:
21:f7:d0:47:83:6d:de:15:b8:e3:50:ac:22:b4:7c:10:ce:d0:
f6:42:3b:45:17:c6:fc:9b:6b:59:b2:89:d8:b1:be:73:f8:cd:
70:5c:d4:49:f6:73:1e:3d:9c:c2:8b:4b:a8:3d:6a:09:0e:7c:
f6:2d:4b:bd:6b:76:6f:63:fd:a4:90:b1:8a:62:1a:d3:3f:63:
d7:d2:f0:f5:9e:d4:a9:28:42:4c:a9:80:66:aa:ac:15:7a:49:
49:bb:1f:7d:d5:66:11:26:b9:d2:fd:e3:70:26:05:6b:ed:57:
d7:05:45:c9:15:5e:2f:76:20:8e:aa:45:ca:81:8e:e1:0c:ae:
11:bf:7b:7c:97:23:c3:e9:26:fb:5e:c7:93:c8:99:43:ff:26:
14:c4:d8:59:04:2a:b2:ec:28:ca:5d:6f:70:ca:47:74:ec:c0:
f3:38:33:a5:62:37:9e:88:c9:2c:51:46:7c:23:4d:d9:4f:f8:
fc:f0:bb:57:f6:82:cd:fa:33:a6:ab:38:11:b2:b4:6a:82:5e:
c5:1d:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:55 2026 by rpki-client