Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F04E696552611F1AF78AFA9CE1D38B0.roa
File: 1F04E696552611F1AF78AFA9CE1D38B0.roa (raw, json)
Hash identifier: IoLxv4M658CoEeJwfahmf4DJa79yp1QspkpGRDdrMk0=
Subject key identifier: 99:63:85:29:ED:5F:89:29:78:F7:67:C8:0F:41:09:B2:46:B9:CD:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B73E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F04E696552611F1AF78AFA9CE1D38B0.roa
Signing time: Thu 21 May 2026 15:02:45 +0000
ROA not before: Thu 21 May 2026 15:02:40 +0000
ROA not after: Wed 01 Jul 2026 15:02:40 +0000
asID: 63099
IP address blocks: 156.225.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112446 (0x1b73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:02:40 2026 GMT
Not After : Jul 1 15:02:40 2026 GMT
Subject: CN=6a0f1e94-4c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:74:09:0c:1b:ae:05:58:06:39:2d:4d:98:
54:a4:9d:9b:6b:c1:76:f2:74:dd:28:c8:44:b1:d2:
0f:79:77:c6:89:f8:81:8e:37:82:2f:87:8f:a4:3e:
78:0a:31:fa:66:16:71:de:5b:e7:c3:c9:d7:97:de:
62:18:dd:6d:0b:44:43:1b:45:7d:a0:3c:5f:f2:8b:
f8:b5:2e:a3:4f:22:b0:33:f0:e3:1d:d3:2f:17:4a:
be:f4:d1:1e:84:30:fe:f8:2a:e0:28:7b:0f:98:db:
a8:0e:08:11:9e:9f:a8:5e:cd:c3:1e:24:f8:69:86:
e7:3a:eb:5b:5d:55:5e:a5:7e:47:88:af:ec:fb:7b:
7f:3b:92:17:c9:43:ac:d5:8c:2a:46:59:a4:5c:b8:
3d:a9:30:b9:be:d3:07:5f:1a:59:54:20:60:c3:7f:
ef:c1:04:08:91:3b:18:bb:1b:f2:c9:70:23:6f:06:
b6:5c:e1:b4:d1:79:64:96:6d:cf:1d:ea:2e:93:8f:
f7:31:09:2c:c2:19:f6:b3:15:af:36:e3:3a:c4:49:
cb:06:2a:63:d8:b0:d9:48:77:23:14:cf:05:b9:3a:
47:cd:1c:de:15:18:1c:d6:48:ca:34:c2:e9:67:aa:
e8:58:98:19:43:21:86:67:bd:90:c8:21:71:2d:7b:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:85:29:ED:5F:89:29:78:F7:67:C8:0F:41:09:B2:46:B9:CD:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F04E696552611F1AF78AFA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f7:7d:58:96:b9:be:54:67:aa:6f:b4:09:86:73:bc:c2:74:
da:9d:9f:e5:81:5a:04:b4:ee:cb:30:bc:4a:42:a5:58:5e:78:
64:62:bf:a8:e0:a9:0d:7c:05:f2:b3:59:e1:91:9f:63:18:4e:
68:9c:8f:f6:86:45:6b:87:95:ee:e2:a3:99:d4:2f:ec:72:18:
7d:dc:f6:fc:36:1e:72:4b:8a:c6:6b:3a:62:f4:e1:87:4a:07:
45:69:e0:e3:92:cf:c7:b9:f3:9c:01:cb:46:5a:55:cd:bf:dc:
12:cc:58:76:9c:6b:cd:2f:3f:85:72:90:39:b2:59:03:85:b4:
8c:fd:2d:91:2b:07:b7:64:25:3c:aa:4d:32:18:63:da:1e:71:
b6:f3:fe:c9:36:77:7a:af:36:07:0f:2f:bc:0a:77:64:df:fd:
75:e7:b4:10:91:80:ab:07:2a:1d:77:4f:b7:0e:0c:fa:c4:85:
b2:1d:be:eb:81:f7:92:02:a4:db:98:3e:3d:6b:ea:43:b5:19:
2f:55:16:16:b5:35:0c:b1:3f:4d:be:cf:f9:f7:55:b3:93:90:
5b:a1:88:8f:c3:9d:a9:05:20:33:14:e7:de:63:30:10:3c:7b:
fb:dc:67:0e:85:ac:f9:e8:a0:65:bf:71:bd:aa:45:fc:c1:09:
1b:ae:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:04 2026 by rpki-client