Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24A35F866A3611F1A34A44C1CE1D38B0.roa
File: 24A35F866A3611F1A34A44C1CE1D38B0.roa (raw, json)
Hash identifier: mSDt3XvAB64BEubToHtR5wQwNHyPNcYgKNlpoxk3dcA=
Subject key identifier: E1:67:DF:A8:CA:58:F9:54:23:EA:E5:DC:D4:67:6E:93:50:B3:30:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24A35F866A3611F1A34A44C1CE1D38B0.roa
Signing time: Wed 17 Jun 2026 10:20:20 +0000
ROA not before: Wed 17 Jun 2026 10:20:16 +0000
ROA not after: Mon 20 Jul 2026 10:20:16 +0000
asID: 135391
IP address blocks: 156.254.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114328 (0x1be98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 10:20:16 2026 GMT
Not After : Jul 20 10:20:16 2026 GMT
Subject: CN=6a3274e4-3655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:49:ba:87:0c:78:8b:a5:94:bd:ea:5d:dc:
82:a3:96:c4:33:fd:92:b0:20:ec:33:f4:8c:fd:c4:
1c:2f:6c:e5:09:0a:ba:7d:3f:43:4b:52:7f:7f:f1:
66:c9:5c:05:86:8c:ef:c0:15:f7:73:b9:8f:1e:66:
fb:6f:75:2b:e5:6a:34:38:44:5e:4e:96:fb:34:d2:
5b:cd:e3:66:08:19:2a:69:a0:4a:35:1d:16:2a:4e:
88:b9:b4:7b:0f:fd:cb:0f:fa:e2:a6:df:d6:0e:d0:
1a:9c:ae:6d:7b:f5:d1:7f:4d:d5:54:51:9d:a3:f3:
15:4f:3d:28:f0:db:cb:44:93:f0:6d:c8:4e:37:49:
05:d2:fc:a1:93:31:b0:11:af:88:3f:cf:a8:af:85:
c1:c5:ac:89:01:11:8b:49:54:c5:1e:c4:fc:9e:c8:
76:53:1f:0c:3c:fa:35:bd:b1:77:9b:4c:b8:bd:e9:
e4:7e:a1:0f:ae:49:14:a5:be:96:d5:8d:1e:24:3a:
b7:f2:2f:2e:50:41:01:43:09:ca:03:93:2c:d2:7d:
cc:c0:b3:9b:28:8b:13:98:ac:75:48:eb:92:b9:59:
e5:cc:4e:ad:49:bf:3a:68:2a:a8:0e:14:c3:cc:9b:
2c:7b:8b:d1:09:48:38:d0:23:6c:64:60:e1:59:61:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:DF:A8:CA:58:F9:54:23:EA:E5:DC:D4:67:6E:93:50:B3:30:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24A35F866A3611F1A34A44C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ae:fa:b8:45:50:45:90:21:c3:aa:16:39:84:56:4d:5c:8b:
fc:db:b4:b8:0d:94:78:00:88:10:ae:9d:e5:ec:c1:1a:d2:50:
e3:85:1a:88:3c:24:dc:8a:05:6d:40:d4:1c:13:a2:89:9b:86:
18:2a:65:e6:bd:78:1b:ef:0f:b1:4d:45:41:94:d2:79:02:02:
90:60:40:b5:17:06:24:8d:11:d2:07:75:38:a2:87:3b:b7:19:
86:66:41:20:4c:1e:23:26:6c:8b:f1:e2:4f:3a:45:6e:e0:55:
d9:d2:07:93:27:96:fd:72:75:c7:65:36:8e:02:14:3b:43:62:
5c:61:f5:7b:a8:2d:ab:ef:f1:16:3b:25:79:ad:fa:0f:10:c6:
21:8b:39:e8:72:c7:bc:ef:b8:ee:12:8c:c1:bb:88:11:91:fe:
1c:93:68:47:1b:6a:d8:83:2e:38:62:ac:2a:72:d2:c2:92:a8:
a8:11:22:b0:b9:8d:c3:13:51:79:b8:0e:57:5a:2b:8e:4c:68:
c9:33:d8:2e:24:7e:61:3f:76:21:c3:00:0b:00:02:ea:59:49:
53:96:38:81:8d:18:7d:0a:4d:c5:43:f6:04:ca:b4:b2:d6:7c:
2a:2d:82:a6:7c:b0:b0:61:71:a0:34:6d:b3:0a:ad:43:bf:df:
9d:6e:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:35:53 2026 by rpki-client