Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E9D6148506F11F1848CB2F3CE1D38B0.roa
File: 2E9D6148506F11F1848CB2F3CE1D38B0.roa (raw, json)
Hash identifier: cs9o3KwYVKBPTc4+f/yrIN0wAOqwGgPgk2ILVXWZ0x0=
Subject key identifier: 73:61:F7:81:B8:1A:93:1F:95:78:5D:74:8A:E9:D7:21:94:B6:73:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E9D6148506F11F1848CB2F3CE1D38B0.roa
Signing time: Fri 15 May 2026 15:03:08 +0000
ROA not before: Fri 15 May 2026 15:03:04 +0000
ROA not after: Mon 22 Jun 2026 15:03:04 +0000
asID: 137899
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111804 (0x1b4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 15:03:04 2026 GMT
Not After : Jun 22 15:03:04 2026 GMT
Subject: CN=6a0735ac-3faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:39:6e:7e:dc:3e:b2:56:90:69:b7:68:fc:
00:5c:c8:c7:82:db:3c:ba:6a:8f:c3:4c:cc:17:79:
64:56:da:2c:63:4f:e8:40:85:cd:32:d5:a5:06:1e:
d8:f4:40:cd:18:58:e3:55:69:2d:76:b0:56:b5:c9:
26:b5:d2:59:ea:ae:38:e3:cb:c2:37:ee:ec:df:44:
9d:bb:52:bf:f1:2e:37:a7:67:03:0f:f4:65:f6:87:
26:ba:29:1b:3b:70:27:ae:93:07:c9:9e:c0:35:09:
ad:12:54:7c:07:fd:c8:e7:81:c7:35:5f:27:18:8e:
f0:ce:1a:fb:8e:8c:2e:76:c8:16:33:52:2b:5c:36:
34:ce:02:43:00:34:0a:d5:32:6d:23:74:31:b2:df:
11:f2:94:05:52:9e:8f:15:81:0e:2a:23:b8:d1:11:
31:ae:6d:eb:9d:6f:d6:75:77:74:52:bb:76:e2:c8:
0d:5a:d0:f6:4d:df:ad:88:93:6c:6e:2f:bc:10:23:
6c:4e:66:42:6f:dd:24:5f:1d:0f:34:70:13:51:a1:
e2:9c:5b:f0:89:9a:c0:6b:f5:da:dd:f0:a2:8e:dc:
76:70:11:97:15:e3:44:0b:74:29:b7:e6:c0:33:31:
65:24:df:30:74:da:2e:54:7d:83:25:cc:52:01:c1:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:F7:81:B8:1A:93:1F:95:78:5D:74:8A:E9:D7:21:94:B6:73:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E9D6148506F11F1848CB2F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
64:17:82:27:e6:e4:e8:88:4d:23:0c:fc:b6:47:9e:0e:0e:9f:
42:87:2e:9e:5f:da:19:27:b1:78:af:99:1a:34:89:b7:c5:9f:
ed:96:07:74:e9:bf:2a:62:a7:f2:c5:7a:95:1a:fe:d5:cb:33:
83:26:6e:e7:e2:51:35:b9:25:32:26:ac:8d:97:43:03:2a:7c:
19:ea:8a:17:72:f2:54:2b:ce:8f:dd:08:f1:a2:90:a2:83:8f:
c3:c4:77:38:3f:fe:4e:b7:9b:26:b6:07:20:90:ec:f7:c3:bd:
17:7c:6e:d7:03:f4:1c:cb:c0:a5:4c:4a:e0:b1:ca:c0:3e:7e:
87:c4:4e:b8:a5:77:57:ae:0e:db:35:9e:01:fe:88:7a:ab:34:
85:c3:f3:a8:1d:1b:68:0f:f5:3c:fc:e5:51:35:5f:f5:e4:15:
a2:6b:74:21:c4:9b:3c:f1:07:f0:ac:c7:6b:1f:5b:1d:bb:0e:
c8:da:ec:9b:5b:b8:17:28:ae:a1:c1:48:aa:3d:90:5b:6a:98:
b0:88:43:81:2f:ae:67:b8:56:aa:2d:57:12:56:4d:fc:bf:f4:
9d:1b:46:d0:22:fb:fd:a0:ff:12:a1:de:85:23:1b:0d:ae:7b:
f4:27:40:c2:b7:6c:13:e3:14:f7:fc:d8:f5:ce:69:ea:a9:a4:
ce:8f:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:49 2026 by rpki-client