Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/342C38FC72F011F1B1AF8C0DCF1D38B0.roa
File: 342C38FC72F011F1B1AF8C0DCF1D38B0.roa (raw, json)
Hash identifier: l4pbVZ8zooohU42KMWMiprWlb0KQ5oXb2rEF+5prq5o=
Subject key identifier: 41:CC:B5:F5:5E:00:06:7A:C6:10:E8:51:38:25:77:B2:08:21:17:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C139
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/342C38FC72F011F1B1AF8C0DCF1D38B0.roa
Signing time: Sun 28 Jun 2026 12:52:22 +0000
ROA not before: Sun 28 Jun 2026 12:52:16 +0000
ROA not after: Tue 04 Aug 2026 12:52:16 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115001 (0x1c139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 12:52:16 2026 GMT
Not After : Aug 4 12:52:16 2026 GMT
Subject: CN=6a411906-fbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:e2:81:6d:ac:86:da:45:fd:a8:c9:3b:0e:
da:68:2d:e4:ed:5b:68:5f:e6:19:6c:ad:51:99:3f:
23:43:07:64:e3:4f:7e:d1:e9:97:0a:98:b2:2e:83:
36:db:4e:cc:88:00:d3:1c:8f:9e:25:e7:15:ec:56:
0c:26:a3:bc:2b:2a:1a:9b:99:a9:6d:13:af:30:3f:
15:be:66:84:bb:ed:00:bb:c3:d1:36:eb:87:e6:26:
71:18:2a:c4:3a:11:11:2a:3c:27:f0:4e:50:81:84:
35:b0:49:85:bf:19:e8:94:d3:e3:e8:70:0b:03:9a:
81:7a:e9:32:c5:bb:8d:c6:da:6d:d1:9d:23:5d:3a:
a9:d1:cc:c4:53:64:54:d0:f7:25:eb:9f:f9:c8:bc:
c7:64:a2:28:33:83:67:56:dc:1c:b4:f1:d5:b6:92:
c2:f3:65:be:fc:d6:f8:1b:c2:27:d3:b6:2f:58:0e:
51:b1:b8:ae:bd:15:ab:3c:c1:fb:ea:d4:42:2a:61:
39:d9:bb:f4:ca:54:7b:b3:30:ec:be:a0:b2:52:71:
80:80:4e:74:98:e7:22:4c:58:82:93:cb:b0:20:43:
60:70:22:9a:fb:e0:41:c1:8e:cb:7b:a6:e5:29:92:
dd:c8:23:a3:f3:6c:ad:77:66:c7:5c:c2:cb:04:d8:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:B5:F5:5E:00:06:7A:C6:10:E8:51:38:25:77:B2:08:21:17:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/342C38FC72F011F1B1AF8C0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a6:b1:9e:76:ba:69:e1:c0:a2:e1:25:27:cd:79:4f:5a:db:
46:a2:79:25:40:de:59:dc:3e:f5:35:2f:b0:99:a9:82:34:94:
da:0c:36:48:49:62:a6:0b:b1:02:ff:2e:4a:17:e2:92:fe:0b:
d7:7c:8e:25:ad:72:7b:5a:85:79:f6:c3:11:95:60:2b:58:e5:
a7:0d:80:d4:db:23:07:66:2c:91:01:98:8b:33:c0:c9:2c:02:
81:e2:97:b7:50:74:b4:30:4b:7e:77:fd:e4:b6:fb:17:2c:d7:
00:c7:0e:26:fc:58:f3:4e:83:23:bd:f7:54:78:e0:83:9b:5a:
d0:93:09:6e:b6:95:b5:b3:c1:b8:82:89:be:fb:b2:88:cb:d1:
f4:e2:4e:65:f2:f3:cd:20:18:1f:43:b4:35:92:ff:11:35:93:
92:e2:04:e9:96:e3:c5:01:27:aa:6b:27:fb:3a:4e:04:f7:d0:
44:c5:38:41:3d:b4:57:25:29:f7:04:fe:bd:fc:22:ac:aa:10:
5b:a3:e8:36:f6:a3:9f:82:81:52:fb:76:12:f2:7b:53:bb:bc:
04:8f:06:b3:61:83:c4:c5:a5:6f:6d:3e:9a:62:37:5f:13:03:
04:c9:69:af:86:00:d4:12:1f:85:d8:44:65:5a:1e:3f:26:3e:
6c:b7:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:46 2026 by rpki-client