Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE9EA5468FC11F1BCBC71BCCE1D38B0.roa
File: 3DE9EA5468FC11F1BCBC71BCCE1D38B0.roa (raw, json)
Hash identifier: V/ZoXG1p2IdxADIAr+mPaS1stjuj+BIECeg4sy8us98=
Subject key identifier: CF:AC:96:3E:59:3E:42:F7:95:2E:BC:08:C4:40:5D:BE:ED:31:A5:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BD92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE9EA5468FC11F1BCBC71BCCE1D38B0.roa
Signing time: Mon 15 Jun 2026 20:53:21 +0000
ROA not before: Mon 15 Jun 2026 20:53:16 +0000
ROA not after: Sat 19 Dec 2026 20:53:16 +0000
asID: 272018
IP address blocks: 156.235.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114066 (0x1bd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 20:53:16 2026 GMT
Not After : Dec 19 20:53:16 2026 GMT
Subject: CN=6a306641-bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:45:cd:e6:0c:8b:7b:91:8b:17:cc:2f:60:
d4:e0:67:66:7a:90:03:54:83:a4:ba:89:b6:0b:6f:
50:00:da:f8:fe:8c:03:d3:c0:b1:6b:a7:90:d6:9e:
a6:f2:d5:0f:ba:47:e4:42:8f:63:80:1f:7f:0f:1b:
7a:ed:f9:2c:21:ea:78:5f:89:30:35:d1:ee:fa:b0:
2b:2a:2d:9b:61:9a:a0:3c:1c:c7:9b:f8:12:94:22:
4f:54:05:c8:76:bd:f8:b0:fb:9c:cb:45:05:e6:09:
7e:df:bb:74:0b:23:92:17:80:4f:8a:15:51:46:21:
f6:bf:68:35:54:bd:14:14:d3:18:6c:e0:52:b6:87:
d3:3d:aa:62:a3:5d:bb:31:b5:6b:fc:91:00:04:38:
14:35:66:60:c2:20:78:b9:f2:8f:fa:90:ca:e7:09:
b3:79:a9:d0:92:36:4d:3f:1d:ac:ea:b9:64:98:a9:
e9:1f:c5:18:66:60:93:2a:a9:ff:09:bd:e9:89:32:
36:61:ac:72:f1:54:07:9a:5f:a2:f2:93:7c:af:64:
40:5f:6d:40:23:22:6d:e5:91:39:ef:4c:d6:5d:c1:
8d:cd:ae:12:c8:09:86:c3:d8:84:07:5e:44:9c:67:
91:e4:2c:d9:a7:ca:9a:c5:93:0d:0d:92:bc:7b:8b:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AC:96:3E:59:3E:42:F7:95:2E:BC:08:C4:40:5D:BE:ED:31:A5:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE9EA5468FC11F1BCBC71BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c9:97:9e:b4:9b:6c:89:c1:48:43:26:99:b9:ab:00:8a:66:
a3:da:33:ea:b8:3c:05:08:02:80:0e:3b:bb:9d:69:cf:57:bd:
ec:9d:84:7e:fb:f8:3c:a8:7d:37:51:a5:5a:ef:d8:3b:6f:89:
3f:0d:b4:82:86:08:6a:09:7a:d3:3c:da:08:ed:1e:33:08:57:
d2:c3:44:ce:b9:51:d7:8a:71:ba:67:47:f7:e6:81:62:e6:44:
cf:86:a6:2c:da:e0:f6:f9:8f:75:5a:c8:3e:98:2f:27:c4:bd:
d2:72:74:61:71:f8:c8:bc:81:26:d4:e6:45:65:04:8c:b4:8b:
90:64:59:24:09:94:ee:6f:15:30:20:a6:e7:e1:70:6b:b9:38:
78:69:d6:31:40:47:cc:44:91:bf:6f:89:6e:5e:83:c0:74:b8:
29:ed:06:72:fd:bf:f4:e5:f0:d5:c6:2b:0a:f9:16:20:f9:b8:
b5:c6:4f:2b:02:d2:ca:a9:54:2d:83:f8:a8:9f:d5:ef:f5:56:
3a:9e:09:8d:50:4b:ae:67:66:91:5e:54:06:ee:19:5c:20:e2:
2b:cf:cc:88:23:08:5b:31:93:54:12:c4:2b:23:5f:9f:72:26:
10:e3:35:da:ce:1c:df:f8:cc:b3:4d:7a:c3:dd:67:1d:71:a8:
94:78:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:31 2026 by rpki-client