Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EC8652E73F911F18C691CD2CE1D38B0.roa
File: 3EC8652E73F911F18C691CD2CE1D38B0.roa (raw, json)
Hash identifier: B5OWBcVVWza+1wn2xVNO00lADKl2uoH9skfGH9I6ia4=
Subject key identifier: 5C:6B:65:6F:13:6F:FA:95:B0:14:7D:BB:D8:D7:38:F2:4B:28:82:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EC8652E73F911F18C691CD2CE1D38B0.roa
Signing time: Mon 29 Jun 2026 20:29:37 +0000
ROA not before: Mon 29 Jun 2026 20:29:32 +0000
ROA not after: Tue 04 Aug 2026 20:29:32 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 24
156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115130 (0x1c1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 20:29:32 2026 GMT
Not After : Aug 4 20:29:32 2026 GMT
Subject: CN=6a42d5b0-700f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:99:5f:a7:8c:2f:ef:a5:e4:52:e1:50:c4:
22:a5:29:a5:c8:3c:de:2f:6d:5b:28:4a:e7:13:31:
4f:0a:17:25:18:34:dd:0b:33:f9:5a:d5:8a:cf:6f:
13:30:46:47:a6:9f:ec:af:45:59:34:f7:ed:2c:5e:
e0:7c:51:d4:60:5e:83:bb:39:64:05:90:ea:ff:32:
f4:04:86:8b:f9:d4:cd:d0:db:27:f4:42:b0:df:06:
64:1f:8f:41:38:24:92:c7:31:c2:43:30:9d:49:4d:
12:d1:6e:c0:29:56:b8:fe:de:d5:71:25:29:45:68:
7e:f6:65:75:eb:72:e7:d3:ed:3d:27:d5:dd:3d:bb:
da:6a:1c:03:47:36:00:e4:a2:82:96:9d:9d:3d:bf:
78:49:36:13:da:5e:9d:70:c2:e5:dc:fc:6a:b0:4c:
c4:0a:a0:c9:82:58:a6:5e:15:c0:20:d0:7f:77:7c:
de:8c:1e:2f:7c:25:6f:6d:e6:8c:86:53:d8:43:15:
60:c2:41:e7:e6:0a:5e:31:cd:50:d6:eb:eb:8b:7d:
c4:18:98:a7:0c:4f:3a:9c:d9:37:a7:53:dc:94:bb:
69:16:43:c8:2a:2a:73:40:12:79:11:e9:82:d5:9c:
7a:b2:4c:06:93:3f:44:66:bf:11:f8:ee:de:9d:96:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6B:65:6F:13:6F:FA:95:B0:14:7D:BB:D8:D7:38:F2:4B:28:82:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EC8652E73F911F18C691CD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:61:ff:46:91:ca:8b:3a:8b:0f:0c:10:98:02:60:e5:eb:96:
5a:71:63:3c:b2:53:0d:de:b7:f5:c8:8f:56:70:dc:28:a0:03:
c2:0f:da:e0:ad:a9:3f:98:e3:b6:2b:8f:c2:2e:fd:e1:b4:f2:
b7:dc:8d:20:c1:92:1b:d6:4e:ea:e7:48:3a:cd:2f:81:4b:ec:
43:bf:34:e5:bd:20:fa:0d:7b:d5:30:a5:e9:bf:3e:43:1e:f5:
da:08:a4:6e:9b:fc:60:74:66:8d:5b:05:b4:ca:44:de:21:3b:
5e:9a:22:a3:2b:b8:9d:0b:c6:9d:8c:7c:d4:5b:f8:a9:c7:2e:
8b:43:e6:d4:dd:56:f0:f7:05:7a:5c:32:b8:79:da:00:d0:25:
f5:7e:8f:d1:ab:8c:8e:2c:c7:48:c4:4d:3d:a2:03:6a:a2:f5:
c4:de:ed:7a:68:59:15:00:cd:ae:c4:21:9e:a5:e1:ef:15:2e:
7d:ef:c3:86:32:fc:d1:f0:e9:3b:b3:cc:40:a3:f2:3f:6c:46:
00:bc:70:8a:0c:ae:00:6b:7a:69:77:f5:a8:45:33:6c:2c:4a:
fc:9f:f3:c4:a6:2c:e4:cf:3c:b1:73:2f:09:d3:39:ef:2b:43:
dc:00:ed:07:d3:f9:2a:7b:1b:de:dc:d8:d3:b0:63:be:df:d4:
68:44:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:48 2026 by rpki-client