Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3D972C6EEA11F1AB3D4A19CF1D38B0.roa
File: 3F3D972C6EEA11F1AB3D4A19CF1D38B0.roa (raw, json)
Hash identifier: TLdA1klsNd9FmKDI64Fbleze2TfEbZ18EJHPdUpSGmI=
Subject key identifier: 7E:C6:5C:6A:F2:D1:FD:AE:D4:F7:E9:57:1E:8A:B3:14:25:E9:97:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3D972C6EEA11F1AB3D4A19CF1D38B0.roa
Signing time: Tue 23 Jun 2026 09:59:39 +0000
ROA not before: Tue 23 Jun 2026 09:59:34 +0000
ROA not after: Sun 09 Aug 2026 09:59:34 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114641 (0x1bfd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 09:59:34 2026 GMT
Not After : Aug 9 09:59:34 2026 GMT
Subject: CN=6a3a590b-03b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:7a:07:4e:d3:b1:a8:6c:54:c3:7f:3f:c8:
7e:b7:12:cc:6e:4b:29:c8:61:1c:d2:2c:c4:43:06:
75:ba:47:24:50:0f:15:39:36:2d:7d:fe:94:1c:d6:
3f:6e:44:04:60:90:15:c4:8c:ec:c5:19:aa:5e:8a:
52:78:d0:2f:47:52:83:3f:a1:16:1e:77:f4:e0:1f:
f1:b3:95:d5:b4:d6:4a:98:2a:2c:fa:4f:ea:ca:4a:
e2:64:21:7c:2d:1e:1e:e1:c2:af:c7:00:62:36:c0:
3e:33:2e:a1:01:70:47:41:a2:2c:b4:82:bf:3b:ad:
d6:92:a4:75:49:c0:f2:ac:4c:85:2e:fe:4b:9d:38:
40:c3:14:8d:1c:46:0d:3d:d7:ce:1b:3e:16:8d:82:
42:32:af:bb:23:78:4f:c3:2a:95:dd:c5:1c:02:50:
c3:f1:b4:a2:10:db:59:46:03:7d:0f:8b:d9:f3:53:
96:91:0c:88:73:5d:56:02:36:68:02:79:8b:17:21:
06:87:a6:43:61:6a:8c:28:ba:84:29:9f:75:3a:71:
0c:d8:10:c8:47:41:ab:11:0d:c2:85:bb:89:90:0a:
98:09:7f:d2:e1:fb:85:37:cd:90:3d:eb:df:db:85:
e2:ee:e5:3c:33:a8:d7:8c:9c:33:88:d4:fc:e8:7b:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:5C:6A:F2:D1:FD:AE:D4:F7:E9:57:1E:8A:B3:14:25:E9:97:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3D972C6EEA11F1AB3D4A19CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ff:69:75:82:ce:8f:b9:ec:2a:eb:b8:78:14:1a:f6:59:07:
f2:1f:86:f8:ce:a7:90:7f:72:36:aa:8c:ad:66:f2:06:49:05:
e5:cd:e7:94:ce:93:6d:8d:ee:7f:84:ed:e9:9d:19:ec:59:85:
88:7b:57:c0:60:ec:d9:9d:f0:31:14:c9:10:7e:ff:e5:0f:4d:
e5:57:f0:4c:40:43:67:c2:ab:de:99:47:3a:b1:25:82:8a:7c:
77:bc:c3:34:7c:73:41:8a:cf:7e:b1:1a:2d:ee:85:87:ec:1b:
1d:33:d3:df:c6:00:22:8c:47:d2:85:d9:d0:8d:de:e8:ce:66:
46:09:2e:d1:94:78:cc:f8:34:8a:9e:35:ce:ad:fd:65:02:08:
4d:54:81:b6:86:dd:45:d9:8b:1b:8b:c6:79:13:19:76:7e:eb:
66:a2:23:36:60:98:8c:d7:e1:d3:23:d9:76:9a:6c:27:38:85:
81:28:1e:7b:8f:bb:95:46:17:6c:73:e9:08:7f:59:2e:02:10:
32:1e:a0:cd:8c:24:73:66:38:2c:1f:d9:0d:cc:48:dd:81:36:
6e:25:3b:6b:e1:0d:31:83:68:e5:a8:a6:c1:88:76:b7:41:89:
24:56:df:82:a1:99:6b:6b:db:5c:86:b3:17:c6:e6:3e:a4:15:
41:04:a1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:24 2026 by rpki-client