Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9789FA5E9911F1A00DFDA3CE1D38B0.roa
File: 3F9789FA5E9911F1A00DFDA3CE1D38B0.roa (raw, json)
Hash identifier: ksp/qwTUg/i+dbh5c20n0Rh+xQ3Uvv1eWFM176GWstI=
Subject key identifier: 15:C4:BF:D5:40:B5:61:40:66:0D:5C:5E:68:66:34:C9:2E:AB:C4:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9789FA5E9911F1A00DFDA3CE1D38B0.roa
Signing time: Tue 02 Jun 2026 15:39:32 +0000
ROA not before: Tue 02 Jun 2026 15:39:27 +0000
ROA not after: Fri 10 Jul 2026 15:39:27 +0000
asID: 62610
IP address blocks: 156.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113480 (0x1bb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 15:39:27 2026 GMT
Not After : Jul 10 15:39:27 2026 GMT
Subject: CN=6a1ef934-7f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:ad:4e:a2:2c:41:5b:4e:7e:c3:d7:80:53:
1a:30:89:f6:f0:42:0a:c5:03:46:71:4e:53:19:30:
db:cc:97:43:ce:02:1d:c7:64:8a:36:4d:06:0c:42:
79:fc:50:59:6c:04:dd:9d:6a:27:4d:5a:a2:e5:ae:
50:f1:93:7e:3c:29:a5:35:25:88:7b:54:13:57:99:
d7:f3:e4:44:9f:cc:06:4f:0a:3c:62:27:4e:14:8e:
70:bd:25:e3:2e:fc:17:6a:02:4e:86:2b:c6:a3:71:
37:a5:8c:78:32:68:6e:99:e8:63:db:67:5b:19:5f:
6d:45:bc:d6:63:e0:09:0c:04:b6:d2:31:b1:19:87:
e1:f9:b0:b3:21:bc:fb:75:ad:55:8f:b1:0f:10:d1:
38:69:7a:8d:04:91:f5:82:29:e2:50:fe:09:46:80:
26:64:e7:4a:3a:f4:86:48:b5:cc:0f:8f:58:fb:51:
a4:d9:22:46:e1:9b:79:3e:e4:b2:92:5f:e9:97:d8:
67:5a:7a:ca:0b:ce:f4:de:b6:b6:b7:31:93:91:98:
a9:fd:52:05:fc:52:a6:6a:11:be:19:b7:cd:d5:99:
ec:7b:44:b3:c1:6c:88:ff:c8:8c:b3:bb:82:d4:22:
13:4d:2c:03:ce:4a:25:32:30:5b:92:b9:79:1e:e6:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:BF:D5:40:B5:61:40:66:0D:5C:5E:68:66:34:C9:2E:AB:C4:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9789FA5E9911F1A00DFDA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
74:39:59:d2:68:8a:5d:2b:48:ed:56:38:85:56:9c:f0:60:87:
01:0c:da:a2:e0:eb:a0:87:f7:57:cb:a1:98:82:75:2d:1b:40:
13:50:63:f0:b3:ef:db:33:30:c9:ca:65:33:87:d7:42:24:5d:
5c:6e:ea:9b:c1:12:c9:a3:0c:5b:3f:f1:dc:4a:38:bb:90:ce:
1e:0c:ef:4e:03:ca:61:aa:b9:7e:d3:7d:ff:c1:82:73:4a:de:
52:74:b1:a5:3d:0d:48:8a:4d:2d:0e:d4:35:a7:46:3d:09:c5:
48:ae:40:40:95:32:78:8f:f4:fa:31:8d:95:59:71:9f:aa:95:
35:7a:46:41:ba:ce:0e:8d:39:40:ff:58:2b:e7:9f:d7:4e:90:
5e:5a:d0:c3:11:7d:1d:87:ad:a0:44:be:13:a5:52:59:fd:2e:
3e:20:e2:91:fd:0d:69:6d:f1:82:21:db:35:ef:24:a9:65:16:
d0:67:d3:38:cc:f8:fe:36:1a:13:e4:75:5f:51:92:d4:28:84:
96:4d:c1:bc:f6:fe:ac:b5:c7:e8:0f:25:35:49:cc:47:4c:16:
68:0f:1f:57:bc:6e:e5:3d:15:0e:cd:08:e4:87:72:85:7e:e8:
9c:a4:93:ee:9e:67:6c:33:a0:1a:10:d9:06:28:1e:76:17:06:
cb:a8:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:06 2026 by rpki-client