Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4168B79E553A11F18B0CEEA0CE1D38B0.roa
File: 4168B79E553A11F18B0CEEA0CE1D38B0.roa (raw, json)
Hash identifier: m4FQlLmX4AFo636yvsoQe2mJhe2ZKdK1rZZp2LEMlY4=
Subject key identifier: 80:9D:C4:E6:AC:61:11:C9:A1:67:39:15:FD:A3:B4:9A:DF:FF:A7:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B77B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4168B79E553A11F18B0CEEA0CE1D38B0.roa
Signing time: Thu 21 May 2026 17:26:52 +0000
ROA not before: Thu 21 May 2026 17:26:47 +0000
ROA not after: Fri 14 May 2027 17:26:47 +0000
asID: 135097
IP address blocks: 156.224.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112507 (0x1b77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 17:26:47 2026 GMT
Not After : May 14 17:26:47 2027 GMT
Subject: CN=6a0f405c-eea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:d2:2b:51:00:42:31:86:de:c8:24:c2:e7:
8e:65:cb:89:57:9e:43:d9:ad:b2:e0:90:d8:c7:6c:
30:e4:30:5e:e7:e3:7f:b5:c9:99:8d:7a:08:12:c7:
5d:24:03:f0:f0:45:88:10:09:bd:6a:e7:44:f7:3b:
67:ae:2c:41:4a:71:1d:79:10:b1:3d:c8:83:7c:67:
01:44:60:18:33:82:97:20:21:80:f5:51:67:e8:31:
ae:28:b8:4d:ed:11:3a:d1:f2:45:67:93:8e:d2:b5:
76:6f:78:a7:8c:9e:25:09:98:a4:fe:d9:6e:70:1d:
d5:93:4f:2e:e4:a6:c0:ba:bf:a6:a2:a7:49:64:04:
86:fa:27:26:9d:c5:6a:3d:68:40:3f:38:a3:5b:06:
7e:0e:0e:31:22:3a:2e:54:76:79:bb:79:80:71:5e:
d6:48:a4:ba:a8:44:f9:5c:ae:23:2c:da:38:fd:93:
1a:8f:d3:e5:77:5b:c8:b0:17:44:23:b8:d2:b1:d7:
b0:e9:65:5c:08:95:8a:97:76:63:7e:5d:af:2d:5e:
42:b0:e2:fc:fc:85:72:18:ac:0d:99:53:ac:56:54:
0c:4e:c5:4c:22:cc:25:f4:b4:57:f2:33:e5:34:60:
91:41:3a:31:0b:08:5a:90:09:2c:a9:0e:b9:49:f3:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:C4:E6:AC:61:11:C9:A1:67:39:15:FD:A3:B4:9A:DF:FF:A7:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4168B79E553A11F18B0CEEA0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/17
Signature Algorithm: sha256WithRSAEncryption
55:6e:04:0b:47:5f:bf:3c:81:ea:83:89:ce:e2:4a:68:79:b2:
6f:6b:8f:97:30:b1:da:90:ff:6b:89:16:6c:0b:3f:fd:4c:c9:
4c:ec:e5:1a:cd:10:56:27:80:86:42:20:11:9b:53:b4:0b:22:
ce:45:81:ec:5d:4a:25:94:b1:72:a4:af:e7:89:a0:11:44:18:
c4:39:39:42:2d:91:6c:26:c5:8f:f3:15:0f:23:31:f5:22:04:
5c:40:25:b2:ab:66:0e:99:4e:c1:51:dc:3e:0c:2d:6d:9e:cc:
94:81:e3:55:21:ab:8f:a4:e9:fe:a5:e0:9b:01:b2:ba:46:d3:
1c:b8:25:a1:6f:79:d1:be:ee:f2:17:58:82:63:2e:c2:24:a6:
61:84:9f:f3:23:ec:dd:87:1c:83:ea:49:ef:08:8c:98:62:7f:
43:62:53:04:81:4a:af:10:ce:f7:9a:04:63:76:95:e4:0e:6e:
cb:3e:3e:4d:a6:8d:7c:3a:8d:a5:d1:c3:f1:15:77:90:d9:1f:
32:de:cf:a4:ab:1d:6f:7d:9e:9a:f9:61:94:ac:02:48:3b:26:
a7:39:d3:00:33:d0:40:89:6e:25:74:e5:42:97:02:2a:4b:af:
8d:7b:55:f8:b1:5d:7d:c9:cb:e5:d7:72:81:dc:c1:e1:6c:2a:
94:d9:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:25 2026 by rpki-client