Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B5B8AC560111F1B753ABE0CE1D38B0.roa
File: 45B5B8AC560111F1B753ABE0CE1D38B0.roa (raw, json)
Hash identifier: CluEvXG7JuR5e9At7bpL+1A63/PcPXi/FMSK5wVrEiA=
Subject key identifier: D4:1F:F9:31:09:F8:3B:68:97:2E:41:50:8C:E2:CC:9A:EC:E6:C8:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B826
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B5B8AC560111F1B753ABE0CE1D38B0.roa
Signing time: Fri 22 May 2026 17:11:29 +0000
ROA not before: Fri 22 May 2026 17:11:25 +0000
ROA not after: Sat 27 Jun 2026 17:11:25 +0000
asID: 213690
IP address blocks: 156.235.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112678 (0x1b826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 17:11:25 2026 GMT
Not After : Jun 27 17:11:25 2026 GMT
Subject: CN=6a108e41-f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:a6:f2:77:05:fc:1a:2b:27:40:6b:01:cf:
4b:00:5c:13:48:1c:ae:64:a0:ef:ab:c9:29:27:04:
5c:ed:4b:53:b6:f6:65:cc:22:41:62:61:18:d0:9c:
f0:2b:52:8f:1c:e5:f7:dc:66:0e:26:13:ac:01:8b:
ed:98:a6:b2:63:f5:17:4d:e3:30:a5:35:e1:cc:81:
fa:be:0f:fb:bf:33:3b:28:cf:97:63:ff:c7:4c:00:
41:2e:fb:19:7a:f5:73:22:70:d5:ca:67:62:a9:71:
56:02:2e:4d:57:84:18:e7:39:98:57:4e:65:65:a2:
b8:61:62:fd:11:71:88:ef:d6:6e:d8:b9:63:e2:30:
f2:ee:9e:dd:69:87:7f:d8:25:cc:a8:42:b4:1b:8e:
9e:87:37:1d:3f:9a:00:8f:81:18:23:75:07:cc:fb:
d5:48:90:8f:7d:f4:e7:8e:c4:03:ed:cc:49:76:05:
07:b1:a8:3c:41:81:cb:26:bf:1b:cd:7f:de:f9:45:
8a:dc:12:9d:b6:0e:2a:ca:bd:a8:fb:83:90:7c:71:
a6:f1:49:04:eb:ca:26:1d:f8:8a:46:77:23:4e:48:
61:15:03:f9:d0:75:a3:a2:51:c0:1f:df:5b:67:f4:
22:39:7c:15:ea:30:37:08:d8:32:90:5e:cc:c7:85:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:F9:31:09:F8:3B:68:97:2E:41:50:8C:E2:CC:9A:EC:E6:C8:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B5B8AC560111F1B753ABE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1f:65:2e:fc:ed:e7:84:71:70:6c:7a:88:d4:95:09:38:dd:
a0:80:fd:1a:6a:af:ae:b3:dd:03:24:19:87:e5:dc:72:d1:d7:
f2:c0:d6:ab:64:d7:44:36:c0:ff:73:a4:91:20:d0:46:ca:d6:
a7:b3:62:d2:1e:3a:8a:43:7e:1c:4e:ed:7a:4c:2d:e5:61:7f:
ff:7a:d8:72:70:bf:21:99:0b:1e:5c:55:8e:59:50:f7:10:53:
59:84:75:58:02:57:8b:d4:4e:c5:1e:7e:48:35:b9:c3:1d:c0:
b3:52:c4:3f:47:c1:fd:10:4f:34:42:a2:d8:f9:aa:43:82:8f:
20:92:8f:7b:60:75:3b:9d:11:6f:34:ae:f9:04:b4:e1:f7:1c:
b9:65:0e:a4:68:fe:92:0a:87:1c:14:ab:1a:7e:78:5e:11:48:
5b:58:44:e4:c5:e5:9c:a8:33:8d:ab:b6:67:d4:de:d2:45:bf:
63:2c:c8:5b:60:09:7f:4a:da:e9:8e:84:6a:e5:72:79:48:4d:
79:e6:8b:87:e6:56:99:b6:c3:87:25:fa:8e:fa:eb:03:da:e0:
bb:ab:4d:53:42:bd:99:cd:d4:1d:1f:f3:37:64:6a:e3:cb:48:
38:2f:9b:3e:25:7b:fd:bf:b3:ee:4f:86:64:5b:fc:c5:b2:ca:
d6:ef:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:33 2026 by rpki-client