Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D8DACEC63D011F18C3440E4CE1D38B0.roa
File: 4D8DACEC63D011F18C3440E4CE1D38B0.roa (raw, json)
Hash identifier: 0Q/eAKOA9kGIX2pCFvjCX0wSWKMazEwPx3+ufmxf6Mw=
Subject key identifier: 61:F7:F8:FB:02:F0:15:92:D5:B4:AC:56:83:C2:BC:C6:A5:F0:7C:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D8DACEC63D011F18C3440E4CE1D38B0.roa
Signing time: Tue 09 Jun 2026 06:56:13 +0000
ROA not before: Tue 09 Jun 2026 06:56:08 +0000
ROA not after: Wed 15 Jul 2026 06:56:08 +0000
asID: 269070
IP address blocks: 156.249.64.0/24 maxlen: 24
156.249.65.0/24 maxlen: 24
156.249.66.0/24 maxlen: 24
156.249.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113775 (0x1bc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 06:56:08 2026 GMT
Not After : Jul 15 06:56:08 2026 GMT
Subject: CN=6a27b90d-ad82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:70:fa:70:cb:94:da:54:3b:36:9c:19:7e:
42:5e:aa:e2:65:58:43:f8:6e:5e:a3:4a:de:ee:aa:
13:fb:a8:43:5b:df:4c:53:48:12:e4:3b:5b:d6:6c:
c9:a0:d5:ec:a5:a9:b9:79:35:12:c2:2d:f7:08:ce:
eb:ea:78:0a:e6:0a:37:a7:42:da:89:dd:4e:1a:63:
28:05:a6:af:ab:4e:18:f1:11:74:45:bf:33:90:13:
b1:ec:e0:be:22:ad:5b:2d:fb:02:02:91:49:12:48:
b8:48:1a:47:ca:9c:ee:e4:28:f8:b6:ad:f0:c9:d7:
b1:bb:1f:fe:9e:4a:b9:b7:fb:2b:db:dd:70:18:89:
20:db:a0:32:fb:c1:8f:b8:e9:ba:98:8b:6c:33:72:
08:3b:b6:d6:b6:a6:ec:10:2e:aa:e8:fa:f3:7c:23:
7c:76:4f:aa:b3:30:ab:46:b1:27:8d:70:20:a8:4e:
81:4b:c8:1e:bd:8e:c4:06:0b:b4:7f:c1:a0:8b:52:
6c:80:65:9f:c5:38:ca:c0:55:8e:85:9a:2f:cf:a6:
fb:0d:fa:db:45:aa:d6:17:01:df:72:be:19:48:3c:
23:4a:5c:11:43:09:54:48:6b:92:35:f6:53:0a:da:
ad:54:5c:2f:9d:5c:82:96:3c:07:b6:51:2e:68:33:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:F8:FB:02:F0:15:92:D5:B4:AC:56:83:C2:BC:C6:A5:F0:7C:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D8DACEC63D011F18C3440E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
02:c0:49:ae:ac:e8:39:14:94:ae:c5:fe:e3:af:9b:3b:9d:61:
aa:a4:e8:b1:35:59:39:3d:de:f9:d1:38:76:7c:05:a7:1e:14:
81:f6:68:b3:b1:76:c3:b3:a9:79:89:6a:b7:e1:06:1f:69:a2:
a6:ee:6f:45:d3:d0:e6:94:63:d5:3c:4a:5e:db:52:fb:ec:6a:
ad:53:f7:1a:2c:c0:c0:8b:a1:ef:fd:b9:ac:d5:eb:94:29:9e:
f6:30:d7:a2:79:10:eb:b7:d1:bf:21:0b:2c:ab:79:f5:70:a8:
d0:5c:12:3e:52:28:96:55:2e:fb:5b:8a:d0:d8:97:bc:e8:11:
30:63:97:15:38:23:a2:ac:f7:aa:dd:f4:67:2d:5f:ab:35:e2:
91:7a:c8:71:ab:31:f1:a9:41:cc:de:ef:a7:5b:f5:ab:b9:e3:
ad:81:b0:fd:e3:ba:ef:3c:44:f6:55:a4:9e:35:54:d9:a3:8e:
65:1e:74:1e:07:4f:52:b0:e6:da:bc:1e:f5:90:1c:cb:50:56:
96:30:41:8d:4b:59:48:94:1b:1c:e6:5c:b2:85:7c:71:bd:72:
03:0e:02:fb:6a:a3:88:ff:1d:99:1e:34:c5:fe:62:76:6e:88:
53:51:c5:76:5e:73:df:09:3c:9e:4a:13:86:ac:2c:bb:a6:e3:
2a:9d:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:19:51 2026 by rpki-client