Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/542B880A543311F1880281E0CE1D38B0.roa
File: 542B880A543311F1880281E0CE1D38B0.roa (raw, json)
Hash identifier: xCMHXXYnm0IsWf/1JcmB7gSwJcAK2mlQxX9u9+VQKto=
Subject key identifier: F3:EC:91:AA:8F:D1:9B:1D:E1:0F:DE:3E:ED:08:FA:AA:88:FE:46:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B622
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/542B880A543311F1880281E0CE1D38B0.roa
Signing time: Wed 20 May 2026 10:04:46 +0000
ROA not before: Wed 20 May 2026 10:04:41 +0000
ROA not after: Wed 19 Aug 2026 10:04:41 +0000
asID: 139923
IP address blocks: 156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
156.235.104.0/24 maxlen: 24
156.235.105.0/24 maxlen: 24
156.235.106.0/24 maxlen: 24
156.235.107.0/24 maxlen: 24
156.235.108.0/24 maxlen: 24
156.235.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112162 (0x1b622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:04:41 2026 GMT
Not After : Aug 19 10:04:41 2026 GMT
Subject: CN=6a0d873e-3c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:72:15:20:65:e2:ff:83:d1:ab:56:e7:4b:
38:97:11:d5:4d:ec:17:0b:a5:b7:82:4f:2a:f8:63:
4f:e4:7c:22:28:8e:a0:50:a9:5c:c7:9f:bd:10:0a:
e8:70:32:1a:fc:6b:af:f9:c5:35:94:99:7f:b1:aa:
06:d8:47:6e:d7:31:39:41:8d:2d:b3:f2:07:31:13:
7e:8b:8f:69:14:2d:f2:72:cb:2e:6b:62:07:7f:6e:
96:45:86:5a:b3:84:56:65:69:f0:9b:6c:64:64:2a:
0c:33:34:da:a1:ee:2c:9f:cc:e0:9d:54:6b:54:68:
d8:12:78:e7:1f:bf:2f:63:c7:6a:bb:b0:74:7e:3c:
83:8e:9c:5c:63:2d:d5:ce:98:7d:f9:3b:58:e2:d9:
99:d8:84:1c:8e:c2:a3:62:07:aa:a8:db:12:9d:83:
c9:26:63:1f:34:d7:27:cb:b7:dc:f1:48:8d:09:27:
bc:05:11:20:11:9d:f4:67:ca:91:d5:d6:a8:e2:7c:
e8:14:aa:94:13:31:6e:3e:cc:9c:cf:a2:58:f1:31:
13:9c:51:b7:b5:d0:97:3c:5f:b4:a8:12:58:bc:d7:
e7:57:b1:83:3f:b9:f8:62:23:a0:69:ae:cf:71:cb:
b0:28:c5:25:29:3b:b8:da:a6:bc:63:6f:88:79:ed:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:91:AA:8F:D1:9B:1D:E1:0F:DE:3E:ED:08:FA:AA:88:FE:46:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/542B880A543311F1880281E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
97:58:39:1f:d2:b5:77:e0:06:dc:c0:a9:5b:6d:60:94:b6:8f:
7e:44:ea:ac:16:0d:7d:20:7e:d5:af:79:80:cb:fe:2c:59:f7:
2f:09:6d:de:0b:f2:09:cf:72:bc:af:5f:ed:0e:cd:61:ab:a3:
6d:ca:db:02:c4:32:e1:bb:cd:15:c5:6c:d9:9f:4b:a8:e2:70:
21:da:40:ed:54:c2:ae:6b:89:3e:4c:cc:09:f4:8f:a5:fc:c1:
6c:1f:34:26:c2:10:b8:c7:b5:20:6e:5e:36:9c:d0:34:cd:17:
a3:58:fa:05:56:c3:9b:bd:02:56:5c:ee:dc:3a:d8:49:d8:39:
b8:d0:d2:26:78:4f:87:8e:40:3f:7b:07:77:d4:11:bf:c5:4e:
b1:3c:60:07:88:3e:5f:4d:6c:61:0a:ea:df:0f:d0:17:c8:4e:
dd:92:28:55:eb:43:ce:1f:b1:de:2a:90:4f:14:61:84:29:8c:
7b:3c:50:48:78:3e:24:69:98:b0:3d:61:ff:92:52:94:0f:0b:
5e:65:76:da:41:66:36:56:9e:1d:ed:e8:93:c9:33:ad:a7:b0:
8e:8c:26:e5:eb:e9:46:c8:35:4d:a5:08:24:f1:b4:5f:9f:1d:
12:6a:64:fe:eb:bb:68:0f:01:a9:e7:20:93:c9:90:5d:22:e0:
a0:07:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:18 2026 by rpki-client