Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5699B7EE745C11F1A27698BBCE1D38B0.roa
File: 5699B7EE745C11F1A27698BBCE1D38B0.roa (raw, json)
Hash identifier: JWYFdUbwbobbG1JDAYcZWb92c2CN/e/IkU3vwgsMw/I=
Subject key identifier: 7B:1A:26:E4:BE:42:1B:7B:EF:40:F1:E9:62:77:AC:E9:09:29:B5:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5699B7EE745C11F1A27698BBCE1D38B0.roa
Signing time: Tue 30 Jun 2026 08:18:57 +0000
ROA not before: Tue 30 Jun 2026 08:18:52 +0000
ROA not after: Sun 01 Nov 2026 08:18:52 +0000
asID: 131679
IP address blocks: 156.242.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115173 (0x1c1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 30 08:18:52 2026 GMT
Not After : Nov 1 08:18:52 2026 GMT
Subject: CN=6a437bf1-8844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:85:d1:29:d3:48:5a:b4:50:35:ae:a6:4b:
54:c6:37:64:df:f7:57:34:34:77:7b:d7:fb:a2:1a:
c4:73:88:7b:04:17:5d:00:06:d7:08:4d:95:68:29:
7e:80:d0:48:5b:25:6f:c2:f7:35:e0:57:94:e5:47:
e5:ee:97:74:b5:bb:87:f5:57:47:e7:44:95:d7:f3:
6c:1d:b9:eb:98:8e:ca:85:fa:b4:00:03:47:80:19:
25:16:09:eb:32:44:8e:00:dc:65:a1:49:b9:8a:fb:
4f:e4:49:d6:d7:fc:01:6c:06:0b:96:41:8d:b6:db:
dc:f4:fa:98:df:e0:02:43:ce:db:94:b4:5d:6a:a6:
b6:a8:62:e5:e7:ee:75:d8:60:c0:0c:45:01:83:0e:
a2:69:ac:d2:fb:7f:f5:a8:dc:bc:91:73:f8:c3:cc:
7b:88:56:f4:45:13:e0:4b:61:df:c9:3c:ff:30:ef:
30:93:67:46:49:a9:47:67:87:87:bb:44:cc:b8:92:
4f:88:28:98:2c:4b:1b:a5:9b:17:c8:03:45:83:da:
d5:f2:23:61:e2:46:d9:9b:2f:3e:a4:21:37:d2:fa:
e3:11:84:64:81:76:18:99:d1:07:a4:52:69:b8:01:
30:ef:2c:73:74:e6:18:ae:37:e0:55:2f:ea:30:d8:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:26:E4:BE:42:1B:7B:EF:40:F1:E9:62:77:AC:E9:09:29:B5:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5699B7EE745C11F1A27698BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.9.0/24
Signature Algorithm: sha256WithRSAEncryption
20:19:e7:80:38:5b:fb:c8:b8:0c:8f:1e:4a:d5:d8:91:27:7a:
c0:7a:cc:6a:0b:c5:74:30:8c:76:17:9d:43:d3:67:68:cb:a1:
d7:74:95:1a:a3:fd:e6:e7:fb:12:d5:a5:10:1d:99:a2:3e:19:
73:83:1c:0f:35:7a:bc:a6:08:45:b6:4f:a6:57:a2:75:d7:8e:
8f:e6:49:f6:12:7e:7b:78:c5:ff:cc:ba:48:fe:10:c8:1a:e8:
38:6d:cb:0d:d8:28:1e:5f:5d:4a:60:6a:99:15:4a:84:c1:c4:
c2:70:42:74:13:69:76:ad:14:a1:91:53:e1:ab:ad:ec:4c:c1:
eb:7d:17:f2:44:68:aa:23:1e:f7:0a:20:09:75:c5:64:4a:3f:
29:e7:d0:d2:7c:74:44:a5:09:fd:d3:0a:28:d6:1d:68:79:ec:
b2:63:80:fd:9f:c2:60:88:86:25:30:c7:de:95:19:4b:55:1b:
fc:7d:65:7c:0c:18:38:be:ac:dd:b7:2b:53:3e:e9:91:f5:dc:
0c:4a:53:ce:ce:38:e0:1a:a6:f6:e1:20:ac:71:6b:68:3f:7f:
cd:cf:43:f8:cf:51:2d:2a:c5:4d:ab:1c:0c:90:50:9e:b3:bb:
0a:f8:a1:1a:39:d8:65:9e:36:09:d3:30:d0:4a:73:3b:9f:fd:
57:be:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:01 2026 by rpki-client