Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581895A2534D11F1AAA2EFEBCE1D38B0.roa
File: 581895A2534D11F1AAA2EFEBCE1D38B0.roa (raw, json)
Hash identifier: a66Ff7HJvRmDk7avEJQFVt/9nSBqVqetPDaC7yrKqFQ=
Subject key identifier: 38:35:E9:55:53:20:FA:92:D0:D5:CE:3F:7E:BE:31:FD:28:58:0D:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B58D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581895A2534D11F1AAA2EFEBCE1D38B0.roa
Signing time: Tue 19 May 2026 06:38:28 +0000
ROA not before: Tue 19 May 2026 06:38:23 +0000
ROA not after: Wed 19 Aug 2026 06:38:23 +0000
asID: 402169
IP address blocks: 156.235.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112013 (0x1b58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 06:38:23 2026 GMT
Not After : Aug 19 06:38:23 2026 GMT
Subject: CN=6a0c0564-0ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:8a:1b:49:e4:b8:ec:c7:8a:73:38:69:5f:
6e:56:09:58:34:bb:a4:61:79:22:f0:e8:49:d6:82:
6f:ea:12:1d:24:2b:52:ec:79:47:87:1d:ee:f7:ed:
e8:34:fd:93:d1:2d:fb:57:38:83:2b:76:76:98:77:
de:b9:54:b1:99:cf:17:b7:57:d9:a5:67:17:9f:68:
e9:3b:dd:18:a3:1d:7e:11:86:c8:f4:77:06:08:f4:
7c:1c:15:bf:57:58:b7:31:75:8a:5c:6f:46:83:9d:
f4:3d:3a:7e:f0:f1:0b:db:9e:5c:ab:c9:2d:fd:9e:
ed:9c:5a:b0:78:54:8d:a6:8f:62:62:d7:81:db:3a:
47:1a:e5:bd:7d:b3:28:d3:87:f1:50:af:17:e5:ac:
01:a2:a1:39:bf:40:64:dd:5e:fe:96:db:34:30:82:
20:b2:f9:48:48:84:5a:74:4a:15:b8:90:50:8c:17:
7a:12:66:10:03:5d:71:ca:0d:a7:c7:fc:6b:c2:30:
5d:65:8c:6a:4f:3e:52:c0:2e:ee:3a:5c:23:62:99:
5f:c8:58:3f:bf:de:ff:ad:ea:af:59:3f:da:a0:a4:
d5:47:51:86:a2:2e:bc:49:e4:21:87:97:55:86:03:
9e:e9:e0:77:c5:01:90:5d:6b:38:98:0e:f3:1a:b1:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:35:E9:55:53:20:FA:92:D0:D5:CE:3F:7E:BE:31:FD:28:58:0D:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581895A2534D11F1AAA2EFEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.96.0/21
Signature Algorithm: sha256WithRSAEncryption
19:2e:ea:9f:1d:bc:8e:24:29:d1:95:e3:c0:4e:06:c6:c2:61:
98:14:59:79:b8:3a:08:9a:19:ad:25:4f:cd:8f:c5:f3:ef:39:
e6:10:98:ed:a7:56:d0:8c:a1:82:3e:a1:11:74:12:76:bf:7d:
8e:24:ed:e8:05:d4:0b:e9:f5:98:c7:33:14:0e:c6:fd:d4:df:
41:42:ce:48:6c:d5:0c:dc:96:4c:a7:64:5f:7f:9d:30:26:2c:
20:05:bc:84:01:a6:fc:17:f4:2d:28:0a:3a:ac:70:c0:07:f0:
04:b5:03:07:76:be:e8:d7:9c:b5:aa:2a:ac:e6:32:ea:7f:45:
0b:26:6e:27:32:db:f2:e7:13:3f:1b:71:18:da:94:2a:c6:b3:
f8:07:fd:c2:83:32:11:9d:eb:3c:2c:46:fc:f5:81:f4:b3:71:
e4:fe:0d:60:38:58:ef:e1:58:38:9b:80:08:00:94:d9:c2:f2:
a7:77:6f:0d:6d:ca:e9:bf:5c:f6:55:b3:bd:72:2a:da:02:6c:
07:ee:20:5b:46:f6:f7:64:c3:cd:bb:2f:8f:f1:d4:f6:32:4d:
3f:6a:c4:4f:0c:93:11:1e:93:5c:ed:ec:d4:d5:a3:f5:4b:38:
6a:dc:30:f4:11:1b:97:b2:4b:b3:21:0c:2f:bb:f9:29:74:18:
1b:11:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:38 2026 by rpki-client