Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587E0FD4577811F1BCDA08D2CE1D38B0.roa
File: 587E0FD4577811F1BCDA08D2CE1D38B0.roa (raw, json)
Hash identifier: NcMOMSB9OgYqQfA0xTwh8ZmK49wBj3bQX9pSvgHT7JY=
Subject key identifier: C4:08:23:81:A1:65:BF:19:39:8F:B7:C8:76:0B:15:73:91:4F:BD:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587E0FD4577811F1BCDA08D2CE1D38B0.roa
Signing time: Sun 24 May 2026 13:56:22 +0000
ROA not before: Sun 24 May 2026 13:56:17 +0000
ROA not after: Fri 10 Jul 2026 13:56:17 +0000
asID: 32043
IP address blocks: 156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
156.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112886 (0x1b8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:56:17 2026 GMT
Not After : Jul 10 13:56:17 2026 GMT
Subject: CN=6a130386-4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:7a:a8:16:d3:65:15:4f:2b:de:e1:5d:6b:
9f:88:be:bd:c5:07:66:bf:79:ab:df:bb:c8:26:13:
0d:60:12:2e:39:fb:c7:f5:7e:b2:6d:df:69:5c:8c:
ef:cc:82:23:5d:38:66:db:a4:33:2d:e5:4b:22:79:
0f:9a:b8:8d:04:a1:5e:62:08:f9:5c:18:b0:87:ae:
65:89:09:94:6d:e0:88:19:2f:b8:b3:51:26:94:e1:
48:9e:95:05:b4:40:09:49:6e:b3:69:e0:b0:96:20:
d1:d6:4e:9d:6f:c1:f4:b9:5d:0e:23:6c:94:52:e9:
59:8b:08:75:bb:2e:aa:53:3c:23:a0:bb:5e:0f:f2:
4f:06:15:eb:70:6d:40:fe:b5:f7:b2:64:99:c5:74:
2c:e2:0f:e3:03:71:f7:db:db:5d:c0:ba:d7:e2:7b:
ea:54:61:a3:f9:71:44:05:2d:87:09:5c:e8:41:28:
71:d1:b6:cb:88:9b:73:7a:2c:e8:3f:b5:ba:c5:aa:
4a:0c:12:32:be:85:c9:ec:2e:58:5c:b4:25:e5:e6:
26:87:fa:d7:a0:77:fc:70:e0:07:22:cc:c3:0a:2b:
e3:0e:6c:38:28:bd:51:6f:28:4f:f5:58:4a:e2:e6:
a2:56:3b:b6:79:18:90:1c:3a:ea:50:05:be:63:99:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:23:81:A1:65:BF:19:39:8F:B7:C8:76:0B:15:73:91:4F:BD:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587E0FD4577811F1BCDA08D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.48.0/21
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cc:e3:11:99:53:80:89:14:cd:a0:14:7a:d5:a6:b8:b7:25:
4f:da:72:d1:1f:99:2c:61:b5:36:1b:9b:e4:e3:e0:ce:bf:90:
e1:9b:a7:ba:56:01:b1:81:d1:68:43:da:a4:99:9f:5a:4d:38:
d2:ec:12:87:16:aa:29:c5:32:23:9a:a0:c9:4d:53:5d:5b:39:
bf:3f:4e:bc:7b:91:90:2a:e5:0f:ee:8a:49:2a:b7:15:8e:1a:
63:0d:ef:57:55:59:df:5b:9c:f0:d5:ef:5f:c9:96:4d:b1:b8:
a5:b3:c7:f8:78:30:14:de:05:58:09:81:c3:9e:8e:ca:d7:97:
47:cf:2b:60:50:ad:90:0c:4c:01:16:8b:b1:ef:ea:91:2e:98:
4a:b7:ac:89:0e:0e:45:d2:2c:fe:4a:1e:13:5b:a8:ab:ef:a6:
76:ee:a6:ac:e6:2f:67:18:ed:3f:c4:fc:cc:36:cc:56:7e:68:
9b:6a:51:fc:57:95:01:12:bb:c9:ca:b5:6e:dc:a6:ff:fb:83:
ad:8d:81:de:e0:9b:da:bb:5b:af:e9:e1:b4:4f:62:a0:ff:fa:
6d:be:c5:ca:a3:fa:05:8e:d4:7f:c7:0b:85:b3:d5:4f:62:d7:
a5:6c:e6:28:03:bc:1c:7f:e9:ba:85:78:81:90:9a:23:91:77:
6c:3a:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:03 2026 by rpki-client