Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BB7F70669BA11F1A06A7EC4CE1D38B0.roa
File: 5BB7F70669BA11F1A06A7EC4CE1D38B0.roa (raw, json)
Hash identifier: MVPlc/MnJQEfF2rSqHxSfeNZBQsZO5I1QNIWmTEc5i0=
Subject key identifier: 94:EA:F9:E6:23:A2:5E:42:82:D9:51:52:32:91:FE:91:F7:DE:01:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BB7F70669BA11F1A06A7EC4CE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:34:15 +0000
ROA not before: Tue 16 Jun 2026 19:34:10 +0000
ROA not after: Sat 24 Apr 2027 19:34:10 +0000
asID: 137263
IP address blocks: 156.225.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114275 (0x1be63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 19:34:10 2026 GMT
Not After : Apr 24 19:34:10 2027 GMT
Subject: CN=6a31a537-cd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:44:ed:30:a5:3d:f3:00:e1:bd:b7:16:ea:
34:b9:30:b3:92:33:63:25:9d:4f:4f:2c:62:e7:67:
d2:35:1f:2f:63:43:ed:63:0c:d6:da:50:78:9b:62:
64:82:b6:ed:eb:bf:4e:2c:c4:26:6a:44:dc:36:b2:
82:a9:82:6f:5a:2e:a6:aa:7d:cf:3a:75:93:cb:60:
e3:84:97:02:0c:37:9b:37:46:d4:63:73:a1:51:9c:
6d:7f:37:20:32:22:74:75:bb:08:d0:2a:1b:c2:9f:
87:b2:04:96:8d:ab:b5:5e:6f:44:c7:2e:50:45:bd:
aa:d1:a5:ba:96:1d:3c:ec:65:b4:a9:1f:8b:e5:66:
d6:55:8d:71:ed:52:91:ef:57:94:2f:3a:30:31:70:
da:89:fe:1c:93:d2:d1:7c:89:a9:19:61:d9:9a:9c:
ba:96:73:99:8c:8d:e9:87:51:42:a8:cd:06:00:2b:
0e:6d:9d:6c:83:03:6a:f9:4d:77:a7:cb:de:1e:65:
f5:b8:8f:3c:0a:ea:0d:03:bb:36:c2:f6:72:e0:c6:
31:46:06:eb:ab:14:b9:45:b5:80:db:b4:0a:68:20:
dd:c4:6c:c0:2b:d4:23:1b:7f:6a:4c:0d:68:f7:82:
26:f8:83:17:22:6a:fe:ff:5c:e0:43:88:fe:3f:21:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:F9:E6:23:A2:5E:42:82:D9:51:52:32:91:FE:91:F7:DE:01:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BB7F70669BA11F1A06A7EC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:05:07:27:71:18:54:e5:c8:84:27:c6:63:05:b1:fb:8d:22:
eb:76:4b:54:ea:ea:99:80:85:26:cb:f4:9a:c5:71:58:b0:96:
21:f2:82:19:77:f9:43:5a:91:3a:39:64:de:13:0f:30:da:26:
2b:7d:08:e3:83:e2:7f:ce:4a:30:91:29:a3:26:58:5f:f3:79:
95:0b:a9:48:68:03:66:9f:13:f0:e9:26:51:ce:c7:55:26:09:
21:ec:d2:c5:d3:26:3f:de:8b:75:e7:45:d6:d4:14:d6:b6:ec:
6a:f7:5e:fe:86:9f:72:a1:55:c1:99:12:e0:0c:81:30:d8:ef:
fb:59:84:6f:3f:64:67:48:7a:68:f9:99:ae:41:64:42:03:13:
e7:f9:77:d6:e6:20:60:47:66:5c:ce:51:e7:fe:96:ed:1a:46:
81:1f:47:31:8c:2b:57:5f:6a:f5:16:61:b7:0c:a2:b8:94:a6:
90:90:48:24:d5:ae:29:49:42:a2:53:9a:38:ff:b3:ce:fc:9b:
3e:e2:f8:bd:00:47:16:28:c5:29:57:78:04:c0:b6:21:1e:d1:
dc:0c:76:05:a5:4b:0f:fb:33:e3:19:3f:26:52:5c:07:16:29:
4d:51:68:6e:f6:99:e4:2e:99:b6:9d:64:72:ac:31:56:63:f9:
e5:59:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:39 2026 by rpki-client