Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD9A356507911F191279EB0CE1D38B0.roa
File: 5BD9A356507911F191279EB0CE1D38B0.roa (raw, json)
Hash identifier: jRfKnGO24UgbkO3BNvaCXJNrsK2vtko3Rc3IPzYSmwM=
Subject key identifier: 92:5D:02:46:06:4B:DC:F5:7A:E4:F4:7D:1C:9A:E3:0F:21:D7:62:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD9A356507911F191279EB0CE1D38B0.roa
Signing time: Fri 15 May 2026 16:15:59 +0000
ROA not before: Fri 15 May 2026 16:15:54 +0000
ROA not after: Mon 22 Jun 2026 16:15:54 +0000
asID: 40779
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111828 (0x1b4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 16:15:54 2026 GMT
Not After : Jun 22 16:15:54 2026 GMT
Subject: CN=6a0746bf-bc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:69:9c:5d:7d:b3:01:eb:7e:fd:2e:91:0f:
41:77:9f:da:78:34:e2:41:67:91:69:21:cb:26:ee:
c8:4f:3b:72:93:96:83:ba:e3:1c:96:2b:de:7e:0a:
54:15:96:48:aa:ca:36:1f:9a:f5:e4:8a:40:61:55:
15:32:8a:6b:8f:27:d7:58:6c:99:a2:f1:b7:11:93:
12:8d:30:d7:31:46:55:55:6b:2e:55:b5:5a:21:94:
74:9d:c7:5e:f0:5e:dd:0f:64:f9:60:61:93:c6:4c:
dd:3d:2b:c0:52:1e:23:ff:4f:d9:f6:15:17:eb:82:
bb:85:0f:e5:b0:5d:0b:3d:44:b2:6c:cb:24:ff:f7:
04:74:e3:1e:fb:13:4e:2d:e8:1e:80:01:01:4a:6f:
1e:40:77:52:39:07:99:28:e2:c9:83:89:ce:af:80:
c7:31:05:20:67:8b:9c:46:55:b7:a7:29:c2:e5:64:
f5:9a:4d:ef:6e:7b:e5:e4:9e:4d:09:39:fd:e8:32:
98:19:8f:b1:2b:b1:4f:40:b2:0a:e7:01:d1:1a:bb:
69:fa:39:df:d8:31:62:bb:2a:34:93:84:93:58:9a:
2a:a5:58:77:a2:d3:d3:5e:6b:39:b4:d7:86:df:e0:
33:ef:cf:f1:c7:fe:88:d6:ed:5d:b9:d6:bb:b9:75:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:02:46:06:4B:DC:F5:7A:E4:F4:7D:1C:9A:E3:0F:21:D7:62:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD9A356507911F191279EB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
82:2e:66:6a:0b:1a:fc:4d:16:cc:7d:d9:27:e5:30:71:d5:c8:
53:8b:a3:06:10:4d:df:0a:85:1e:71:d4:8d:a5:c8:87:2e:51:
3b:71:e1:fd:16:68:87:26:1d:89:04:47:30:17:18:d5:ea:12:
3d:2b:2f:49:8e:cd:09:9f:9f:4a:f0:70:5c:ac:03:07:4f:cf:
3c:b4:a9:29:38:1f:b3:31:b9:49:c9:95:be:18:18:63:b5:8d:
26:b8:54:96:96:ee:5a:1a:8c:de:f2:4f:b2:bd:35:44:88:6a:
ba:aa:fb:36:a0:1b:c0:ee:fe:52:6d:20:d4:2c:06:8f:7a:10:
89:34:88:fb:3f:9e:81:e7:0a:f7:80:f9:03:95:28:59:d3:b7:
67:65:92:b3:34:67:b9:75:4d:08:5e:fa:74:53:c3:23:3a:7a:
19:c9:f0:14:9a:a6:e2:8c:90:a1:d2:b7:59:ba:3e:34:bb:2c:
7d:f2:7d:5e:35:9f:93:79:6c:97:7b:37:a0:60:e3:dc:1e:c6:
30:9e:8d:12:97:47:5c:9e:bc:35:a7:a6:23:b4:16:da:08:b1:
33:8a:8a:6e:75:a2:2b:39:99:4d:e0:55:b2:1a:f6:1a:32:ac:
de:33:79:bb:5d:56:3f:cc:c8:86:e0:68:df:9a:d0:55:be:ec:
3c:bd:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:31 2026 by rpki-client