Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D761BA0569511F1AF4D56F0CE1D38B0.roa
File: 5D761BA0569511F1AF4D56F0CE1D38B0.roa (raw, json)
Hash identifier: 6gSz4lVUwHff/R23fIcJuE1tC0pkmPkR1hX/O3hJyUE=
Subject key identifier: 5C:81:D9:75:79:95:DA:09:AF:15:BB:71:F8:C4:F2:6E:21:03:33:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B886
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D761BA0569511F1AF4D56F0CE1D38B0.roa
Signing time: Sat 23 May 2026 10:51:35 +0000
ROA not before: Sat 23 May 2026 10:51:30 +0000
ROA not after: Tue 16 Jun 2026 10:51:30 +0000
asID: 138415
IP address blocks: 156.247.32.0/19 maxlen: 24
156.247.32.0/24 maxlen: 24
156.247.33.0/24 maxlen: 24
156.247.34.0/24 maxlen: 24
156.247.35.0/24 maxlen: 24
156.247.36.0/24 maxlen: 24
156.247.37.0/24 maxlen: 24
156.247.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112774 (0x1b886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 10:51:30 2026 GMT
Not After : Jun 16 10:51:30 2026 GMT
Subject: CN=6a1186b6-7b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f7:bb:38:1c:c5:a2:ed:8d:ab:4c:c0:0b:6d:
ba:05:bb:a6:92:b3:a2:55:60:09:e7:bd:e5:b8:84:
5e:e5:58:dd:fa:e8:92:29:16:02:a8:44:10:5f:3e:
3a:f8:44:b3:ab:3d:47:2b:59:cc:1d:28:4a:f4:85:
01:83:49:51:20:47:95:c7:52:27:e1:71:c9:f1:3f:
aa:43:c4:f9:42:92:8d:da:25:c2:19:d5:34:dc:4c:
e3:59:59:44:38:c6:9e:4e:f6:32:17:02:18:c7:e8:
84:00:65:21:83:f9:bb:ee:04:e6:a2:cc:ab:cc:46:
62:4e:66:e0:67:33:21:ea:b0:8c:da:05:5a:9f:0b:
76:be:d6:be:17:ac:e6:d4:2e:be:6c:b9:92:7c:25:
40:89:20:d1:96:7c:49:52:d7:28:c5:12:a5:17:27:
85:2c:c4:bd:ab:bc:d2:1d:94:4b:d7:5c:60:29:c0:
d6:96:dd:aa:74:ee:60:c9:f3:84:28:62:42:be:37:
d4:17:2d:80:e9:42:41:7d:13:51:b6:62:c9:fe:46:
b3:69:95:6a:20:67:ab:9c:e4:f9:b1:b3:69:ab:3c:
12:b5:f4:3f:a6:8d:21:bb:48:1c:32:97:94:fc:8a:
34:d5:1f:69:70:1c:56:d1:fe:e1:21:5e:c9:62:78:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:D9:75:79:95:DA:09:AF:15:BB:71:F8:C4:F2:6E:21:03:33:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D761BA0569511F1AF4D56F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:35:de:6d:75:29:64:8d:48:15:85:d0:8e:85:f3:45:53:0f:
e9:a8:19:01:4c:f2:c8:ae:97:90:b8:e4:5c:9f:c6:fe:44:96:
38:f2:15:b4:e6:56:27:29:91:6b:34:d1:1b:34:fd:7f:12:9c:
5d:11:99:73:23:80:8d:9c:2e:88:aa:3e:7d:4c:2b:b6:82:41:
a1:80:4f:54:08:a8:c5:00:6a:ec:97:ab:15:cb:62:84:8c:bd:
07:8f:85:7e:90:10:27:91:49:93:8a:00:68:ff:0e:1b:1f:51:
a5:05:26:b4:08:57:69:f2:5e:26:8a:e5:80:08:55:7e:3e:ca:
94:f1:96:93:29:d4:6e:f7:1d:42:fe:c7:dd:c3:16:34:40:43:
e0:41:78:38:d0:4e:30:79:26:2e:e1:f9:40:2c:1c:14:2d:b2:
1d:8d:8a:69:3e:6d:24:79:9f:56:e4:f2:a8:b6:c5:25:1d:73:
f6:cb:72:20:c1:d8:86:e4:a0:1d:44:34:5f:49:ff:3b:e7:d3:
70:3c:a6:2b:6f:48:a7:63:27:bb:13:9d:54:8a:38:07:3b:66:
f6:dc:f8:a6:17:f3:31:22:02:4c:34:2f:ce:8d:10:6d:07:1a:
51:87:d0:32:23:f9:b5:d6:8b:a2:9f:c4:5d:96:42:f5:69:5e:
d1:7e:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:56 2026 by rpki-client