Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD262205F2511F18AA1C4FFCE1D38B0.roa
File: 6AD262205F2511F18AA1C4FFCE1D38B0.roa (raw, json)
Hash identifier: Iqy/h3LbcbghxLn1YTCe3NJVByW9RToJWQykUDCEmjg=
Subject key identifier: 78:A2:BA:4D:99:58:45:EA:9F:95:13:9A:62:9E:24:42:08:74:5F:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD262205F2511F18AA1C4FFCE1D38B0.roa
Signing time: Wed 03 Jun 2026 08:22:54 +0000
ROA not before: Wed 03 Jun 2026 08:22:49 +0000
ROA not after: Wed 08 Jul 2026 08:22:49 +0000
asID: 271907
IP address blocks: 156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113551 (0x1bb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 08:22:49 2026 GMT
Not After : Jul 8 08:22:49 2026 GMT
Subject: CN=6a1fe45e-f1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:66:2b:e3:71:30:2b:9f:5b:1e:b9:cf:ae:
d8:23:09:f5:68:9c:56:04:71:a1:56:5d:50:a6:ee:
fe:a8:6b:09:23:0c:cd:29:c2:49:51:9a:89:fe:e2:
ee:62:a0:70:2b:be:84:e0:c3:3d:de:fc:db:03:3c:
dc:5b:7d:cb:1c:fc:65:a3:71:fa:dc:98:77:27:13:
68:24:25:96:d8:26:c9:14:cf:62:e9:f8:a1:e4:df:
5f:3d:63:d4:eb:b1:05:59:0c:8c:30:f0:e4:1d:62:
21:c2:02:dc:06:01:71:12:6d:0c:d3:85:d7:1c:b9:
ae:60:44:a4:8f:08:d7:58:fa:ba:41:f2:7d:b3:38:
ca:37:30:4a:c6:53:8d:0e:88:d9:31:e4:d5:83:59:
da:97:f0:cc:a9:0d:0b:bd:bb:c7:bb:05:50:db:b8:
e5:ac:43:30:d5:eb:48:df:f0:f3:b9:2f:1d:bc:28:
65:20:61:45:b4:d7:15:48:44:6a:65:5b:e2:bc:90:
f0:06:54:f7:ac:42:27:2a:aa:dd:13:1e:27:2b:50:
2c:e1:50:c6:2a:8e:2a:cc:e4:d1:79:36:83:9d:3f:
43:f1:de:4a:18:3a:19:06:18:69:27:6e:21:b3:f1:
0b:cd:cc:d0:7f:74:2d:2e:07:66:42:60:16:58:1b:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A2:BA:4D:99:58:45:EA:9F:95:13:9A:62:9E:24:42:08:74:5F:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD262205F2511F18AA1C4FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.73.0-156.238.76.255
Signature Algorithm: sha256WithRSAEncryption
ad:e1:54:68:5a:c4:e0:f7:71:af:0b:d9:41:b0:9b:3e:ec:42:
c8:49:bc:60:d4:67:99:2c:ed:57:3d:9c:fd:d8:cb:b2:e6:29:
05:e9:bf:d5:c5:50:8d:22:08:79:25:25:e5:54:7b:7a:c9:d3:
63:26:9f:8e:67:ef:08:1f:ff:82:03:ad:97:83:2c:64:7b:93:
00:83:2c:1b:2a:da:cf:cb:08:0b:0f:eb:d6:3e:5a:04:05:19:
3a:1a:be:81:18:da:12:ad:b1:2e:a4:9a:74:c3:b8:92:a8:f6:
ba:a7:05:43:4b:24:28:41:25:fc:53:0c:a3:2d:b8:1b:49:9c:
7e:70:54:7d:bc:42:92:4a:58:47:7c:08:28:70:18:5a:06:a7:
a9:b4:ba:95:b3:1d:f9:b1:83:43:0d:d7:b0:74:f1:47:48:9a:
e5:e1:00:57:da:79:0d:11:48:c1:e9:77:65:49:54:d2:9a:f4:
0a:a2:d3:89:c8:1b:c2:77:00:e8:a6:01:d9:a1:47:69:87:4c:
29:ae:87:94:50:a2:0e:1a:d4:a0:2a:61:34:33:a4:89:36:dc:
f6:bd:a2:3f:be:59:fe:bc:ca:5d:d7:1d:fe:88:e3:4f:77:5e:
8c:09:77:49:4f:7d:ec:17:85:e2:f9:82:36:3f:9b:15:03:07:
5f:63:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:17:27 2026 by rpki-client