Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3C3E8A58FC11F19ECCAB0ECF1D38B0.roa
File: 6C3C3E8A58FC11F19ECCAB0ECF1D38B0.roa (raw, json)
Hash identifier: 60s5jhudcBzDQl2WdND6A/PpnpWhcaBdHfBsRe22fIU=
Subject key identifier: BB:8E:CB:F4:82:0F:C1:BC:34:FE:7F:47:1A:D6:14:52:51:B4:27:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3C3E8A58FC11F19ECCAB0ECF1D38B0.roa
Signing time: Tue 26 May 2026 12:14:20 +0000
ROA not before: Tue 26 May 2026 12:14:15 +0000
ROA not after: Sun 05 Jul 2026 12:14:15 +0000
asID: 151407
IP address blocks: 156.248.8.0/21 maxlen: 24
156.248.8.0/22 maxlen: 24
156.248.8.0/23 maxlen: 24
156.248.8.0/24 maxlen: 24
156.248.9.0/24 maxlen: 24
156.248.10.0/23 maxlen: 24
156.248.10.0/24 maxlen: 24
156.248.11.0/24 maxlen: 24
156.248.12.0/22 maxlen: 24
156.248.12.0/23 maxlen: 24
156.248.12.0/24 maxlen: 24
156.248.13.0/24 maxlen: 24
156.248.14.0/23 maxlen: 24
156.248.14.0/24 maxlen: 24
156.248.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113141 (0x1b9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 12:14:15 2026 GMT
Not After : Jul 5 12:14:15 2026 GMT
Subject: CN=6a158e9c-e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:13:a7:74:a8:cb:22:22:77:11:2f:be:4c:
18:e3:cc:ad:ec:75:2c:a2:48:e4:19:fb:de:c2:4a:
ab:bd:d4:22:63:10:42:70:93:73:3e:73:02:6d:62:
49:3f:60:80:ff:7f:00:24:1e:09:68:2d:e9:f8:34:
fd:73:67:dc:a1:c6:6f:70:b2:17:98:b6:67:74:d4:
e9:30:73:51:dd:1e:3b:22:7f:8d:e6:69:16:cc:6d:
22:5d:5e:e2:6f:79:96:49:31:eb:a7:b3:c0:4e:c6:
e5:86:cf:9e:76:d2:27:55:c8:31:24:11:f7:79:74:
38:38:0d:56:c5:cf:7d:0f:9d:09:69:b9:31:0f:14:
fe:c6:16:b9:45:e5:b6:24:ad:04:cc:16:fb:32:cb:
4e:3b:c4:71:9e:c5:4d:03:8b:0e:c5:2d:69:31:eb:
64:a7:59:04:a9:de:50:6b:14:62:37:9d:83:42:c0:
08:79:90:2d:93:2f:38:05:33:7a:7d:50:7e:63:22:
7d:d8:72:2d:ec:ba:eb:e4:8d:e3:d9:e5:5d:a5:1a:
06:02:0d:84:f4:90:85:ea:d9:3e:d1:2d:4b:06:d8:
44:8d:a1:aa:1d:ce:46:1f:3f:42:d4:bf:a4:a5:bb:
26:25:37:61:fb:28:e2:9d:64:5e:d9:94:12:5e:4e:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:CB:F4:82:0F:C1:BC:34:FE:7F:47:1A:D6:14:52:51:B4:27:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3C3E8A58FC11F19ECCAB0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.8.0/21
Signature Algorithm: sha256WithRSAEncryption
94:79:cd:47:52:83:7b:a9:33:06:8f:80:63:c0:62:52:eb:ef:
ef:f1:31:50:d6:06:d1:8b:9d:80:ee:05:91:2f:50:48:36:1b:
73:a0:81:b8:cb:86:67:6e:69:f8:86:f6:8c:a2:34:b2:b9:15:
f4:d8:a3:22:83:1a:24:20:6e:4c:91:83:4b:c6:c8:81:5d:72:
02:73:0b:23:7d:49:46:28:61:1e:ed:d4:92:9e:3d:06:07:a7:
1a:29:ac:de:49:91:1d:b4:1d:ff:3a:f3:9f:41:24:bf:ed:ca:
49:d4:6c:3a:e0:6c:4a:08:4d:3c:6c:bd:fb:27:7a:43:6b:0b:
8e:55:e8:89:69:a3:f2:6a:b2:f4:0f:09:30:a2:69:e9:ab:33:
8a:ef:cb:a5:90:80:b8:e0:84:ea:0a:7d:6f:4c:d8:1f:05:08:
aa:e5:99:62:a5:c3:3e:11:f2:41:44:88:18:31:0c:de:e0:4b:
90:a3:41:5d:62:04:5f:97:63:fe:df:56:20:47:42:4b:f9:41:
54:32:0b:d5:3b:26:91:12:af:77:77:1f:df:4e:df:1a:fa:19:
4d:29:46:fd:f7:ae:ce:c9:84:e8:47:ce:0e:e5:12:0f:57:f2:
df:25:3c:d6:63:05:c8:61:6c:13:fe:65:78:7a:4e:83:5b:2d:
f3:70:32:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:07 2026 by rpki-client