Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFD8B546FD011F1843A560CCF1D38B0.roa
File: 6CFD8B546FD011F1843A560CCF1D38B0.roa (raw, json)
Hash identifier: oeW/HY+oRTRk2SqsGLGbEfp5I9WdCxO+RTnBG8lhL70=
Subject key identifier: 6F:90:77:B3:C9:63:83:96:3F:53:03:F1:44:BB:86:FB:9A:59:B8:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C03A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFD8B546FD011F1843A560CCF1D38B0.roa
Signing time: Wed 24 Jun 2026 13:27:20 +0000
ROA not before: Wed 24 Jun 2026 13:27:16 +0000
ROA not after: Sat 01 Aug 2026 13:27:16 +0000
asID: 153656
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114746 (0x1c03a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 13:27:16 2026 GMT
Not After : Aug 1 13:27:16 2026 GMT
Subject: CN=6a3bdb38-1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:d5:d9:77:cd:bf:d9:cc:f5:df:6f:f4:0b:
71:8d:5f:a2:ba:cc:51:79:27:70:62:3a:4c:ef:22:
ce:42:dd:f4:41:88:e7:d9:d5:72:ef:32:d3:af:e1:
a9:f8:b5:be:f3:f8:ae:f4:8d:a1:e6:58:f7:a1:0b:
58:61:e0:7e:d1:0d:f0:d5:e1:03:f5:5f:18:2f:5d:
a2:d4:a1:bf:2d:65:f5:48:13:af:2c:f5:4c:0e:f5:
1a:97:cb:4b:d7:c9:2e:65:41:00:e4:34:c1:2d:df:
0b:5d:8b:4f:fe:5c:70:bf:c2:83:59:a3:7e:0f:b2:
6b:15:1b:be:e9:63:f0:c7:e5:16:b6:f3:f7:e0:e3:
56:a3:73:6c:d2:be:ca:90:d1:63:25:58:0e:1f:65:
56:85:61:3c:6e:8c:a6:df:15:50:01:6b:bb:7a:7d:
b3:23:90:a8:23:2d:69:ef:40:f6:25:31:6f:38:2d:
4f:ee:dd:f9:4d:dd:76:e3:68:e6:cd:c2:66:69:f1:
19:0d:0a:39:4f:18:d5:ad:48:37:3e:c5:48:83:94:
1c:62:c5:cb:7b:fc:cd:48:e3:4f:36:fb:b0:1b:b4:
8d:bc:ad:ba:c5:b9:7b:c5:64:b9:2e:4e:b3:16:ef:
7b:85:1c:21:e3:23:7f:19:0f:c8:9b:b9:af:31:c5:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:77:B3:C9:63:83:96:3F:53:03:F1:44:BB:86:FB:9A:59:B8:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFD8B546FD011F1843A560CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
87:7e:af:e2:14:b0:a6:ce:63:52:1c:3b:05:60:15:5f:fc:52:
33:37:3d:21:a9:4b:65:d3:d6:3b:9b:fc:e6:3e:b3:42:2a:c0:
80:83:87:62:37:24:c8:e5:44:95:f0:6f:b1:11:0b:8f:37:52:
42:b0:8f:4d:33:11:73:e7:a3:a2:2d:fb:7b:19:f8:ff:60:bd:
e1:47:3c:58:c5:f1:ec:1f:1b:7c:bd:14:64:01:f2:6c:69:26:
67:3b:0d:89:7c:00:fd:37:b1:fd:7d:c8:f8:9c:25:ed:84:2a:
fe:db:11:85:d2:69:5e:f8:ce:6f:2b:a1:a4:b9:65:fd:93:66:
a1:a4:aa:7c:41:f9:8a:cd:c9:b8:a3:f4:5c:0e:43:85:84:12:
ca:f2:91:da:37:7c:7b:bb:91:d6:59:40:24:60:7b:c7:66:73:
39:8c:59:7d:0e:01:4e:75:0c:3f:ab:24:a1:19:94:f0:ce:d5:
96:1f:a6:36:d8:61:26:be:82:62:0e:bd:2a:a7:43:98:7a:3c:
dd:c2:d7:6e:1c:32:7c:7b:54:b3:6a:67:e9:c1:46:dd:c3:bb:
f5:d5:d2:be:9f:9f:3e:d3:63:56:ea:7a:52:ac:4a:8b:3c:42:
26:70:9e:d6:5d:01:61:7c:14:ee:a2:d7:fb:d2:f0:ac:5b:62:
c0:6b:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:16 2026 by rpki-client