Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D96FE066E1811F193B0CDA0CE1D38B0.roa
File: 6D96FE066E1811F193B0CDA0CE1D38B0.roa (raw, json)
Hash identifier: QmCRfTQG224G+iS9oAf7/XBO2aXpU7aihyf+qUYxByE=
Subject key identifier: 02:53:5D:EC:86:81:12:CB:86:11:FB:30:AE:22:FF:57:91:0F:51:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D96FE066E1811F193B0CDA0CE1D38B0.roa
Signing time: Mon 22 Jun 2026 08:57:43 +0000
ROA not before: Mon 22 Jun 2026 08:57:38 +0000
ROA not after: Tue 28 Jul 2026 08:57:38 +0000
asID: 44559
IP address blocks: 156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114534 (0x1bf66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 08:57:38 2026 GMT
Not After : Jul 28 08:57:38 2026 GMT
Subject: CN=6a38f906-afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:3c:85:bc:1e:dd:27:ab:80:36:06:b1:fa:
5a:94:43:e0:39:a1:2c:53:16:31:61:29:25:7f:2f:
7b:71:4c:ca:0d:a9:cf:f8:11:c4:83:0b:eb:36:c6:
b0:06:93:3b:98:d2:d7:f9:41:5e:e0:da:3c:80:75:
50:49:5a:2e:88:b9:87:09:93:ff:7c:67:21:48:bf:
d5:f1:23:51:de:9d:df:27:03:ab:3b:54:ed:de:12:
9f:fb:0a:0b:d0:99:b4:72:11:9e:b8:28:df:c4:50:
73:a7:83:62:49:8e:bb:26:8b:83:ea:e8:25:7f:0f:
3d:72:d4:f2:29:fa:6e:93:36:cf:68:c1:b2:ba:7a:
05:42:d7:1b:85:61:10:d4:d3:d8:8f:3c:2b:8f:b9:
6a:bd:9e:52:83:9b:53:c7:b1:34:71:d7:83:e7:0d:
14:04:4c:72:36:af:4e:93:85:e7:8c:98:18:5a:8a:
dc:88:39:a3:94:47:c3:68:f9:57:46:fb:5d:17:1f:
8c:65:76:02:9f:e4:33:4f:9e:1f:05:03:47:ea:dd:
d7:10:7d:2f:f4:e4:db:75:9d:96:cb:1b:d5:6c:59:
24:b1:7c:c1:22:e4:26:a5:a3:5e:10:74:1a:d2:fd:
81:0f:0e:7c:dc:f3:97:9f:e2:cd:7f:42:0f:6d:50:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:5D:EC:86:81:12:CB:86:11:FB:30:AE:22:FF:57:91:0F:51:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D96FE066E1811F193B0CDA0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.247.0-156.246.248.255
Signature Algorithm: sha256WithRSAEncryption
32:e4:d9:57:f4:b6:31:27:4f:72:d6:82:7c:ae:a4:42:b8:7f:
51:56:5b:81:e5:4a:1b:41:99:ed:ef:96:01:f9:2f:2e:f1:9d:
9d:e8:46:bc:9a:42:0a:09:b3:54:75:7c:36:12:8c:d2:af:47:
32:d1:f1:db:5e:cd:43:27:66:31:89:67:99:ec:d8:fb:59:b4:
74:92:e3:4d:7d:5b:a4:ed:fd:47:b5:9a:03:b0:3d:ca:ff:f6:
4a:c4:2a:80:f9:83:36:d9:21:2f:f1:2e:c2:ea:6b:5d:d7:64:
57:86:02:0f:15:fd:a2:74:b0:05:a2:17:78:57:db:c7:57:69:
20:f4:2f:4f:fc:eb:11:21:36:50:81:de:05:94:f6:47:3b:b0:
35:8b:7d:c8:2b:43:27:c9:04:f9:9d:ac:a7:8d:74:1e:5b:7f:
c4:e7:1c:53:36:33:49:fb:42:e5:85:9a:c3:d3:e1:78:8f:24:
d2:6e:bc:4f:94:fd:2d:70:0b:5d:1e:36:86:8e:08:40:9b:4a:
7e:84:7e:85:82:12:64:a0:1b:07:21:6d:0d:73:84:db:ac:46:
05:f2:2e:c0:34:dc:6b:ae:c6:98:b2:4d:94:fc:fc:ba:de:95:
00:6b:3d:29:f7:43:0f:17:48:9b:df:18:bc:9e:c0:6a:6c:57:
6b:d1:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:06 2026 by rpki-client