Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F285FDA2B5611F19B231DBDDAE4EC9C.roa
File: 6F285FDA2B5611F19B231DBDDAE4EC9C.roa (raw, json)
Hash identifier: PjnqBYCZwqbfBl+1d6oBai7x4r7BkJc9CIjmjLhzdZo=
Subject key identifier: 09:98:BE:2F:BF:CF:4C:D5:29:24:D7:B4:1E:5A:FC:69:F9:6F:B2:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F285FDA2B5611F19B231DBDDAE4EC9C.roa
Signing time: Sun 29 Mar 2026 10:02:46 +0000
ROA not before: Sun 29 Mar 2026 10:02:41 +0000
ROA not after: Sat 02 May 2026 10:02:41 +0000
asID: 271875
IP address blocks: 156.224.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108713 (0x1a8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 10:02:41 2026 GMT
Not After : May 2 10:02:41 2026 GMT
Subject: CN=69c8f8c6-1e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:31:b3:4e:67:a2:62:92:49:35:a2:73:dc:
7d:b3:3a:84:05:a8:9b:fe:64:09:bf:33:e2:de:db:
41:9b:77:a2:41:47:9a:b4:94:04:44:1f:5d:f9:7c:
ae:cb:55:60:61:3b:46:03:53:b9:f4:4d:76:72:1a:
6f:44:8e:9d:76:4e:bf:9d:56:e6:be:54:31:2c:7d:
36:48:3a:d9:6f:8f:ce:05:44:ad:2a:14:9f:eb:07:
00:f3:1e:26:0d:43:9c:ce:e5:99:7c:24:f9:ba:a8:
ae:df:80:c4:99:6e:6c:d3:fc:a3:7e:2b:b9:c1:04:
11:61:69:aa:5a:0f:3b:e0:1e:ca:92:a4:8f:d2:18:
70:76:ee:75:fd:15:d4:8c:15:a0:d0:67:ba:04:ef:
2e:3e:e8:e7:28:86:a1:93:1d:3d:40:26:3d:bd:1b:
6c:dc:8d:23:d8:81:55:4a:31:ef:05:20:f0:a2:9a:
df:66:26:fd:f6:06:e2:f8:38:a2:34:dc:58:7b:ee:
d7:db:5c:03:75:60:68:2b:85:62:7d:3a:0f:c7:3a:
57:e4:86:f1:ae:1d:1a:e2:28:88:91:ad:13:77:35:
fd:89:2f:25:4f:49:ac:1b:ba:ad:93:4a:97:75:49:
30:55:ef:cb:53:88:63:05:a3:54:14:6d:b1:34:59:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:BE:2F:BF:CF:4C:D5:29:24:D7:B4:1E:5A:FC:69:F9:6F:B2:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F285FDA2B5611F19B231DBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.0.0/24
Signature Algorithm: sha256WithRSAEncryption
41:66:07:c1:07:22:83:7f:97:71:98:1c:15:df:e3:25:13:f4:
94:14:ec:6b:92:00:86:33:f4:5d:af:d9:77:50:87:f6:55:45:
d8:a5:10:23:fd:fe:9c:23:15:ea:d0:2d:a3:8b:44:78:97:a9:
d8:2c:82:7f:f4:43:1e:e9:dd:5a:f3:79:4b:fa:1f:fa:22:ef:
47:98:88:59:15:2b:1a:92:59:52:46:01:8c:df:a9:fa:b4:ad:
27:fd:67:82:fb:d6:94:ac:b7:3c:16:29:f2:59:3c:3e:ca:e6:
97:2c:4f:92:99:3e:3e:d3:68:73:a4:29:7e:a0:cc:4b:76:ba:
a2:81:db:8c:72:d5:af:2b:8c:1a:19:11:45:1c:0e:24:29:7e:
7a:2e:0c:7e:85:ea:13:d8:7c:34:74:88:64:e9:b1:c1:80:c6:
8f:cb:12:6d:76:c0:1d:e2:95:5f:f5:20:da:96:d3:60:89:1e:
06:6a:96:01:f9:3e:75:6a:22:fb:24:1a:42:26:36:9e:01:31:
c1:ef:91:8a:11:33:b4:64:7c:ef:ce:28:06:f2:53:f6:96:30:
d0:35:14:7f:32:30:c0:3a:d7:00:16:3f:cb:c4:23:32:20:26:
87:f6:73:bc:a6:ed:dd:5b:be:9d:49:14:6c:03:cf:ea:f1:f3:
03:7b:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:41 2026 by rpki-client