Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70FD849254BF11F191B76BADCE1D38B0.roa
File: 70FD849254BF11F191B76BADCE1D38B0.roa (raw, json)
Hash identifier: VhsbwVOawtEKWI+tN0Sqfw+L6bw3cBLVF+2fT1RrM9E=
Subject key identifier: 28:18:BF:5F:2E:60:C1:5E:9E:66:9F:8C:BA:51:EA:80:A6:A8:80:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B698
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70FD849254BF11F191B76BADCE1D38B0.roa
Signing time: Thu 21 May 2026 02:47:44 +0000
ROA not before: Thu 21 May 2026 02:47:39 +0000
ROA not after: Fri 10 Jul 2026 02:47:39 +0000
asID: 32043
IP address blocks: 156.230.159.0/24 maxlen: 24
156.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112280 (0x1b698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 02:47:39 2026 GMT
Not After : Jul 10 02:47:39 2026 GMT
Subject: CN=6a0e7250-7bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:de:8c:92:f9:84:ab:bd:c0:31:d1:6a:c2:
72:b2:f3:9c:eb:a1:76:3e:b1:d5:c9:85:8d:22:2f:
91:a1:bf:b4:0d:1f:7c:e3:8f:90:37:ec:35:97:81:
1f:1f:85:3b:f9:c4:ff:c4:08:be:09:22:f0:b4:8a:
08:16:e0:11:7f:a8:c2:b2:64:81:7d:e3:63:c3:68:
03:4d:1e:a3:98:2b:84:df:a7:2c:8c:91:35:09:cc:
e7:d9:bd:f2:42:7b:79:b8:08:ed:bd:70:03:57:14:
3a:cf:c3:db:b4:59:1b:2e:bb:47:b1:6a:fa:9f:b9:
13:b0:f6:88:da:92:eb:05:42:5c:62:d8:f3:38:61:
37:e6:ae:b5:9d:4c:13:91:f4:ad:c2:0c:dd:be:7d:
13:69:49:6e:6d:fc:5a:72:35:88:47:d9:b7:7e:47:
5f:16:de:e5:e8:40:3e:dc:b3:d1:4b:74:c9:08:94:
60:78:31:c1:c5:cf:21:ad:21:f2:39:63:c8:65:a7:
ae:da:61:c3:6a:50:89:1e:ec:fc:7a:ac:af:5c:12:
e5:47:af:39:88:af:a2:d5:76:4d:94:19:ac:4f:3e:
aa:0a:78:ab:1c:7d:85:ee:ca:81:fb:c6:53:b8:02:
df:d7:3f:ee:34:12:a9:1e:3f:14:66:42:0a:f6:55:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:BF:5F:2E:60:C1:5E:9E:66:9F:8C:BA:51:EA:80:A6:A8:80:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70FD849254BF11F191B76BADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.159.0/24
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:14:7f:25:42:2b:14:ed:a3:ec:86:bd:2b:f3:7b:7a:2c:2d:
f8:be:1b:c4:0d:d2:4c:8d:76:3e:8b:21:6e:d5:bf:d0:c1:b9:
1e:2f:72:04:a5:81:b8:8a:21:32:32:78:f7:1a:31:a7:ed:c3:
68:22:7c:32:03:c7:b0:30:f5:39:3c:97:db:e2:56:ea:46:3b:
96:5a:fa:5b:e0:46:9e:69:6c:03:53:db:f2:b1:d8:64:85:da:
2b:3c:90:77:57:0b:ef:f1:5f:75:52:92:d0:e8:be:1d:73:b6:
9f:3a:be:8a:fe:ef:fb:38:08:d1:74:58:ea:cb:36:ce:28:64:
1e:49:f4:04:27:c4:af:5a:ba:b3:65:7c:e3:24:38:dd:89:cf:
4e:35:26:44:8e:1e:cb:8f:1e:50:0f:ce:c5:1b:80:74:3b:03:
2b:41:95:52:15:c3:79:1a:f4:5a:b1:41:27:6c:ed:7a:01:81:
c1:1f:5b:f0:0d:78:ca:2f:fb:20:ec:71:7b:c1:6f:e8:13:b4:
5e:6d:13:37:88:d1:30:ac:86:79:c6:0e:34:dc:82:04:ab:d7:
83:0e:4e:84:ab:06:6f:ea:4f:83:af:33:a1:a9:75:df:b1:dc:
3c:2f:c6:33:cd:16:b0:a9:4f:22:28:69:4f:db:d3:63:a9:13:
c0:7d:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:08 2026 by rpki-client