Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72E70AC2543211F18B264EDCCE1D38B0.roa
File: 72E70AC2543211F18B264EDCCE1D38B0.roa (raw, json)
Hash identifier: S4MpilKcY93pj+Y52fYSrK4A59IeU1u/awMFMoAWvzc=
Subject key identifier: 86:F9:5C:0E:18:3A:AA:CB:08:B6:88:8F:86:71:F9:57:9F:2B:EC:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B620
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72E70AC2543211F18B264EDCCE1D38B0.roa
Signing time: Wed 20 May 2026 09:58:28 +0000
ROA not before: Wed 20 May 2026 09:58:24 +0000
ROA not after: Wed 19 Aug 2026 09:58:24 +0000
asID: 152849
IP address blocks: 156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112160 (0x1b620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 09:58:24 2026 GMT
Not After : Aug 19 09:58:24 2026 GMT
Subject: CN=6a0d85c4-2ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:8b:a7:24:05:a7:9e:5f:61:95:d3:19:8d:
d9:e6:12:45:fa:eb:8c:e1:f8:65:11:45:45:83:40:
84:6b:f2:de:40:fa:d4:0f:c8:b7:5f:d0:12:d1:e8:
ea:33:16:81:b6:2d:dd:36:52:c1:ad:d1:80:74:54:
e1:10:8f:3b:e2:c9:58:fa:42:2d:9b:3f:8c:ce:83:
0b:45:41:1b:40:4f:2a:51:6c:8a:98:95:1f:50:ed:
f6:d0:05:bf:d2:0b:52:51:1c:dc:71:83:ca:45:92:
1e:42:d3:74:4a:a4:08:80:76:75:d3:f2:7c:b6:65:
49:98:0b:21:bc:89:9c:1c:b4:65:bd:d6:6e:f5:be:
b4:e3:8e:ec:bb:97:36:ec:ab:96:07:89:77:ab:da:
bc:d0:09:67:46:21:33:8b:7c:da:31:aa:9e:9e:1e:
50:b8:aa:c3:10:77:76:48:96:e8:d4:2e:25:ad:3c:
d9:09:81:99:5f:ae:89:4f:f6:c0:fe:d3:3a:b6:57:
6d:8c:ef:fc:60:9b:a8:ac:37:3d:7b:28:3b:86:ee:
e5:d2:c0:d2:88:eb:63:90:c0:53:2f:3b:7a:a0:6d:
e5:9a:ba:57:7f:fc:39:d7:60:22:81:79:fe:bf:7b:
b5:1e:45:1e:44:d5:66:4b:06:6b:56:cf:60:b3:67:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:5C:0E:18:3A:AA:CB:08:B6:88:8F:86:71:F9:57:9F:2B:EC:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72E70AC2543211F18B264EDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:d1:16:d7:9b:6f:83:4e:95:90:3a:6f:d9:44:0a:72:4b:d8:
34:1c:3f:5f:ff:d4:5f:6c:f5:c2:8a:1a:b6:e6:ba:03:72:8d:
e8:e1:9d:2f:16:38:2d:4e:df:ae:39:57:16:94:d0:f1:95:28:
40:1c:2e:7d:ff:9a:7b:16:b6:9b:5c:b3:f8:c9:a8:f5:1f:0f:
70:a8:d3:b3:d8:ca:c7:85:3c:d6:26:b4:83:41:af:67:a3:15:
3f:97:da:17:c9:04:45:72:73:e5:1d:37:8e:f1:8f:2e:e8:13:
2c:46:0b:27:e3:3c:d7:e3:a4:3b:ef:e8:45:c6:b2:e6:31:18:
5a:dd:5e:af:ad:0b:ee:df:2c:b7:be:cc:c6:1f:72:d5:22:a8:
fb:52:ff:fe:90:d3:94:e8:8a:16:32:bf:67:e2:a0:aa:07:c2:
99:94:3a:d3:d8:2e:58:a0:63:f5:96:9b:7e:58:b4:9f:11:86:
42:51:d6:fe:16:0d:59:eb:37:80:86:69:00:af:8e:f6:cf:a1:
7f:05:74:b5:de:6f:ba:d0:d9:7a:04:6d:52:8f:39:9a:a1:3e:
00:94:ed:58:e6:fb:ae:78:65:8b:fc:e0:e7:03:33:8b:43:1e:
38:cf:f7:69:97:11:74:58:b6:c0:9c:79:27:15:fe:01:24:51:
0f:49:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:05 2026 by rpki-client