Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7810076652CE11F1BF601BDECE1D38B0.roa
File: 7810076652CE11F1BF601BDECE1D38B0.roa (raw, json)
Hash identifier: L4k7j0uBsEhuQGJepqJt8Nf8NSFEVbp5/D9+MTjniPQ=
Subject key identifier: 37:D5:19:AD:06:13:6B:A9:45:B3:F7:AF:5F:3A:44:E0:CE:F0:9F:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B586
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7810076652CE11F1BF601BDECE1D38B0.roa
Signing time: Mon 18 May 2026 15:30:16 +0000
ROA not before: Mon 18 May 2026 15:30:11 +0000
ROA not after: Tue 16 Jun 2026 15:30:11 +0000
asID: 137443
IP address blocks: 156.255.2.0/23 maxlen: 24
156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112006 (0x1b586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 18 15:30:11 2026 GMT
Not After : Jun 16 15:30:11 2026 GMT
Subject: CN=6a0b3088-5e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:c5:21:b7:3b:5e:6d:73:5d:e5:ff:c0:76:
09:fe:68:26:13:9c:5c:23:43:bb:17:0d:73:c9:de:
df:84:5b:ac:83:24:9e:f9:a8:88:f4:a9:84:03:18:
fc:b3:79:de:01:41:5c:a9:25:de:3d:34:4f:6e:88:
e8:14:cf:e4:ea:bb:ff:1c:d6:65:d6:23:7b:9d:4c:
aa:4b:78:7b:bf:7c:d5:da:0e:e4:be:15:ff:03:95:
c4:0d:ce:e1:35:34:a8:f6:de:67:aa:e8:f6:3a:22:
22:99:b8:a0:ad:43:90:78:a0:63:9f:69:8f:d1:f5:
d1:8a:fd:24:45:5a:88:be:a2:ff:28:8a:78:74:3e:
02:87:21:aa:8c:fb:df:ea:84:67:1e:aa:70:0d:97:
bf:1d:b0:52:93:e7:29:63:62:21:c8:b6:7c:3b:00:
1f:1b:a6:a0:78:27:d7:da:a1:e7:b4:99:7c:fd:44:
d8:54:48:13:98:31:eb:42:63:9d:15:2d:1b:d5:3a:
ef:d5:d9:57:ea:11:5d:0e:3b:f3:c0:30:08:34:de:
40:ad:86:2e:c7:59:e0:e5:fb:36:c0:33:7b:19:6e:
10:67:f9:96:25:3c:d5:98:f3:cf:60:fa:4d:ec:31:
39:8d:f4:c9:dd:5b:a9:8e:50:73:92:17:43:09:f9:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D5:19:AD:06:13:6B:A9:45:B3:F7:AF:5F:3A:44:E0:CE:F0:9F:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7810076652CE11F1BF601BDECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
61:2f:37:b2:c3:17:58:65:17:f1:af:8a:0c:3a:af:3f:34:1e:
8d:aa:d1:a4:df:bf:e7:19:b6:a1:9c:47:fb:f2:dd:71:52:b3:
da:39:44:ae:c8:4f:9a:05:7a:bc:e3:b8:19:4f:ba:a7:c9:28:
67:ad:96:be:71:5a:0b:de:38:ef:cd:59:1b:26:25:9d:7e:da:
42:fd:42:1e:5b:02:9e:e6:0b:60:f7:d3:0e:de:4d:46:70:97:
13:e6:7c:f0:f0:42:68:8d:ae:e4:df:c3:5d:26:00:c9:ca:d3:
d0:96:da:cb:0e:16:ec:67:a5:5d:7e:53:f8:93:c8:d5:e1:e1:
14:25:9d:cf:6e:1a:75:e1:fc:89:e2:c0:6c:2b:d0:ac:e3:79:
72:2d:45:17:39:af:dd:47:53:c9:fd:9f:31:05:61:6a:34:2b:
5b:83:3c:6b:3a:8b:bf:d9:23:56:16:81:c7:25:68:cc:97:70:
15:2b:b2:95:4c:16:79:3e:30:01:fb:44:6e:0e:97:32:52:bf:
84:5d:33:75:74:bc:9c:86:cf:e7:fb:39:3c:10:e2:d5:9f:67:
5f:57:82:aa:51:8b:bf:76:ff:83:68:b5:56:4d:da:52:7a:df:
cb:14:eb:45:88:bc:ae:04:c8:dc:c7:14:ee:01:2e:86:f1:fb:
f3:6b:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:32 2026 by rpki-client