Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/796CC7045F1F11F1AFEF61DCCE1D38B0.roa
File: 796CC7045F1F11F1AFEF61DCCE1D38B0.roa (raw, json)
Hash identifier: i0G9ML4RudeFFm3gyQzSLm/7uAb+lGCITMlKDs93CMA=
Subject key identifier: 8E:FA:6F:A4:82:3B:ED:C0:6F:C8:04:F6:CA:B0:14:FB:B5:7D:EF:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/796CC7045F1F11F1AFEF61DCCE1D38B0.roa
Signing time: Wed 03 Jun 2026 07:40:21 +0000
ROA not before: Wed 03 Jun 2026 07:40:17 +0000
ROA not after: Thu 09 Jul 2026 07:40:17 +0000
asID: 19318
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 08:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113535 (0x1bb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 07:40:17 2026 GMT
Not After : Jul 9 07:40:17 2026 GMT
Subject: CN=6a1fda65-37e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:da:74:51:53:c9:7d:00:f4:b7:19:85:51:
5e:80:6c:15:35:70:8e:39:7a:cc:91:fe:0a:6a:b0:
d4:15:0d:2e:ab:05:6b:6b:8d:9f:a6:8d:db:be:6b:
09:b1:66:48:02:04:ae:3f:66:cf:f6:51:fe:27:9b:
8a:e3:98:63:d2:40:a9:e6:dc:c5:65:e9:01:a4:6f:
ad:14:e7:bc:b6:52:85:1a:92:89:bd:6e:07:44:7c:
24:6d:f2:30:69:24:bd:e8:b0:fd:b8:e9:06:0f:05:
f8:47:2b:0c:18:f8:54:ce:f8:10:73:6b:c5:7a:88:
ef:6a:e9:d8:74:ac:fc:2c:82:3d:28:b4:2b:d9:e6:
12:1a:02:36:f8:aa:d3:b2:a2:4e:68:f1:2c:19:38:
ac:2f:24:de:d3:2c:19:1f:ae:f4:03:83:62:06:86:
46:ea:57:c6:a5:11:77:76:cf:21:f5:a5:27:69:cd:
d2:74:41:36:5e:3e:d2:a1:09:a3:29:7d:d4:3a:23:
42:4d:a8:37:76:af:44:f5:4a:25:47:dd:db:e5:f9:
95:20:38:11:dd:15:9b:a8:5d:12:46:45:2a:0e:08:
38:5f:91:1a:ca:e8:33:4a:15:dd:b9:37:e1:05:48:
ad:96:2d:20:6f:b0:2b:24:ab:b0:7e:d6:de:d9:83:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:6F:A4:82:3B:ED:C0:6F:C8:04:F6:CA:B0:14:FB:B5:7D:EF:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/796CC7045F1F11F1AFEF61DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:81:e0:d1:38:ac:6a:14:f0:82:b3:eb:61:e6:49:bb:1a:7b:
06:e2:f2:16:1e:35:7b:05:82:be:58:2e:63:a1:88:ea:07:97:
2f:fd:e4:6d:19:0c:1d:74:6d:83:c5:36:cf:23:19:c2:98:c0:
b3:f4:49:df:26:44:a9:e1:f5:56:78:3f:9c:84:c2:83:4c:e5:
99:0b:3f:fe:a6:4b:23:d5:1f:9b:df:a7:7a:d5:f7:94:cc:51:
88:77:79:78:86:b6:ac:33:60:6a:0a:45:d0:7d:e8:76:58:80:
c4:3c:5d:82:83:5c:b1:3b:62:e7:02:ec:58:a0:da:60:b8:46:
fc:ac:ca:09:0a:c6:5b:3d:75:62:fd:b8:b1:b0:47:e3:6e:1e:
cb:69:60:b6:76:ff:d3:ac:38:97:a5:35:6e:f8:a9:94:7a:c2:
5c:b9:fe:f2:65:cb:ce:df:1e:42:82:13:1d:b9:85:73:a7:39:
8c:ee:d6:a0:21:55:05:7d:e1:62:49:71:dc:6d:a8:92:14:76:
c7:26:b1:ec:1e:b0:5b:c9:1f:47:be:db:7a:5a:66:a2:8a:ea:
91:9f:9c:18:a0:5d:5c:5e:64:d1:aa:d2:71:b6:a2:bb:94:c9:
cc:0f:be:78:7c:f6:7a:16:6e:31:30:84:38:e6:37:ce:b0:88:
70:6b:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:18 2026 by rpki-client