Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F3476069BE11F1AB9405DDCE1D38B0.roa
File: 80F3476069BE11F1AB9405DDCE1D38B0.roa (raw, json)
Hash identifier: XLjbLWKdAfWyrVrphsit6rx+T3yEcIk55nO5JKASU2E=
Subject key identifier: 09:38:3D:51:2F:08:B1:87:18:3C:60:2F:74:79:3B:CA:2F:D9:B7:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F3476069BE11F1AB9405DDCE1D38B0.roa
Signing time: Tue 16 Jun 2026 20:03:56 +0000
ROA not before: Tue 16 Jun 2026 20:03:50 +0000
ROA not after: Tue 28 Jul 2026 20:03:50 +0000
asID: 63023
IP address blocks: 156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Jun 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114287 (0x1be6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 20:03:50 2026 GMT
Not After : Jul 28 20:03:50 2026 GMT
Subject: CN=6a31ac2b-dc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:25:4d:c7:25:ad:20:79:39:29:64:f5:9f:
63:26:10:7f:35:c7:57:12:6e:00:01:54:ac:bb:d4:
9d:5b:0f:89:fd:91:d4:31:8b:fa:4a:d9:1f:7c:54:
ed:08:ea:d6:c9:31:f7:ce:84:f0:e8:e2:62:7e:96:
c8:32:c6:42:3a:c1:44:dd:83:9c:09:73:95:34:fa:
e5:13:b5:06:e7:f6:b8:dd:2e:61:73:3e:f5:5e:ce:
7c:02:58:35:d4:81:ff:c9:f1:74:e8:ae:a5:38:a4:
26:9f:0c:fb:b6:06:bf:f1:5c:7f:5b:4e:33:0d:ed:
68:75:ae:70:01:77:49:3e:ae:a4:37:89:81:9f:f0:
c0:fb:fa:3c:6b:1e:31:ef:5d:07:be:dd:bd:87:38:
01:67:ed:11:49:57:e3:cf:31:a1:e9:77:19:60:84:
e1:c2:ed:63:dd:59:67:9c:fb:41:3a:bc:f3:1a:6e:
3e:83:7d:0b:3e:4c:1c:e5:c4:d8:44:1f:d2:e8:eb:
90:5b:62:90:82:a0:b4:98:8f:72:dd:30:17:f8:db:
26:29:9a:76:15:a8:16:52:86:7a:6e:e1:ad:5c:f5:
d2:3c:3d:c4:d1:2c:b1:32:97:c0:c2:0c:68:f2:a0:
e4:bf:15:b3:af:ee:30:d7:ca:82:15:9e:4b:4b:38:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:3D:51:2F:08:B1:87:18:3C:60:2F:74:79:3B:CA:2F:D9:B7:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F3476069BE11F1AB9405DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ac:61:05:80:07:75:a6:b6:53:19:d9:db:8d:68:f0:8f:c5:
50:b2:e6:8f:30:33:3d:c9:4f:68:51:05:6b:fc:35:5f:5e:dd:
c4:11:9c:ed:c0:48:1b:f9:de:0f:f4:8e:c1:a0:35:e4:3f:04:
51:dc:cd:63:1d:3d:ce:b7:8d:a6:2a:81:ab:0b:01:e6:4c:38:
c8:89:82:41:ab:86:9e:6b:54:a7:e7:5e:28:49:b7:30:bd:e4:
a6:f6:57:b2:b8:95:cd:54:5d:fa:51:e6:2d:52:c5:2d:89:e8:
4c:69:ba:f9:4f:12:4e:65:8d:76:43:70:61:3b:61:04:5f:91:
a9:a6:f6:ef:b4:dc:59:c3:27:57:28:7e:fb:1b:08:07:3b:ed:
7f:2b:3f:9f:46:30:07:c2:0a:cc:6f:c5:90:d0:c8:27:82:66:
23:87:24:87:0b:ab:32:10:af:71:53:d9:7b:0c:63:76:2e:71:
f8:92:55:02:39:b3:88:b4:63:7f:24:65:51:12:5f:37:dd:52:
10:74:96:c7:b3:23:72:34:35:7b:12:97:57:f9:d0:f6:0a:39:
b3:4b:b0:98:42:6b:c8:57:81:91:b2:45:57:b6:22:a4:04:f3:
c7:59:56:8a:de:15:56:ae:f4:c6:74:46:ff:77:b3:c9:97:42:
77:6b:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:19:05 2026 by rpki-client