Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/855D0822515E11F18D20D31CCF1D38B0.roa
File: 855D0822515E11F18D20D31CCF1D38B0.roa (raw, json)
Hash identifier: VRJLDfqkHx798G7DQts79p+CJHcUqWXWufPFohRxOhw=
Subject key identifier: 66:5B:2A:68:87:37:82:65:22:7D:F0:43:71:AF:10:5D:68:6A:87:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B558
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/855D0822515E11F18D20D31CCF1D38B0.roa
Signing time: Sat 16 May 2026 19:36:23 +0000
ROA not before: Sat 16 May 2026 19:36:19 +0000
ROA not after: Sat 20 Jun 2026 19:36:19 +0000
asID: 135391
IP address blocks: 156.254.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 May 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111960 (0x1b558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 19:36:19 2026 GMT
Not After : Jun 20 19:36:19 2026 GMT
Subject: CN=6a08c737-a978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:60:da:a7:7b:8a:ba:db:d4:2d:49:20:ab:
cb:12:08:d4:d9:47:21:45:da:de:ca:b3:82:ac:41:
60:43:0b:91:9d:28:f2:99:1a:bc:7b:8b:ad:0d:ed:
d0:db:3f:b7:f8:eb:25:e4:09:88:13:d7:b8:d0:ce:
d3:03:50:19:6c:7b:55:72:e3:2a:0d:58:0f:f3:3e:
e0:b4:44:4d:e0:00:70:a1:4c:76:b7:e9:d6:1c:85:
8f:85:3b:bc:0f:bf:07:7a:cd:9d:50:0a:b1:87:5f:
09:8c:ea:f1:90:65:05:66:c5:bf:e8:eb:b5:3e:58:
bb:b6:38:83:4d:58:9a:d2:b0:79:0b:7b:65:98:77:
55:ce:3e:ae:f2:28:db:39:20:4f:45:63:86:a7:e5:
98:3e:5f:da:75:0b:68:9d:a7:cc:e2:de:b5:cf:f4:
e0:8c:61:f4:94:9f:45:e5:ee:60:e3:e5:b0:4b:ad:
9e:59:f9:37:48:4b:8c:c4:30:50:7f:29:d6:c1:a6:
bd:5b:1f:e6:f5:1c:b7:e2:d7:a1:75:98:d3:76:ba:
d6:f9:dd:1c:fc:77:e0:3a:31:55:32:6b:32:68:5f:
9b:16:59:7d:cc:5d:27:a5:51:b4:c5:de:e5:b2:d8:
54:c8:c9:04:8b:ae:d8:3a:75:54:f3:73:59:17:04:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:2A:68:87:37:82:65:22:7D:F0:43:71:AF:10:5D:68:6A:87:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/855D0822515E11F18D20D31CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f4:5e:bd:2b:4e:23:47:b5:ba:7f:5f:47:10:65:56:be:32:
83:81:4e:63:44:10:c4:05:26:5c:3c:c2:21:e0:80:56:1b:52:
2a:18:7c:83:d4:d2:50:36:0e:c4:50:f3:43:60:cb:fb:bd:84:
85:b9:2a:d3:69:5b:62:6e:9e:19:ba:61:a4:fa:1b:f9:9e:e9:
e6:bf:41:0d:1e:be:87:1e:5c:b7:2e:5f:51:81:7e:c8:21:4a:
10:aa:54:52:bc:bf:0e:46:e2:77:a3:9a:e2:74:60:24:ad:0e:
4b:68:e7:70:61:91:e6:5d:aa:80:b9:17:b2:c4:a2:a0:51:60:
82:e5:98:df:99:9c:83:ae:4f:b2:bd:3c:bc:eb:82:f3:d8:50:
75:9a:41:40:d4:fe:b2:a6:0e:b9:32:33:3c:88:fc:a2:14:63:
2b:3b:cd:58:3d:11:3d:76:8d:fc:b4:c5:1a:8b:9b:30:3f:01:
a2:77:d1:45:6d:75:a8:ca:c2:c9:65:b5:5d:15:00:11:c0:cf:
69:6c:e2:20:62:89:b7:f4:e4:09:1d:71:24:92:20:fc:f9:76:
cc:93:d8:31:a5:1d:93:56:c3:85:e9:cc:4d:44:ac:0e:67:c2:
d3:85:97:a8:af:dc:31:bc:f6:49:c0:ab:d5:67:20:f4:78:95:
d3:bf:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:04:36 2026 by rpki-client