Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86D9492E581911F1839707AECE1D38B0.roa
File: 86D9492E581911F1839707AECE1D38B0.roa (raw, json)
Hash identifier: v0d4Vp+W6n+TRjSR3AeurBoa7vAhkKSZwEArXQ41WUo=
Subject key identifier: 35:41:68:E6:C6:E5:6C:3D:CC:C4:A7:57:63:5E:EA:08:2F:8F:29:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B972
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86D9492E581911F1839707AECE1D38B0.roa
Signing time: Mon 25 May 2026 09:10:09 +0000
ROA not before: Mon 25 May 2026 09:10:03 +0000
ROA not after: Fri 26 Feb 2027 09:10:03 +0000
asID: 41095
IP address blocks: 156.231.56.0/24 maxlen: 24
156.231.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113010 (0x1b972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 09:10:03 2026 GMT
Not After : Feb 26 09:10:03 2027 GMT
Subject: CN=6a1411f1-04f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:80:62:f0:6b:a5:25:72:40:f2:c0:16:fc:
1e:05:02:0d:3c:09:36:a8:0e:b8:bd:12:c0:bc:46:
5d:31:43:43:86:bb:56:38:7f:d2:3d:74:16:a6:00:
0c:bd:3e:bc:1a:dc:6e:16:51:5e:8c:d4:f6:f8:1f:
38:0f:00:40:6b:6d:60:58:d4:09:e8:0d:b2:30:ae:
d5:37:05:94:e3:9f:26:73:cb:c2:c9:dc:f0:5c:f9:
8a:7f:e3:ab:2d:d7:8f:a8:da:b1:bd:f6:d5:a5:2a:
3d:f9:f3:d2:73:2f:c3:48:d6:7e:a1:7b:84:d3:34:
4d:e4:43:79:98:f8:ff:32:71:62:46:c3:55:cc:94:
8a:fa:f5:7b:b3:00:e3:d4:67:da:03:42:9e:72:fc:
9e:da:df:dc:9d:e5:35:c9:e3:7a:96:33:d8:b6:6e:
d4:12:93:cd:43:fd:44:76:1a:01:38:22:cb:87:82:
fb:0d:fc:c4:c9:34:a7:80:e7:aa:19:6a:bf:06:ca:
31:8e:ae:f9:5b:a5:a3:53:25:1f:88:39:ef:5b:88:
2f:82:78:3d:a4:ca:f0:d0:5b:91:5f:34:2c:98:8c:
6d:da:27:5d:83:13:73:87:22:fb:51:66:45:71:87:
bb:1a:b8:04:ca:57:91:28:6c:d7:82:77:c4:43:41:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:68:E6:C6:E5:6C:3D:CC:C4:A7:57:63:5E:EA:08:2F:8F:29:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86D9492E581911F1839707AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.56.0/23
Signature Algorithm: sha256WithRSAEncryption
65:15:02:4c:66:88:80:c5:5c:88:3b:2a:6d:6a:fd:ba:56:c9:
ca:bf:16:30:db:01:5b:9c:41:18:c5:5c:d9:bf:2e:4e:6a:58:
72:5f:53:4d:62:42:23:b9:9e:72:0f:6c:09:97:6c:a8:25:83:
e3:d6:02:4d:e2:0b:55:2c:89:49:6b:28:35:5c:f2:da:05:b9:
03:8b:ce:9f:1f:42:8c:37:34:d3:6c:d4:e2:c4:d5:77:10:be:
45:c0:a0:2f:03:ca:78:f3:5d:85:ac:43:1c:3e:aa:4d:e2:37:
bc:f7:02:3d:a1:b9:dc:75:c3:25:1b:10:19:4e:57:e2:72:8f:
fb:39:e2:52:8b:fb:fb:89:09:56:c2:5e:d6:92:10:e4:6e:b4:
7f:24:20:55:54:a5:6d:3f:99:20:b5:c3:48:ab:08:ad:f4:e4:
48:e1:57:ef:2b:cc:30:16:7d:f2:a0:14:47:23:3c:0d:39:40:
0d:7f:d4:14:3d:bc:b1:49:a9:83:2b:ad:76:37:17:4c:64:f2:
c6:ca:f8:0d:2d:b5:08:64:83:8e:e4:20:10:6c:df:ae:ef:5b:
02:3d:9f:12:7b:48:30:4b:b2:30:6c:54:2c:5e:d0:e3:b8:29:
60:ac:3c:50:27:f0:e4:de:8b:73:42:53:8d:0c:e0:11:22:e9:
f1:37:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:21 2026 by rpki-client