Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/877BC5CC551811F1B95547D7CE1D38B0.roa
File: 877BC5CC551811F1B95547D7CE1D38B0.roa (raw, json)
Hash identifier: D9Tuv/N/J043hOlwaseesdoC1ipbU7a7geUPxUaK4Fc=
Subject key identifier: C0:03:18:07:7F:3E:DF:55:41:E4:96:0E:47:0B:3B:9B:A1:C2:B4:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B70B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/877BC5CC551811F1B95547D7CE1D38B0.roa
Signing time: Thu 21 May 2026 13:25:27 +0000
ROA not before: Thu 21 May 2026 13:25:22 +0000
ROA not after: Wed 19 Aug 2026 13:25:22 +0000
asID: 40065
IP address blocks: 156.224.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112395 (0x1b70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 13:25:22 2026 GMT
Not After : Aug 19 13:25:22 2026 GMT
Subject: CN=6a0f07c7-c640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:ee:66:49:c9:2c:e4:51:2c:fa:48:43:33:
18:6c:91:9a:58:83:65:36:af:4c:bf:e4:6d:34:00:
28:0f:3f:85:72:d9:ed:23:7e:92:dc:0a:23:85:fa:
fe:d3:9d:fa:cd:4b:97:39:b5:5e:24:e5:27:de:3b:
16:6f:e6:e8:fe:54:e5:5c:b5:a1:d8:00:1f:14:62:
a0:44:6b:6d:bd:1a:7e:7d:87:79:81:72:ab:79:c3:
d2:80:b5:b1:a4:21:97:81:de:07:4e:60:48:0c:d9:
44:5b:73:30:aa:16:7d:82:d3:06:28:21:6a:09:98:
fa:fb:a4:20:e7:e9:3a:17:8d:c2:88:a9:cc:db:9d:
af:59:1a:26:bb:7e:34:7c:46:1c:2d:67:5b:23:4b:
7a:55:9b:08:99:b3:2c:09:0b:7d:ce:75:53:80:44:
f0:07:7a:a1:72:94:57:f0:11:b3:2a:f6:7f:b3:68:
7d:96:fb:2b:4c:63:1c:0d:08:14:b6:40:e8:67:c2:
47:94:a2:48:1c:93:50:0e:0b:a9:7e:35:bb:a1:40:
18:3d:dc:2a:d8:0a:19:67:fa:86:00:77:32:b2:34:
2c:09:e4:51:b2:cb:d4:7c:66:83:40:2f:11:82:8f:
34:73:b0:08:7a:bf:04:9f:47:67:ce:a3:ac:1e:39:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:03:18:07:7F:3E:DF:55:41:E4:96:0E:47:0B:3B:9B:A1:C2:B4:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/877BC5CC551811F1B95547D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:1d:78:03:05:42:bb:cc:5c:51:f1:05:75:85:80:8c:a6:cd:
56:71:0d:ef:ee:f3:c6:5e:24:1d:dc:50:0c:ee:91:de:f2:15:
b2:8a:8c:6a:74:56:9f:c2:c8:2b:00:a9:03:65:da:79:d8:14:
6b:c0:f6:50:eb:78:18:5a:12:8a:64:ed:d7:7f:46:4f:74:3b:
16:c5:db:37:c2:27:d4:4e:30:c2:d3:9b:a0:de:f2:be:0f:ad:
09:e6:82:17:f5:64:d6:03:ef:b3:28:ab:f1:c1:00:32:ad:2c:
3b:e7:f9:e0:f6:08:60:e4:49:a6:99:16:03:23:14:55:f8:a7:
49:e6:9f:c3:e5:76:e8:c6:07:bc:16:73:a5:02:70:9a:8b:84:
f2:f7:43:4a:6a:d7:2a:f7:d6:85:d1:4d:95:92:c7:3e:cd:46:
b2:00:ce:4f:46:be:07:7a:9f:8c:cc:36:35:ab:06:7e:11:ee:
21:a4:48:cf:c5:9f:90:cb:7c:b1:da:9c:ff:03:03:07:3f:14:
32:83:a6:bc:9b:6e:8d:33:d1:6f:1f:c6:6a:04:e8:57:3b:54:
3b:34:f6:9c:69:9b:3d:a6:67:97:80:b1:d2:3e:11:12:b7:2e:
a0:79:43:05:12:7d:3e:d5:ff:c5:b3:d1:67:40:8a:d8:ea:01:
e1:32:b1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:30 2026 by rpki-client