Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A735366A4411F184B22617CF1D38B0.roa
File: 91A735366A4411F184B22617CF1D38B0.roa (raw, json)
Hash identifier: /zIbUcEvPgqpegp355oPBVvGZKMmm/KcVZgIOy9dobs=
Subject key identifier: 93:A4:B3:86:AB:D7:4A:DD:F1:4E:25:1D:E4:CC:20:7F:CA:95:0E:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A735366A4411F184B22617CF1D38B0.roa
Signing time: Wed 17 Jun 2026 12:03:36 +0000
ROA not before: Wed 17 Jun 2026 12:03:31 +0000
ROA not after: Fri 24 Jul 2026 12:03:31 +0000
asID: 395886
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114346 (0x1beaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 12:03:31 2026 GMT
Not After : Jul 24 12:03:31 2026 GMT
Subject: CN=6a328d18-0b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:37:33:06:9c:54:a8:ba:f4:7e:5e:d0:d5:
cb:f7:c9:d3:90:07:8f:9e:8e:9c:0b:c8:23:31:4c:
f9:74:22:24:3c:cb:15:ae:7a:92:e1:fe:53:3e:20:
99:23:69:9f:9d:0e:06:a5:ea:be:05:7b:d4:4f:ca:
ae:73:3a:23:9e:af:f0:4e:a1:83:c1:6a:3f:36:b2:
9a:94:6c:1b:c9:2a:e3:22:56:9f:64:39:cb:e0:a6:
4a:ef:8f:ea:b4:77:bb:a7:bd:e4:09:b8:03:ce:a3:
6d:72:19:17:33:cf:14:82:f9:13:6b:57:d1:97:0f:
02:ad:76:a8:97:1a:3a:0d:4c:94:d3:e5:4d:79:aa:
4c:83:45:15:a2:a9:b6:c3:ce:8f:d5:05:a5:33:7a:
cf:d3:bf:a8:23:6c:ca:7b:8b:ce:90:55:39:23:9b:
42:0d:d4:bc:e9:7e:6f:e6:11:5d:8a:9f:9a:a7:14:
cc:a3:d8:4e:15:4f:29:b1:f6:44:f0:7d:14:f9:bb:
d3:43:54:e3:3a:70:de:eb:f1:d7:b9:75:92:bb:b4:
e9:92:b3:54:d5:7c:80:f8:1e:f2:48:e5:cf:00:a7:
9f:82:da:f2:89:37:e2:10:cd:db:13:28:97:7a:2b:
db:4d:c3:ee:82:ee:5a:70:f2:d0:31:97:7c:a2:6e:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A4:B3:86:AB:D7:4A:DD:F1:4E:25:1D:E4:CC:20:7F:CA:95:0E:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A735366A4411F184B22617CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.51.255
Signature Algorithm: sha256WithRSAEncryption
b4:ea:40:31:3d:77:74:ae:99:3b:38:12:a4:02:64:84:30:84:
f2:50:96:5c:7d:2e:50:bd:41:ed:41:8a:27:32:a7:48:89:9f:
bf:0c:f5:d0:bd:55:bb:cc:94:58:c0:12:f4:6f:6e:68:b0:c2:
32:2f:81:cf:8a:f0:7e:73:d8:2a:b8:7a:0a:e3:8d:3a:93:8e:
8f:96:89:c4:a1:40:ff:23:7b:5f:c0:c1:42:85:bc:df:a3:bf:
eb:bb:26:a6:b4:9c:c6:60:31:d3:43:67:c9:54:3e:63:48:bc:
d4:bb:36:cc:1f:c2:42:8c:d7:38:4e:4f:40:c9:9b:f2:7f:9e:
ec:a4:9e:08:00:d6:da:70:04:1a:bd:3e:66:55:4e:23:6f:ed:
41:49:19:79:ac:08:14:81:c4:92:d0:79:15:41:91:3e:d9:5a:
72:88:1c:99:c3:27:8f:0b:7b:77:19:58:ce:86:90:82:08:c8:
71:b8:7a:4d:7d:f9:b9:a2:83:b7:95:fa:20:22:d0:a1:93:9c:
45:a4:25:b7:31:03:1b:8a:8d:42:bf:e5:f0:f0:2b:5f:b2:27:
1a:00:47:ff:25:63:90:dd:e2:e0:32:f8:d0:cf:23:63:e9:b2:
f0:b7:9c:d0:01:97:e5:01:02:dd:3f:12:21:d0:b8:97:eb:1c:
2a:8f:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 20:01:58 2026 by rpki-client