Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9480EA7E507011F19DDBCCFBCE1D38B0.roa
File: 9480EA7E507011F19DDBCCFBCE1D38B0.roa (raw, json)
Hash identifier: zR12o7J79mbAB09vXdKcEUGhI/r7tAwyBaUSNelZw+M=
Subject key identifier: 9D:EA:B7:35:5E:AF:38:A3:A4:B5:DB:1F:40:AA:34:34:81:6E:ED:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9480EA7E507011F19DDBCCFBCE1D38B0.roa
Signing time: Fri 15 May 2026 15:13:09 +0000
ROA not before: Fri 15 May 2026 15:13:04 +0000
ROA not after: Mon 22 Jun 2026 15:13:04 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111806 (0x1b4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 15:13:04 2026 GMT
Not After : Jun 22 15:13:04 2026 GMT
Subject: CN=6a073804-89d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:38:aa:64:07:9a:b6:66:47:6a:7c:8e:26:
3b:2e:3e:e5:c7:de:4c:da:92:07:0d:a7:e2:a3:d3:
c3:64:cb:e6:7c:f9:b2:8e:80:d8:52:33:bc:4b:f6:
76:d9:51:8f:75:57:39:8b:76:b0:0a:71:c0:6d:f8:
60:d6:10:c0:26:70:b5:a6:6b:cd:cc:2b:ae:03:4f:
c7:e5:3b:39:a0:e9:22:8d:3f:e2:61:bd:43:bb:fc:
ab:4a:2e:41:70:cf:cc:19:4f:bf:ca:12:47:b4:19:
1d:90:bc:f8:ab:b5:aa:b1:5c:00:32:a0:de:99:0b:
dc:8d:6b:bf:3d:d3:b7:91:1f:45:43:2e:91:ff:47:
cb:55:98:e6:f0:01:e5:36:14:e1:00:35:8e:f7:7d:
7b:b6:77:9a:61:3d:ca:e7:1f:a1:a9:20:f1:7c:54:
21:d2:1d:a1:27:35:c6:2a:c0:fb:7e:51:f8:47:e5:
92:42:02:e5:10:ec:14:b1:d6:6d:f1:b7:df:79:ea:
03:1d:f4:ba:f8:bc:95:dd:47:35:c0:82:09:a9:de:
40:f7:d0:e3:75:9e:11:f7:d1:71:fa:77:79:c7:29:
d1:9b:5b:dc:95:ef:e8:cc:9e:e0:29:89:d2:6d:cd:
bb:52:0f:1e:d2:fc:e9:f9:85:6a:dc:e8:82:27:9b:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:B7:35:5E:AF:38:A3:A4:B5:DB:1F:40:AA:34:34:81:6E:ED:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9480EA7E507011F19DDBCCFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:52:ad:9b:9b:14:b5:b0:c4:2d:34:2f:66:0e:8f:d4:8c:44:
56:80:54:26:74:7c:81:48:eb:b3:b0:1e:be:e2:63:94:bf:28:
c5:e7:92:e1:8f:53:ae:54:3f:e0:d4:05:7e:93:b7:ff:2f:7c:
3c:0e:12:69:44:26:ab:2c:a0:a8:f2:53:66:b1:59:fd:5f:f9:
79:e4:b7:0a:21:c8:16:f2:aa:f2:2a:f6:32:eb:f5:ae:c8:7f:
29:8b:7d:0b:c5:93:12:78:79:b4:f7:40:4a:4a:e6:f8:7d:26:
cd:84:e3:df:bf:63:51:06:7c:16:22:b8:a0:a1:f1:d4:06:ab:
17:1a:76:a5:76:e7:78:25:18:ab:99:80:4c:2d:5e:46:56:b0:
57:ce:09:0b:28:bb:d7:bc:48:26:de:35:ac:da:a5:ca:13:0e:
ec:a8:34:db:2b:f9:1a:bc:2b:91:94:33:85:85:fb:1c:98:b2:
51:87:e3:76:e0:65:4e:da:db:d1:2c:78:40:63:05:e7:66:10:
37:6b:5a:20:77:58:40:72:2a:7a:03:e0:12:9f:c4:1d:1b:fd:
55:2b:6c:4d:f2:02:b3:93:49:5f:ff:95:fd:89:8d:d4:fa:cb:
d8:41:e1:af:d9:be:82:84:ff:fc:e1:cd:dd:d0:0c:5e:ba:a5:
f2:b2:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:23 2026 by rpki-client