Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95BE01BC506911F1A23F20D3CE1D38B0.roa
File: 95BE01BC506911F1A23F20D3CE1D38B0.roa (raw, json)
Hash identifier: uw4tk4ycBSQ207495Hv0Ec/u0d5C2LmMFWWDZKvh3AI=
Subject key identifier: 14:E5:14:AE:48:00:AC:45:32:9C:FE:2C:73:D6:6F:7F:84:83:A8:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95BE01BC506911F1A23F20D3CE1D38B0.roa
Signing time: Fri 15 May 2026 14:23:04 +0000
ROA not before: Fri 15 May 2026 14:22:59 +0000
ROA not after: Sat 13 Jun 2026 14:22:59 +0000
asID: 17497
IP address blocks: 156.245.180.0/24 maxlen: 24
156.245.181.0/24 maxlen: 24
156.245.182.0/24 maxlen: 24
156.245.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111792 (0x1b4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 14:22:59 2026 GMT
Not After : Jun 13 14:22:59 2026 GMT
Subject: CN=6a072c48-d287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:4e:c8:c1:e5:2e:fb:d6:36:59:c8:1f:d8:
f9:2d:c3:15:cf:17:30:ba:ed:f3:7d:47:8e:86:c9:
aa:bb:ba:c3:bc:ad:d6:a8:3d:dc:7c:66:7f:de:8e:
52:3d:09:55:78:f8:3f:0f:ad:24:6c:09:56:6e:8d:
b7:ac:72:6e:58:5a:8b:54:b5:64:69:72:1b:97:b5:
1d:5e:54:8c:ae:ff:cd:e9:59:41:ef:79:a0:cf:01:
e7:a8:7b:98:de:d7:34:29:9c:fd:cc:40:f1:ab:27:
4e:15:65:53:0a:af:27:cf:51:9a:97:3a:56:27:a0:
3c:f4:c2:2d:28:d3:6a:6d:9c:11:6e:61:80:98:61:
7a:51:cf:46:cd:9f:ac:23:f4:6b:83:dc:8a:8a:d9:
fb:c8:7b:01:91:ce:59:61:61:f7:5c:94:be:e9:e6:
06:48:9d:13:80:e1:95:c6:23:16:ea:d6:a2:15:43:
32:4b:25:ab:64:05:90:a7:01:c2:9e:7d:71:04:79:
b4:8f:63:fe:36:2d:20:0f:a5:3c:fd:25:0c:98:92:
98:99:7b:b4:d5:f3:25:57:2b:f4:b8:26:47:4e:d3:
af:5e:3b:d0:bd:9f:78:b8:31:ef:36:82:fb:1c:98:
a5:86:c1:4a:59:8a:48:33:57:c8:90:e9:6b:5f:ea:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:14:AE:48:00:AC:45:32:9C:FE:2C:73:D6:6F:7F:84:83:A8:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95BE01BC506911F1A23F20D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.180.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f2:dc:5c:4e:1d:ea:db:35:8d:fb:45:6f:8a:7a:b6:ae:a9:
79:bf:7a:62:65:f6:93:fa:35:4b:08:b9:c7:3b:b9:69:8b:bb:
0d:ab:99:fc:c8:57:09:b6:31:9f:0e:af:0d:59:84:31:fb:49:
ce:ef:a9:83:35:90:ea:88:58:b4:73:a8:e5:c3:75:6d:2a:57:
08:f7:ec:40:fe:8d:33:c9:85:10:84:1e:03:2d:a8:80:46:dc:
1d:7f:ea:55:00:ca:c9:e4:b0:7d:1c:0f:fa:bf:7d:a4:13:c0:
75:ca:bf:9e:7b:27:97:e1:54:88:d1:e6:8e:d1:29:d0:14:7b:
e2:c7:a4:7b:ed:b0:4d:81:f8:ae:cb:a9:c6:d0:51:c4:4b:75:
a6:54:95:e4:7a:7f:cc:3d:da:ea:b6:e9:ab:c7:75:a8:95:3c:
91:35:3a:60:99:5f:36:5f:cf:fc:92:89:b2:1b:96:aa:3d:f1:
18:91:3f:20:2b:71:35:7c:39:2f:26:fc:14:d3:9e:9f:39:73:
f1:40:60:3f:84:e9:3a:da:57:0d:38:88:d5:93:2c:23:3f:62:
84:3d:4c:66:51:47:bf:81:41:ed:91:0e:9b:6c:1d:6b:14:d7:
34:5e:ad:d1:d4:83:60:14:ef:aa:f0:f0:bd:09:3a:f3:0d:f6:
95:02:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:31 2026 by rpki-client