Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D28F8B4561B11F185568AFFCE1D38B0.roa
File: 9D28F8B4561B11F185568AFFCE1D38B0.roa (raw, json)
Hash identifier: Ft0anwZzOjen8UaEYeo/UqXnyBL3KuMZPCRGBX6b7EU=
Subject key identifier: C5:4E:BF:CC:C4:62:75:B9:0B:40:B8:30:4B:B9:18:D2:A3:F5:AB:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B840
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D28F8B4561B11F185568AFFCE1D38B0.roa
Signing time: Fri 22 May 2026 20:20:03 +0000
ROA not before: Fri 22 May 2026 20:19:56 +0000
ROA not after: Sat 22 May 2027 20:19:56 +0000
asID: 63199
IP address blocks: 156.242.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112704 (0x1b840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 20:19:56 2026 GMT
Not After : May 22 20:19:56 2027 GMT
Subject: CN=6a10ba73-f245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:e0:15:ce:0f:b5:eb:ec:4a:be:06:f9:74:
dd:7a:da:d8:4b:b2:4a:61:02:28:56:31:16:47:4b:
02:ca:f4:c4:f3:ec:09:91:a2:be:15:78:f7:51:b8:
32:1c:c5:ed:0d:7d:27:98:2b:02:dc:26:b1:e1:3b:
91:cb:61:09:40:87:bb:ac:ea:b7:86:15:87:35:f0:
91:30:98:60:bb:82:83:fc:97:a5:d3:eb:01:e8:4a:
7f:ed:8e:09:ab:11:d8:a1:93:91:ef:4d:a5:17:31:
56:a2:05:c5:bf:9d:9b:42:c6:ef:73:b4:b3:71:93:
e7:65:8c:af:68:69:72:2f:5c:dd:e3:5d:2d:ba:94:
b9:ed:06:1b:42:7f:f3:71:ee:6d:1b:0c:42:e8:40:
c2:39:78:bf:b3:b7:ab:57:78:7f:47:35:08:e8:54:
9c:ce:7a:1f:55:78:8e:17:9c:fe:12:24:66:f7:7a:
42:07:6d:59:fc:1c:b8:69:50:e6:18:f0:df:eb:ce:
33:7b:83:7b:4c:84:98:dc:e0:01:7f:d2:b4:b3:1f:
fd:90:1b:11:fb:31:ba:e4:62:b7:64:18:98:f8:37:
c2:45:0d:3a:3e:39:f6:68:46:71:ee:c7:47:91:d1:
ff:dc:d6:12:25:f1:5c:a4:27:6d:fc:96:47:f2:6a:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:BF:CC:C4:62:75:B9:0B:40:B8:30:4B:B9:18:D2:A3:F5:AB:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D28F8B4561B11F185568AFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.82.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4f:58:8a:3c:25:8d:72:26:6f:45:96:c1:e2:d3:a5:f9:3a:
6e:46:76:02:8a:61:80:6c:42:1c:d3:c2:d5:af:65:9a:77:d0:
96:94:9e:36:75:03:2c:b6:1c:98:d5:7a:f4:3d:49:e7:80:e6:
2d:3b:f6:7e:b4:32:a1:6f:40:3d:cd:ea:ad:f8:9d:74:34:4e:
ee:0f:75:00:90:03:ca:23:9c:ef:3e:f8:b9:7d:24:90:4d:1b:
f8:06:3b:94:be:ab:89:aa:63:32:59:7a:02:37:14:ff:94:b8:
ba:71:27:72:3c:44:f1:f0:aa:82:4a:a6:5c:dd:44:8d:5f:34:
88:fb:aa:c1:08:aa:d9:e1:2b:0b:d7:08:43:d8:ae:f1:3a:ea:
66:17:30:b8:33:4d:96:e1:87:20:fa:0b:2c:af:f5:7d:62:ae:
a1:de:2e:0d:0b:44:33:cb:14:ee:03:b5:3c:6e:78:03:69:25:
af:cc:f9:b8:58:da:80:ef:a1:b6:c5:62:7b:54:aa:86:87:2f:
5f:18:d1:4a:a7:27:59:4b:69:3b:a4:a7:19:08:33:ee:72:73:
c9:30:59:cb:c3:98:e0:16:f8:37:cd:fb:cb:5f:78:f4:ec:00:
1e:3e:4a:ae:19:0f:f3:ec:c8:ea:ad:8c:2f:45:f2:eb:cc:4a:
fc:d9:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:58 2026 by rpki-client