Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3D999545F2411F1BAEAF0F9CE1D38B0.roa
File: A3D999545F2411F1BAEAF0F9CE1D38B0.roa (raw, json)
Hash identifier: HLlU35IcwV6vpqJd6aIUn9ubaQb9N+b8usd9Zc7DYts=
Subject key identifier: 51:10:E7:3C:06:5B:6A:97:B7:F8:80:9C:77:18:ED:CC:AA:90:B0:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3D999545F2411F1BAEAF0F9CE1D38B0.roa
Signing time: Wed 03 Jun 2026 08:17:20 +0000
ROA not before: Wed 03 Jun 2026 08:17:15 +0000
ROA not after: Wed 08 Jul 2026 08:17:15 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113549 (0x1bb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 08:17:15 2026 GMT
Not After : Jul 8 08:17:15 2026 GMT
Subject: CN=6a1fe310-e119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:f4:ee:67:f4:db:c9:34:d7:14:c9:07:70:
8c:be:6c:33:25:35:5b:f7:c0:1f:52:7f:06:8a:aa:
0e:72:4f:08:e6:c5:2e:1e:f0:de:b1:d9:a7:98:5b:
f5:6a:ca:2a:d3:0a:e2:63:9c:d7:62:bc:9b:d4:55:
2d:40:98:15:e8:01:e9:18:6c:67:47:e9:31:36:1a:
5d:f1:39:15:7f:45:4d:38:9c:c3:ed:2d:02:f2:98:
aa:42:1d:66:f5:c4:a5:28:5b:0e:e1:a1:ea:7b:73:
d1:2c:e4:53:d2:22:5a:63:30:a2:92:cb:7e:79:43:
57:fe:82:2a:b3:2a:e9:57:ec:06:23:f1:08:45:9c:
34:fe:30:32:ff:19:a7:12:c1:73:64:24:54:4f:53:
fb:3c:b7:04:f5:0d:cd:86:97:75:74:10:02:12:31:
cf:72:16:7c:a3:8c:10:de:20:8e:76:b8:65:38:22:
0c:c1:ef:a9:92:17:92:a6:45:2b:75:ee:a9:ab:18:
f6:62:e0:39:39:80:d1:ec:db:79:a8:97:23:ba:8b:
ce:19:17:e9:14:33:3c:39:ce:4c:91:6f:c0:64:26:
a8:00:be:fa:49:68:e5:af:0c:a5:76:d4:73:b6:42:
07:14:30:16:01:b4:97:98:77:d2:af:a6:f1:bb:6b:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:E7:3C:06:5B:6A:97:B7:F8:80:9C:77:18:ED:CC:AA:90:B0:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3D999545F2411F1BAEAF0F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:a7:29:8c:db:6c:8a:66:53:2d:ba:c5:3a:8e:55:bc:91:fd:
bf:91:4f:ce:c7:2c:82:79:06:52:65:f9:ac:8f:4b:17:e1:74:
4e:94:eb:0b:82:d7:ad:e4:8c:5f:71:5a:ae:65:05:ab:79:43:
1d:f3:73:5e:52:dc:6e:09:98:6f:79:c6:ef:93:88:5e:9e:9f:
1f:9d:f7:0b:46:ab:66:85:77:52:15:6a:cc:00:78:2f:54:5a:
83:d2:e5:49:54:ee:6d:a7:2b:e3:7c:61:49:e0:b8:88:9c:e8:
52:cc:e4:e7:63:79:49:23:8b:a2:37:ae:2c:ca:fc:d2:40:1a:
c2:bd:03:09:76:00:cc:ed:3a:98:bf:50:51:39:19:fd:98:1b:
9c:c9:0e:cf:6f:b9:d5:a6:4d:76:15:13:df:c8:94:0a:6a:df:
0a:8a:51:7e:23:41:7f:05:08:6d:87:3a:03:01:3b:b2:f2:b8:
7e:e5:35:00:e2:c0:8f:87:d5:50:02:1e:7c:47:11:f5:d3:01:
cc:f0:85:39:d9:fd:99:26:2b:c4:47:4e:c3:a0:98:ed:6d:6a:
c9:c1:d0:91:be:ce:2e:cd:aa:11:a6:af:6d:05:66:26:5c:8d:
1d:b7:35:af:9e:3f:ee:9f:35:58:cf:9e:29:27:7d:aa:f0:01:
45:8b:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:37:10 2026 by rpki-client