Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1384305DDD11F19791FCADCE1D38B0.roa
File: AA1384305DDD11F19791FCADCE1D38B0.roa (raw, json)
Hash identifier: LZFalnaWMnrUUY3RWkI6np0hxJXnoGCvoZhbFOQ4Ne0=
Subject key identifier: 60:BE:C7:FA:11:9A:C3:C0:3C:3E:9E:65:AB:47:7F:2E:25:84:4B:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1384305DDD11F19791FCADCE1D38B0.roa
Signing time: Mon 01 Jun 2026 17:16:45 +0000
ROA not before: Mon 01 Jun 2026 17:16:40 +0000
ROA not after: Mon 06 Jul 2026 17:16:40 +0000
asID: 264750
IP address blocks: 156.248.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113457 (0x1bb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 17:16:40 2026 GMT
Not After : Jul 6 17:16:40 2026 GMT
Subject: CN=6a1dbe7d-927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:75:30:74:c6:ef:30:62:88:7f:75:f3:ea:
3e:d4:54:84:c3:6a:82:56:f1:9f:38:a0:14:a5:d9:
22:39:e8:17:a9:95:e4:93:9f:fb:e0:81:73:ef:7d:
e6:12:12:b7:ba:8d:42:0d:ed:ec:8e:14:3f:de:e6:
50:7c:a5:df:a5:c3:24:e5:f5:e7:0e:26:80:e7:b7:
a2:bb:31:fd:2b:44:91:41:cf:19:25:aa:10:4c:8c:
e5:44:ac:d8:e9:12:65:91:42:a7:cc:6c:70:8d:86:
4c:8e:5b:65:9f:e9:7d:96:f0:65:b5:fc:79:a4:19:
90:78:4d:f6:e7:a3:e9:c0:f0:9a:06:1f:85:e6:36:
e2:05:4e:f5:6a:ed:66:cc:65:33:79:ff:c7:04:66:
23:a6:3f:b2:db:aa:b2:dc:99:dc:cd:82:6c:22:ad:
0e:fd:b2:b7:5e:38:09:ea:e4:c2:99:9c:ed:05:49:
cd:81:11:41:f3:7f:ac:da:a5:6f:35:39:6a:6a:44:
c5:59:25:60:99:86:7e:65:68:a5:1b:e7:f5:fe:d7:
d9:2a:2d:ff:1f:8f:7c:13:0b:67:a4:b1:81:c9:92:
f2:d1:b2:9b:56:79:cd:dd:c6:a7:36:76:f7:1e:6d:
ab:87:41:21:32:cc:ee:e2:4a:6a:77:48:c4:1e:7d:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:C7:FA:11:9A:C3:C0:3C:3E:9E:65:AB:47:7F:2E:25:84:4B:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1384305DDD11F19791FCADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:d0:62:28:51:72:16:e9:a8:f0:8e:3a:73:06:c9:6c:f6:c8:
33:11:ed:2d:6e:7d:5e:16:10:de:ad:b6:51:1b:9e:da:a1:da:
03:3a:72:bb:57:b1:a7:e0:03:e0:9f:fb:46:ef:79:69:84:90:
03:db:30:3d:8a:3f:f9:e1:67:ea:cc:ba:ee:b3:32:27:49:77:
f4:cf:86:75:c8:ef:61:45:7a:69:13:90:90:29:ad:66:e4:cc:
e1:64:f5:ca:fa:fc:32:d3:f4:67:5c:d1:8d:ae:dd:b3:0b:54:
15:70:20:6a:3a:7e:b1:ca:04:b7:8c:d2:3c:f7:15:27:76:d7:
c5:48:2e:d9:36:cc:9a:35:c6:94:a1:cd:fb:bc:45:a7:fe:da:
32:34:93:5e:be:51:05:67:55:eb:37:69:5f:78:90:2d:34:fb:
a1:50:1d:03:d1:9a:53:b1:8b:12:91:a7:5d:70:5a:9e:15:5a:
5e:66:ce:0b:fb:f2:9f:1f:31:b2:9a:82:1c:d7:1b:ad:f6:28:
2a:80:00:0f:7e:12:25:b7:0d:04:fb:58:bd:8e:d8:31:71:59:
f2:b4:58:55:8a:67:f0:64:fb:4b:33:9c:57:60:fc:68:a1:64:
d4:4a:ad:17:ed:bf:0e:ba:4d:ed:93:0c:47:0e:53:78:a8:1c:
94:7e:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:14 2026 by rpki-client