Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0065AF65A7311F198EA2CF8CE1D38B0.roa
File: B0065AF65A7311F198EA2CF8CE1D38B0.roa (raw, json)
Hash identifier: 7WtwBW4Ax0BRIsyK70D6gONHGKqy/UrKUpUzcFxsu08=
Subject key identifier: 5E:27:1E:BC:08:38:E5:D9:86:A4:A8:AE:FC:3F:0F:19:56:BE:E7:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0065AF65A7311F198EA2CF8CE1D38B0.roa
Signing time: Thu 28 May 2026 09:00:35 +0000
ROA not before: Thu 28 May 2026 09:00:30 +0000
ROA not after: Mon 06 Jul 2026 09:00:30 +0000
asID: 137899
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113295 (0x1ba8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 09:00:30 2026 GMT
Not After : Jul 6 09:00:30 2026 GMT
Subject: CN=6a180433-ab4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:d5:65:3a:c0:30:d5:59:6a:e7:2a:54:4e:
94:ec:60:62:9c:d7:bc:0b:79:5a:60:64:ac:c9:82:
62:37:44:e9:b7:fa:1b:15:8e:f4:37:2f:40:c7:f4:
25:8c:44:5c:7d:b0:83:17:5a:49:14:ae:e4:ed:b3:
9e:ad:92:73:ea:65:3f:2c:d7:38:68:18:04:c6:cb:
93:c6:13:f9:26:71:2a:1f:0e:44:be:8e:6d:4c:bb:
16:be:14:0b:08:d1:7e:89:7b:e5:c8:2d:77:2b:56:
f8:21:b6:49:71:fd:e3:22:78:ad:e7:f8:cc:77:84:
bd:d6:ae:27:a9:c3:8a:72:46:d0:00:6c:4d:ed:24:
76:a1:37:c1:63:3f:76:50:a7:d8:9f:84:4b:e4:9d:
b6:59:16:e8:03:fe:3b:54:3e:25:d8:ff:28:0a:16:
f0:70:cc:f5:f3:23:1b:ee:01:78:52:fc:5d:e8:83:
8f:14:db:4a:b1:26:f1:a9:3c:4f:a4:c7:38:e4:51:
c1:45:fc:4e:8c:83:71:84:38:df:7d:7b:5b:72:0c:
7c:a5:48:50:29:28:e6:cd:e5:eb:32:12:14:22:57:
a6:68:b1:36:98:41:e1:65:27:54:5b:b6:da:c4:bb:
b3:be:ec:58:83:e9:09:be:b6:d2:3d:50:72:60:9d:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:1E:BC:08:38:E5:D9:86:A4:A8:AE:FC:3F:0F:19:56:BE:E7:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0065AF65A7311F198EA2CF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
05:39:68:bf:c8:67:bf:4e:84:3c:95:e3:58:57:7d:d9:83:cd:
0d:f7:35:f3:90:9d:ea:61:83:57:4f:f3:54:31:0b:1a:93:e8:
22:f9:42:df:83:8b:0e:87:bf:94:f2:2e:f4:1e:78:b6:c2:85:
7d:ba:93:7f:61:b9:63:5f:99:87:b9:a7:0a:5f:80:bb:7f:ca:
fa:d0:4e:24:aa:22:74:08:ee:9c:1a:b7:84:95:6d:03:bf:7f:
5c:8d:96:9d:69:0d:6b:68:33:e9:f5:b0:fd:6b:77:e7:00:18:
9f:58:1f:55:9b:66:99:35:db:ac:e3:86:4c:e5:df:f4:85:5f:
12:63:b0:67:c8:12:7d:c7:9f:4e:51:79:5a:ae:89:db:c8:7c:
16:1a:2a:5d:fb:56:45:1e:1f:7b:28:d4:f4:ad:3d:d8:3c:b2:
13:48:01:9e:77:e6:d0:83:0f:21:98:cb:0a:f7:90:11:47:4a:
8c:52:94:a4:4a:86:69:3c:7c:3a:06:0f:1e:f4:41:21:54:05:
3c:89:57:81:fb:ac:e6:e6:01:68:7e:02:f2:68:a3:51:3c:9e:
31:bc:77:5a:37:e9:ef:b4:0d:f5:dd:2e:80:4b:3d:68:f2:ae:
f1:e7:7f:d1:c5:4a:44:ed:8c:d1:06:76:2c:36:15:34:1a:60:
b9:d2:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:13 2026 by rpki-client