Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B020DD606FCF11F19CD84708CF1D38B0.roa
File: B020DD606FCF11F19CD84708CF1D38B0.roa (raw, json)
Hash identifier: skte/va6m9my9ObaMHrhi+zAMfs9BxxqNpxHcSDERDs=
Subject key identifier: 6B:F9:92:88:54:1B:8C:02:F0:BA:6D:C1:BA:77:A1:BA:A5:7E:3E:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C038
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B020DD606FCF11F19CD84708CF1D38B0.roa
Signing time: Wed 24 Jun 2026 13:22:03 +0000
ROA not before: Wed 24 Jun 2026 13:21:58 +0000
ROA not after: Sat 01 Aug 2026 13:21:58 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114744 (0x1c038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 13:21:58 2026 GMT
Not After : Aug 1 13:21:58 2026 GMT
Subject: CN=6a3bd9fb-a314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d6:96:e0:5e:bd:92:63:4c:85:d4:52:69:a1:
51:79:ed:18:0c:60:25:94:ba:92:7e:41:f4:e3:d3:
59:c2:10:60:1b:3f:2e:9f:f6:f8:73:9e:82:1d:df:
c9:88:35:e4:17:8e:1a:17:bf:1b:d1:26:d3:12:2a:
79:3a:54:1b:04:54:f8:f5:2c:fb:21:1b:ac:6e:b9:
5a:d7:e2:07:a0:60:4c:e1:f1:9a:54:9b:11:b2:67:
69:ca:d0:2e:24:52:32:fd:3c:c0:51:53:5c:4b:89:
c2:f8:ff:2e:2e:ea:b6:ef:64:b8:c9:3a:ac:2c:83:
30:ac:8e:0a:28:6e:cc:00:79:70:a1:00:c3:4d:50:
6a:b3:54:9d:4a:a5:45:80:f0:d4:47:69:ee:7e:70:
0d:31:2d:e4:43:4a:ea:d3:ee:46:a2:31:13:e5:ee:
8d:31:2b:72:9f:a6:51:7f:aa:2e:2e:45:03:89:32:
ec:17:a3:2f:d8:4c:1f:2e:74:70:1e:bf:cc:eb:a4:
e9:d8:12:5a:92:60:98:b9:1f:40:be:8b:6f:fa:9f:
b0:93:4d:38:64:52:76:f5:e5:63:2f:41:31:14:89:
b6:24:a4:ea:33:3b:43:6a:7b:b6:ee:1e:e9:53:de:
c5:d4:1b:09:14:cd:81:90:c5:a3:6b:92:3a:34:24:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:92:88:54:1B:8C:02:F0:BA:6D:C1:BA:77:A1:BA:A5:7E:3E:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B020DD606FCF11F19CD84708CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
9b:c9:5b:27:b7:91:9b:45:1b:88:37:2b:27:27:90:8a:31:32:
57:6d:05:15:ab:e8:ae:30:f8:8a:da:78:d0:7d:9d:2e:87:d8:
8e:84:e9:b1:e5:54:d8:b9:3b:3b:9d:d5:c1:5b:e3:3b:76:b4:
e5:b0:79:37:3f:a9:e1:a6:db:8b:d1:35:1e:44:2c:e6:4b:ac:
4d:4e:50:db:ee:c1:88:15:ca:a3:4c:68:05:79:58:a5:1f:94:
70:8a:47:f6:07:5a:68:13:bb:08:b5:cf:4e:13:7b:a2:8f:b7:
52:a7:99:de:cc:f3:99:1e:00:15:31:de:7b:77:d0:b8:9a:3b:
a1:78:57:65:f5:b7:bb:58:eb:1d:f5:ba:62:8a:02:e3:8a:e2:
fe:84:75:fe:3e:71:85:62:40:13:7f:f6:ab:87:07:d8:94:69:
b1:5b:ca:79:a2:bd:46:fd:1e:f7:c0:48:d7:d8:75:d9:69:6c:
0c:9e:e6:74:09:2c:8d:12:28:aa:c7:24:83:bf:3e:d4:18:ea:
50:3d:5b:9c:88:c3:f8:eb:ec:49:08:8e:78:b0:d8:f0:7b:71:
f7:9b:80:0c:ba:c1:40:7b:f0:6d:45:84:53:63:b7:77:3c:dc:
93:ab:f3:da:de:20:4e:18:4b:94:19:e1:6b:10:8b:1a:3e:ac:
89:41:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:37 2026 by rpki-client