Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B574D4BC535311F1822AAF10CF1D38B0.roa
File: B574D4BC535311F1822AAF10CF1D38B0.roa (raw, json)
Hash identifier: Rt+67puanAzuaVLWmGJy+ePLiPsDkb7649qEZQ00t1w=
Subject key identifier: 89:6F:94:23:9A:19:32:AE:BD:E8:9A:16:F2:45:C3:58:3A:40:CD:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B574D4BC535311F1822AAF10CF1D38B0.roa
Signing time: Tue 19 May 2026 07:24:02 +0000
ROA not before: Tue 19 May 2026 07:23:57 +0000
ROA not after: Sat 08 Aug 2026 07:23:57 +0000
asID: 150706
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/21 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112037 (0x1b5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 07:23:57 2026 GMT
Not After : Aug 8 07:23:57 2026 GMT
Subject: CN=6a0c1012-243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:2c:05:25:dc:9f:ce:52:1a:86:95:15:0a:
9c:51:96:f1:54:d0:1d:22:0a:04:1c:77:bf:ed:18:
b9:ef:47:11:ae:5b:99:0e:ac:f1:73:c3:27:d1:2b:
68:31:ec:ce:23:ce:26:0e:d5:f0:16:63:2c:87:6a:
f8:90:f7:91:7a:89:d5:79:fc:16:05:6d:50:da:e1:
c2:bf:de:e0:92:c2:50:85:4e:c5:a5:b3:63:3a:16:
96:68:7d:94:01:1c:3e:07:5b:dc:6f:1a:9c:61:09:
f0:ab:d8:bd:48:1b:ce:21:54:16:f6:5e:eb:46:28:
36:19:e8:c5:a4:ee:d8:8e:15:7a:31:f5:61:2a:0d:
6e:21:a5:35:e1:88:6a:fd:b4:6c:40:02:9d:b0:10:
97:e3:a2:8f:2a:41:63:c0:73:8a:0c:12:4d:9f:f3:
4e:88:27:bf:2d:ae:77:83:0e:3f:fd:56:98:29:a5:
06:f0:12:a2:dd:3e:b1:e2:17:c3:7a:03:1b:74:74:
c4:99:09:29:6f:72:16:a4:bb:11:23:a0:39:bf:fc:
78:19:55:93:3b:1a:72:8d:05:0e:1d:0f:2e:c6:83:
92:9f:28:e0:2b:f1:7d:21:ec:4f:4a:47:2c:36:1f:
b1:7c:3e:18:87:d8:e4:25:bf:e2:d4:b6:30:fe:51:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:94:23:9A:19:32:AE:BD:E8:9A:16:F2:45:C3:58:3A:40:CD:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B574D4BC535311F1822AAF10CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:69:96:5b:02:a0:47:e5:11:84:62:2c:cb:b7:d0:d8:94:e2:
3c:4c:c4:f0:18:a2:11:6d:14:b0:2d:43:ab:4d:c6:b0:c9:fc:
93:45:9a:65:d9:c8:2b:3b:fa:e3:fb:e6:51:37:e8:fd:40:38:
39:24:7d:d6:f8:db:15:35:8b:86:ba:82:69:8e:d2:d2:04:62:
48:02:99:08:ab:91:c5:7f:44:f9:c6:03:e9:c4:3c:22:13:6c:
95:c5:71:9f:e6:7a:4d:b6:26:8b:9c:e9:bf:eb:c9:8f:bc:bb:
e1:7b:20:c4:f1:ce:d2:fd:d0:e3:98:86:03:7d:40:a3:19:ce:
11:46:07:68:60:da:86:17:16:5f:ee:f3:bd:62:b7:9d:8f:6e:
35:c4:0a:73:e6:bd:fd:5e:7a:4d:09:4d:94:c1:4f:74:45:ea:
91:84:2f:27:4c:45:db:6f:99:17:15:aa:86:a1:86:c0:c4:a4:
11:7b:18:61:0a:dd:ac:0b:a3:cc:55:6f:1b:2d:a9:54:89:ce:
a6:8d:a9:ec:cb:7f:7c:4d:29:a4:65:6d:5f:0c:b7:12:20:ba:
da:0f:7e:1d:99:74:74:e4:6c:ab:6c:ee:b4:17:b7:30:2d:d1:
76:3f:5e:0e:e1:e4:ed:21:d7:f4:cc:10:4d:89:8a:d9:5f:01:
d4:b4:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:42 2026 by rpki-client