Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B829EAB858F211F18585FDD5CE1D38B0.roa
File: B829EAB858F211F18585FDD5CE1D38B0.roa (raw, json)
Hash identifier: edfm7B9Wc9RTkTVbVtKC+EGGN5LkuGEFhyzD5C4b3jI=
Subject key identifier: FA:2E:8C:4B:52:AD:44:EF:C9:3F:3D:27:9C:36:0B:63:62:6E:14:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B829EAB858F211F18585FDD5CE1D38B0.roa
Signing time: Tue 26 May 2026 11:04:52 +0000
ROA not before: Tue 26 May 2026 11:04:47 +0000
ROA not after: Thu 02 Jul 2026 11:04:47 +0000
asID: 9304
IP address blocks: 156.245.136.0/23 maxlen: 24
156.245.152.0/22 maxlen: 24
156.245.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113131 (0x1b9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 11:04:47 2026 GMT
Not After : Jul 2 11:04:47 2026 GMT
Subject: CN=6a157e54-949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:16:b5:b4:05:b2:d6:af:20:3b:c6:65:7b:b5:
70:ac:c8:72:32:8d:fa:c7:0c:15:66:59:09:35:63:
07:c2:35:2b:f7:94:a5:7c:35:2c:e3:6b:29:98:90:
35:ca:38:2a:f2:d5:b2:e5:ac:1b:d9:1f:f7:82:10:
2f:77:cb:45:bf:ec:8b:04:1a:cb:0d:30:38:72:18:
ff:c5:6e:ed:44:99:94:48:c0:03:9d:bd:2d:4d:fd:
3f:e9:3b:48:7d:c9:9d:94:a7:de:30:e5:d8:cc:83:
fc:8f:58:da:c0:eb:43:94:32:f0:c8:1b:82:c3:8a:
f1:a4:b1:8c:4f:89:62:b0:1b:d9:cc:d9:eb:14:71:
ae:42:6d:ba:89:35:ba:e1:fe:0f:65:03:01:1d:82:
95:e5:d5:29:fb:80:21:d8:f3:05:6f:dd:d9:7c:a9:
68:58:9f:92:5e:8f:27:25:cc:3d:c5:f0:d5:f7:6e:
04:a9:4c:26:5c:74:52:d0:80:26:d2:9d:00:4d:07:
b2:e1:70:b6:1d:fc:c3:11:c6:31:72:1d:3c:2f:7d:
44:db:26:29:fd:07:85:a3:e7:33:99:d1:aa:be:ec:
ae:1e:df:62:5e:cb:96:6d:89:b2:02:aa:95:d1:9e:
36:7e:fb:83:f9:60:58:49:7b:82:7b:4c:9d:1c:80:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:8C:4B:52:AD:44:EF:C9:3F:3D:27:9C:36:0B:63:62:6E:14:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B829EAB858F211F18585FDD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.136.0/23
156.245.152.0/21
Signature Algorithm: sha256WithRSAEncryption
af:c4:36:56:05:16:ba:28:46:c3:4b:71:38:ad:f9:84:cf:e9:
31:f8:4e:fa:a1:79:37:04:b7:c3:2f:73:92:e2:03:bd:67:d6:
9e:59:b7:bb:8d:79:1e:d8:77:de:88:ab:0a:39:f0:e4:81:80:
46:f4:be:41:81:20:13:92:b9:b1:8f:eb:19:a8:8d:e3:b7:4d:
a4:30:24:e5:87:95:50:bf:7e:e2:5c:fe:4e:f9:02:06:63:fb:
56:59:2d:01:bc:78:c1:e0:12:c0:e3:01:f6:78:93:b2:f9:59:
49:d1:b7:f9:19:2d:b6:8d:07:f5:bd:ac:47:d4:81:3b:b2:77:
54:93:94:52:77:c2:00:10:0b:57:3c:82:14:5f:f6:26:4d:c5:
c2:12:16:7b:0c:d7:51:30:20:3c:86:51:08:7f:ff:47:87:af:
6b:82:54:a1:44:13:36:0f:0e:2e:8e:45:63:e0:f6:56:cc:9a:
d9:8f:d7:a0:8f:c8:25:a3:a8:4b:d9:87:ed:e5:2a:44:96:8a:
1e:24:79:e0:92:7c:df:2c:0f:9e:92:3c:28:d2:05:fa:79:71:
49:ac:6d:c6:5c:93:52:24:ad:e3:58:2f:8f:1e:e4:09:22:88:
88:ef:20:9f:83:db:48:a8:ca:87:79:f7:a5:d5:20:ce:4e:bb:
02:1f:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:54 2026 by rpki-client