Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9FE12146E6011F1BB6C54CCCE1D38B0.roa
File: B9FE12146E6011F1BB6C54CCCE1D38B0.roa (raw, json)
Hash identifier: 9Qu3k1RfWnYE52o/ShaCtvkl0nvoofodWe9QvCS3XxY=
Subject key identifier: 2E:6E:04:CF:85:16:11:A7:93:D6:9F:DE:E3:FF:D2:50:36:1E:E8:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9FE12146E6011F1BB6C54CCCE1D38B0.roa
Signing time: Mon 22 Jun 2026 17:35:14 +0000
ROA not before: Mon 22 Jun 2026 17:35:10 +0000
ROA not after: Tue 28 Jul 2026 17:35:10 +0000
asID: 202656
IP address blocks: 156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114604 (0x1bfac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 17:35:10 2026 GMT
Not After : Jul 28 17:35:10 2026 GMT
Subject: CN=6a397252-f3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:f6:e2:64:38:6f:a8:39:14:7d:0d:45:cb:
53:dc:b9:e4:22:0a:46:47:06:06:18:56:b0:50:90:
2a:d1:39:a2:5d:72:a5:41:02:cf:57:61:cc:5b:d4:
9e:97:d3:36:5f:9b:c3:fa:9f:16:85:fe:2e:ab:b3:
45:3e:0d:97:83:40:3f:e9:9a:37:8c:7f:57:bc:23:
01:20:ae:aa:7a:19:e1:ae:9f:03:14:aa:75:d4:3d:
1a:46:a2:2c:93:65:fa:87:6c:94:de:d3:64:cd:88:
0f:ed:53:66:75:34:5d:cb:0c:92:0c:6f:68:6d:33:
8e:00:a1:0f:58:44:ac:39:f6:eb:8f:02:b6:34:51:
09:1b:6b:bc:97:d9:c4:91:db:b3:16:5e:b8:88:19:
8f:a8:a1:2e:3a:dc:99:08:69:51:36:99:45:e4:9d:
73:86:36:20:41:c1:e4:2f:bc:88:40:b7:0e:1f:71:
92:61:7f:85:0f:b8:ee:f9:e9:73:f7:04:a7:a7:57:
ed:92:70:6f:6f:fc:6e:9a:00:e6:09:d7:3a:db:b7:
5f:bc:c0:ef:93:e8:17:90:a6:2e:f9:21:7c:6f:87:
63:21:6e:4a:1f:78:a0:ca:18:95:f7:19:2b:0e:f0:
e3:08:55:1b:b6:a3:b3:14:f4:4d:68:2d:21:dd:99:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:04:CF:85:16:11:A7:93:D6:9F:DE:E3:FF:D2:50:36:1E:E8:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9FE12146E6011F1BB6C54CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:19:5a:0e:d4:34:dd:0f:37:91:e0:59:13:82:e0:c1:0c:1a:
f7:e4:f1:f4:61:ca:89:1d:ff:e5:4f:5c:80:60:10:18:ad:51:
54:12:be:e8:46:68:35:59:fc:ef:70:fb:4b:52:3b:ff:fc:bc:
d3:99:36:7c:d0:8f:a4:80:35:7e:e4:ed:6b:a7:9a:79:08:82:
fb:23:20:de:11:00:4c:2c:a5:17:b9:24:3c:60:86:24:c2:a5:
0f:ef:22:50:be:6d:5e:af:8e:7c:41:01:7b:5b:42:d1:74:d8:
0b:77:07:df:6d:0c:d4:b1:2a:44:e5:63:06:2f:99:0f:89:13:
f5:14:82:07:42:72:b4:b3:9d:a0:22:f8:38:ba:fb:07:4f:e2:
7f:e2:49:48:85:f6:14:0f:51:3b:16:59:f0:bb:14:af:ab:be:
bb:45:ce:e9:4d:3a:b0:87:45:0e:8f:e0:bb:40:3e:87:83:87:
b2:fc:fa:c8:bc:71:06:f1:d0:5e:63:d6:7e:27:6a:3c:3f:16:
cf:0a:13:53:c6:25:e7:a0:8c:ce:d6:5e:95:ce:73:06:2a:1f:
b3:e7:29:73:ec:f7:2f:bd:4f:c8:c3:d4:fc:07:9e:9d:06:db:
56:5d:8c:2a:8d:be:e1:54:3e:d5:46:fb:f3:be:25:59:32:59:
da:6e:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:55 2026 by rpki-client