Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0AB331A6A3411F1987A2AB9CE1D38B0.roa
File: C0AB331A6A3411F1987A2AB9CE1D38B0.roa (raw, json)
Hash identifier: 9UgbI7kkIty8aLihfzdW/Bt1TLcg6f2IUyUbaWp2tj8=
Subject key identifier: D1:32:8A:68:A9:60:4D:75:15:3D:1F:A9:DD:DA:C5:24:49:6B:0C:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0AB331A6A3411F1987A2AB9CE1D38B0.roa
Signing time: Wed 17 Jun 2026 10:10:23 +0000
ROA not before: Wed 17 Jun 2026 10:10:17 +0000
ROA not after: Mon 20 Jul 2026 10:10:17 +0000
asID: 154376
IP address blocks: 156.254.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114326 (0x1be96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 10:10:17 2026 GMT
Not After : Jul 20 10:10:17 2026 GMT
Subject: CN=6a32728f-8ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:d4:3f:44:22:41:e0:d2:21:12:52:bd:75:
83:9d:f5:87:ef:00:27:e5:03:fa:a4:7e:0f:8f:82:
1d:a3:68:f3:79:28:a4:fe:5c:87:32:6a:23:81:07:
c1:c5:f6:de:cb:25:e2:a7:d2:ef:6e:d4:16:ab:e7:
d6:71:d7:e0:18:bd:ab:89:bf:6e:90:c7:cc:c1:6d:
e9:96:a2:dd:a5:5e:ab:ae:bb:0d:3a:8e:55:ff:1e:
f0:ab:1c:77:c3:d0:cb:5e:72:84:97:93:78:54:83:
72:73:8d:9c:52:96:d9:14:eb:b7:70:63:59:c2:17:
cc:c3:95:ac:9c:77:2e:84:50:0e:d5:2e:8a:1b:e3:
3a:4d:26:6d:0b:0e:92:d2:8e:84:e6:26:f7:2c:bf:
ab:08:bd:92:46:2d:79:ef:65:ef:69:0e:e2:50:36:
7d:e0:6f:0c:04:ab:bc:77:c5:d6:2d:e3:49:c2:7f:
48:cf:82:5e:73:9d:a4:62:33:2d:e4:c9:ba:1a:2f:
0f:14:fb:57:8a:b9:17:5b:0f:e8:9d:e0:53:69:c6:
f9:56:29:02:0f:89:09:4b:ff:a1:f2:da:b4:c6:ef:
18:3e:75:b3:90:78:5d:54:25:b0:ff:c5:37:60:c9:
dd:83:bb:4d:c8:83:06:a0:00:53:54:78:33:a0:6b:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:8A:68:A9:60:4D:75:15:3D:1F:A9:DD:DA:C5:24:49:6B:0C:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0AB331A6A3411F1987A2AB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:90:11:30:a1:0f:d8:96:02:85:72:01:bc:b6:b6:b0:17:57:
ab:bc:ac:4d:5f:9c:c3:7b:33:b0:02:66:4f:63:33:e4:5a:56:
da:87:5c:2c:64:ba:23:73:fe:d8:ad:56:ee:5a:04:15:88:1b:
3d:59:47:5d:82:1f:5e:87:b5:48:1d:b8:a8:86:a6:0a:78:6c:
67:6b:db:d4:fc:7e:bc:5c:bf:c8:f7:06:a0:c6:3a:71:7b:24:
e3:a0:3f:65:2c:16:e0:cf:03:8b:40:bb:9a:b0:90:01:55:61:
91:82:31:ed:7f:b4:f4:bb:62:02:81:15:da:a2:ee:85:78:9d:
82:91:fc:62:85:ee:f4:1d:7d:bd:20:5c:f7:10:d7:e6:d7:8f:
46:8f:55:66:ed:db:58:b7:bb:f2:77:eb:95:4e:5e:b5:b9:4c:
49:bf:ce:74:d3:3d:d4:34:78:b5:d1:f9:25:bf:4b:b3:9c:2b:
f4:0b:c9:6e:87:9e:57:04:66:60:c4:a9:a9:6a:94:d4:56:da:
db:af:92:e2:c1:64:c4:48:4b:c4:58:a5:57:2f:b6:f7:bf:59:
31:89:9f:2a:75:d2:39:b9:a4:1e:05:f3:77:93:08:99:a5:51:
fc:9c:0c:62:46:76:3e:fe:d4:c2:60:5e:57:26:3c:b1:90:68:
15:59:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 00:10:27 2026 by rpki-client