Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17A03C8562711F185D4BAC6CE1D38B0.roa
File: C17A03C8562711F185D4BAC6CE1D38B0.roa (raw, json)
Hash identifier: 37jyMijFpyzlJF0ydvzQmr4DapGUrzK7dS54bJRK5s8=
Subject key identifier: 8C:30:CB:27:56:12:FF:A8:2C:ED:F5:C4:D8:06:63:A2:07:4D:65:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B84C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17A03C8562711F185D4BAC6CE1D38B0.roa
Signing time: Fri 22 May 2026 21:46:58 +0000
ROA not before: Fri 22 May 2026 21:46:53 +0000
ROA not after: Thu 09 Jul 2026 21:46:53 +0000
asID: 32043
IP address blocks: 156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112716 (0x1b84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 21:46:53 2026 GMT
Not After : Jul 9 21:46:53 2026 GMT
Subject: CN=6a10ced2-6e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:2d:b2:06:1a:78:80:01:f7:06:52:81:8e:
59:08:41:20:7c:c4:20:af:97:60:5c:5e:f0:c3:67:
3c:ef:4d:0d:38:62:65:41:b5:7e:32:10:ac:8e:34:
35:4b:9a:fe:f4:39:11:83:96:de:75:02:69:ea:e0:
9c:83:47:bd:35:b4:39:1a:e4:0e:8c:57:cd:47:09:
c6:dd:97:2b:0a:21:44:fb:f9:30:48:d8:38:90:fe:
16:42:b8:fb:36:60:41:09:90:28:9d:4b:97:bf:31:
26:68:ee:6e:d6:7d:77:81:7d:32:a8:9d:20:0b:8f:
75:e2:a7:08:35:c4:76:7d:0b:18:22:bc:f5:4f:91:
93:ce:ff:18:69:ff:b9:7e:42:2d:5d:8a:bb:27:86:
c0:e5:00:f8:5c:59:98:d3:47:01:96:7b:f1:76:60:
c2:8c:b1:0a:8e:88:3e:d3:dd:fd:f4:20:30:88:c9:
a1:c0:a2:a2:e1:46:4f:f5:67:a3:05:85:05:3a:b4:
dd:3b:84:33:2f:46:26:3a:b4:a9:7b:57:91:10:c2:
56:57:1b:f4:1b:91:d3:ce:ce:80:ac:fa:f3:2a:f5:
8d:7d:7e:33:6f:48:5f:e7:a5:6d:ec:e0:c6:51:bd:
1b:5e:f5:40:b9:22:6b:8d:51:10:a2:22:c2:7e:20:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:CB:27:56:12:FF:A8:2C:ED:F5:C4:D8:06:63:A2:07:4D:65:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17A03C8562711F185D4BAC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.48.0/21
Signature Algorithm: sha256WithRSAEncryption
92:d7:46:0c:22:fe:1d:f8:b8:2e:73:5a:37:a8:f9:aa:46:d0:
dd:09:19:a2:71:0d:a2:0c:2b:49:b2:0a:2f:10:e0:5c:a9:db:
99:33:f8:17:60:c4:ba:e3:e9:b4:cf:5d:66:2e:17:96:9c:22:
a4:00:02:7b:82:75:1d:73:43:37:4b:83:c5:b2:b6:df:71:7c:
40:4a:4a:47:ea:d2:5e:2d:b3:2f:5b:90:dd:c0:ae:1f:be:bc:
07:4f:2d:d2:3f:6f:c7:90:85:8f:db:e2:82:2a:e3:65:d5:d6:
53:f7:57:e9:a9:7a:ff:26:32:cf:55:c2:59:3e:d2:c4:93:92:
eb:ba:d3:d3:de:d2:b9:f4:2c:bb:15:35:df:8c:be:e2:16:e3:
e6:23:29:4c:b9:c0:2f:b3:05:18:57:41:9a:93:d6:06:bf:9b:
b4:e3:dd:fb:ad:5d:ee:84:7b:a5:ba:d2:49:49:65:45:10:07:
de:0c:48:a6:56:2e:b6:f9:80:dd:23:54:7f:ca:cb:8a:d5:ae:
73:3a:a2:c5:6e:69:14:98:30:b4:f2:2f:1a:48:b6:d7:0a:b7:
59:a7:9b:91:25:ca:3d:52:42:76:1b:54:c5:8f:35:98:46:cc:
60:b9:c1:56:13:2e:40:0e:37:65:2e:f7:4c:e9:a2:78:7a:c7:
c6:45:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:58 2026 by rpki-client