Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6B9E16C72F311F1B3A59CA3CE1D38B0.roa
File: C6B9E16C72F311F1B3A59CA3CE1D38B0.roa (raw, json)
Hash identifier: gwjCfbXmkPY/K2wu/MbsXvsjuCxA9/p8vgQNgFoInK0=
Subject key identifier: C0:D9:B7:F4:62:BE:1F:71:9C:4B:EB:D0:A1:F0:9A:A6:5C:A8:A4:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C145
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6B9E16C72F311F1B3A59CA3CE1D38B0.roa
Signing time: Sun 28 Jun 2026 13:17:56 +0000
ROA not before: Sun 28 Jun 2026 13:17:51 +0000
ROA not after: Tue 04 Aug 2026 13:17:51 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115013 (0x1c145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:17:51 2026 GMT
Not After : Aug 4 13:17:51 2026 GMT
Subject: CN=6a411f04-06da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:1e:61:b7:da:76:40:54:61:77:7e:cc:d9:
71:65:84:43:8c:1a:40:fb:9b:75:19:24:dc:fd:15:
ba:a6:df:0a:40:7b:80:3b:26:4b:0f:7a:5a:c6:38:
f8:60:91:de:b1:9c:a6:5f:8d:a7:26:18:f3:2e:68:
15:b2:ae:7e:a3:0c:cf:db:9c:ec:c9:f6:61:ae:aa:
1f:a7:3f:ff:ba:3e:ec:68:86:3f:6b:c6:c7:78:c8:
d9:b2:0e:e8:d1:fb:de:9a:14:d4:f9:28:16:f0:ec:
f3:38:1d:e2:66:2d:bf:c0:ad:0f:ad:5e:14:ec:ee:
b5:91:10:d2:00:25:ab:e5:f7:c1:8e:dd:02:e9:a0:
5b:14:fa:40:e2:20:a7:ae:e7:ad:f5:87:c1:c9:5d:
ae:fb:cb:63:c9:bd:f5:ab:a2:d5:2a:30:04:bd:c6:
8b:e6:23:96:f4:a6:64:43:4e:ba:58:e3:ba:74:ea:
c3:de:0d:f2:80:2c:75:a1:12:c8:0c:2d:bf:64:a3:
b2:50:a6:af:ae:bf:e4:53:1b:0d:a3:15:74:20:a1:
3d:ee:44:a0:ed:1b:1d:3f:1e:46:fd:cc:35:2d:49:
23:d6:90:00:55:8a:2e:f1:57:28:fd:82:f6:0e:30:
6a:ad:85:de:1f:3e:06:49:da:13:33:3b:38:a7:cf:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D9:B7:F4:62:BE:1F:71:9C:4B:EB:D0:A1:F0:9A:A6:5C:A8:A4:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6B9E16C72F311F1B3A59CA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:67:80:8e:9d:cd:94:ee:4b:db:c6:a5:2a:54:5d:1a:07:2a:
df:71:37:e9:60:18:47:e3:eb:b5:6b:1a:5b:3a:30:60:78:e6:
2a:e4:58:e9:c5:ea:ab:81:aa:cb:b4:bc:1b:25:bc:a9:cb:73:
f1:2e:a2:c4:70:f6:53:2a:c6:5f:d4:2b:91:f4:11:18:2a:07:
a6:52:35:f8:f1:03:91:23:cf:28:cc:1b:24:1d:51:0b:67:9e:
fe:79:f6:11:01:78:09:90:61:dd:bb:41:03:ee:eb:b1:79:fe:
0b:af:74:7f:fd:06:05:c2:88:2a:11:71:8a:43:66:2f:58:05:
a0:79:7c:bf:33:fa:a1:27:6e:70:cc:d6:c1:e5:b9:99:9e:65:
56:af:13:63:b8:c9:26:65:4b:c1:6e:2a:a2:77:6b:69:39:7a:
71:4c:aa:d5:ea:e9:84:24:0c:2e:3c:40:de:17:a6:e7:43:b9:
30:3e:b4:50:3f:72:1f:b8:6f:84:a7:5a:aa:86:c4:c6:87:42:
4a:12:81:16:72:2e:bd:71:d0:a8:95:e2:28:34:2b:20:38:d6:
de:4f:34:81:b6:23:1d:a3:55:12:88:65:c7:ac:20:aa:9a:7d:
29:93:77:81:23:89:0d:4a:d0:7b:50:e5:3e:c6:c8:2b:08:37:
d7:4d:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:53 2026 by rpki-client