Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D178287A5A7011F1885CABE7CE1D38B0.roa
File: D178287A5A7011F1885CABE7CE1D38B0.roa (raw, json)
Hash identifier: 33cmVVFJwSAjqXbykx0Q1BExzU6oSKQO2LH6fJ4pLyg=
Subject key identifier: E4:EA:EB:CF:39:F7:4C:2C:85:D7:15:73:EB:D9:66:54:09:44:1F:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D178287A5A7011F1885CABE7CE1D38B0.roa
Signing time: Thu 28 May 2026 08:40:02 +0000
ROA not before: Thu 28 May 2026 08:39:58 +0000
ROA not after: Mon 06 Jul 2026 08:39:58 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113281 (0x1ba81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:39:58 2026 GMT
Not After : Jul 6 08:39:58 2026 GMT
Subject: CN=6a17ff62-dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:9e:4d:2e:76:85:c0:cf:ef:0a:56:5f:90:
b8:df:56:e9:ec:23:10:80:a0:fa:aa:95:8a:e0:fb:
d2:04:60:5b:b2:82:82:4e:1c:62:ec:ab:ce:e7:0d:
0e:a2:02:a4:33:4e:b0:de:68:b6:4b:2e:26:dc:2a:
51:65:38:36:00:40:89:b2:e2:0f:aa:c6:21:a9:0e:
f2:93:23:a1:7f:62:61:e7:22:2a:b3:80:33:a0:40:
d1:e4:2a:a4:50:89:c9:01:a9:ed:cf:8c:3d:0a:c3:
84:70:53:82:dc:af:96:f1:a8:4b:8a:7e:2a:0d:ee:
ee:45:27:df:91:45:90:3a:d9:31:76:7f:46:5f:61:
af:c0:bc:2d:b8:98:af:f1:4b:d2:7e:e6:25:7a:5f:
85:ea:2e:ab:a3:9f:45:de:38:2b:39:b1:4b:43:fc:
34:20:d2:e4:8e:67:d5:b1:0c:87:7f:d0:33:fe:e3:
e8:d5:17:72:c6:f2:6d:72:c5:d7:a6:f9:69:96:cb:
bd:ad:df:45:10:3d:63:70:54:ff:69:7c:32:e4:d0:
60:4f:d2:af:cc:92:3d:14:da:99:ce:db:c9:82:88:
42:29:64:5e:ae:4b:27:df:9f:e9:e4:5f:da:36:11:
3a:67:6d:4b:ea:34:0e:70:81:94:34:55:71:19:17:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:EB:CF:39:F7:4C:2C:85:D7:15:73:EB:D9:66:54:09:44:1F:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D178287A5A7011F1885CABE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
76:da:27:45:c0:dd:2d:27:e6:94:f4:a3:d6:3a:f2:57:56:b9:
92:66:96:ac:d4:64:43:8e:30:26:72:6e:cb:76:5a:e3:71:5d:
11:51:3f:9d:da:5c:26:84:19:a6:39:ab:71:03:36:fc:af:ff:
b0:0e:0d:74:33:17:e1:cd:02:8f:51:66:d0:bf:49:ee:eb:75:
8b:e2:4d:e4:ff:ba:b8:64:e1:6b:82:7c:8c:d2:3e:27:d8:59:
a2:c0:78:a6:bf:66:7b:16:27:a2:cf:53:28:f6:c2:ca:c7:8f:
13:ab:a1:e3:47:fe:4a:48:1e:23:93:22:24:7e:ce:f8:c3:77:
19:22:83:b6:bd:89:97:f1:22:00:64:24:f6:7a:92:56:a4:31:
15:1f:90:d5:31:81:99:32:fc:4e:49:32:4c:95:3c:4c:6f:96:
de:61:2e:af:71:f7:21:ed:e7:47:21:56:d4:62:e8:62:68:93:
cd:ad:6b:1b:e0:b3:ba:69:fe:36:25:56:5f:54:97:df:79:61:
9a:39:7e:52:ba:17:12:b7:20:37:51:5a:5f:7f:03:3c:fe:d6:
a1:cf:03:34:f0:96:14:85:55:2b:7f:aa:ac:8f:7d:df:f4:cd:
1e:33:d9:2a:b6:7e:65:79:63:cd:b5:d0:4a:22:09:ec:33:23:
2b:f7:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:14 2026 by rpki-client