Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A2990E6A3011F1B0E53BA0CE1D38B0.roa
File: D2A2990E6A3011F1B0E53BA0CE1D38B0.roa (raw, json)
Hash identifier: uTCFuPFOvTxxNmTuIF6i26tDb83FTmUGjp+zYm3Rb8E=
Subject key identifier: 4F:BD:6F:F0:F3:A1:34:7A:E0:0B:B0:DC:6D:9C:94:06:24:13:C9:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A2990E6A3011F1B0E53BA0CE1D38B0.roa
Signing time: Wed 17 Jun 2026 09:42:15 +0000
ROA not before: Wed 17 Jun 2026 09:42:10 +0000
ROA not after: Mon 20 Jul 2026 09:42:10 +0000
asID: 55020
IP address blocks: 156.254.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114316 (0x1be8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 09:42:10 2026 GMT
Not After : Jul 20 09:42:10 2026 GMT
Subject: CN=6a326bf7-d5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:24:ee:c4:8e:94:74:c8:36:d9:0c:80:5c:
05:e2:d6:2b:49:19:72:3d:8d:44:db:16:43:a7:84:
ff:8b:9b:e9:93:51:b3:9e:ed:8e:c8:92:2b:a7:e7:
65:e8:d5:b5:63:56:a7:c1:d0:20:07:08:83:89:8c:
5c:f5:54:eb:41:f7:ab:88:b7:ef:99:bc:c7:88:33:
8f:ce:80:9f:7a:bd:4b:a9:3b:a7:cb:f9:0f:e4:47:
7f:5d:1b:62:e0:8a:66:bc:09:e1:9b:61:1d:0c:4d:
b2:9c:da:57:ff:d5:0a:62:10:67:a4:ae:fe:72:af:
bd:9f:b4:0f:a6:9b:13:0f:f0:bc:97:a3:0c:2f:e2:
96:cb:b8:30:b5:b5:13:c1:1b:45:25:08:dd:f6:ad:
d7:f4:73:43:25:b7:72:ac:cc:af:10:32:1b:fb:1a:
8d:13:bd:d4:92:fa:4f:72:a6:67:43:78:f2:3e:af:
eb:e0:83:a9:7a:99:8e:3a:41:60:62:fa:76:a0:d1:
fc:ca:4c:b0:51:64:c3:08:76:85:a3:17:67:a5:9b:
51:82:1d:18:3b:02:15:5a:3c:97:91:32:31:e1:d6:
f8:a1:9a:64:2c:06:57:a2:06:d8:84:f1:31:7b:c4:
9d:9f:92:ff:f9:f9:45:55:f6:4d:2b:b8:ae:f8:39:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:6F:F0:F3:A1:34:7A:E0:0B:B0:DC:6D:9C:94:06:24:13:C9:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A2990E6A3011F1B0E53BA0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/19
Signature Algorithm: sha256WithRSAEncryption
31:eb:9e:23:35:e1:d9:f2:9d:67:e6:b8:f4:27:22:3b:ec:1b:
56:f4:38:5f:18:03:ae:25:fa:12:a2:85:2f:15:79:5e:77:11:
78:bc:8b:25:0f:b0:81:6d:88:20:bb:5b:7c:5e:70:9e:8d:08:
ff:17:fa:b6:65:a7:82:0c:60:06:94:a3:f6:1c:52:41:fe:0a:
34:99:b6:e0:fb:c2:ca:1e:23:b1:de:94:0a:51:8d:f3:44:cb:
15:8b:e0:ae:de:9d:33:7a:b2:36:e7:f3:e9:90:e2:a5:6c:66:
12:87:16:09:61:54:2e:29:94:20:83:e9:e8:80:5a:7a:35:66:
50:f7:f5:30:f7:4c:bb:57:42:15:93:c2:14:40:63:fb:01:04:
ab:eb:89:04:bc:e7:5a:25:bf:95:48:04:3e:b9:c7:8a:e5:be:
8b:d2:f7:1b:61:3f:1b:c8:be:50:34:0c:dc:06:a5:d4:1f:e8:
53:aa:e8:bb:db:f4:50:da:6f:5c:16:e7:34:eb:df:95:d2:72:
44:45:7a:4c:cf:dd:3c:2c:eb:8d:2b:90:c5:1d:69:6e:8c:46:
08:4f:ac:f5:ca:ba:3e:f8:20:ff:a9:0f:1f:5a:e2:fa:9c:42:
81:2c:8d:b8:a3:92:c7:9e:d8:19:6f:e9:bd:44:20:19:0a:36:
e3:d4:c1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 19:33:48 2026 by rpki-client