Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5A7D980590E11F18C135FFBCE1D38B0.roa
File: D5A7D980590E11F18C135FFBCE1D38B0.roa (raw, json)
Hash identifier: LIjwwKQpROeqsBjgSz0xTUIQWq+WpvfeQXpa2x6eDwE=
Subject key identifier: 5C:A4:28:4A:09:09:95:1E:89:B3:D1:27:D2:41:25:03:02:62:34:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5A7D980590E11F18C135FFBCE1D38B0.roa
Signing time: Tue 26 May 2026 14:26:08 +0000
ROA not before: Tue 26 May 2026 14:26:03 +0000
ROA not after: Thu 04 Jun 2026 14:26:03 +0000
asID: 23764
IP address blocks: 156.238.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113176 (0x1ba18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 14:26:03 2026 GMT
Not After : Jun 4 14:26:03 2026 GMT
Subject: CN=6a15ad80-1035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:8e:11:77:b2:44:32:8f:1a:2a:8d:94:23:
5e:2d:2b:18:f6:aa:5a:b2:87:81:29:dc:c2:aa:a8:
34:c5:ef:e3:9d:27:32:2a:cc:16:f3:03:ce:d6:46:
a2:29:3d:9e:29:1f:08:02:53:f4:0a:9e:f8:e1:2d:
94:e6:3e:f8:93:92:46:26:f8:a2:81:98:48:94:79:
06:ad:45:c2:0e:8a:93:ae:ce:5c:f4:c6:29:fd:9c:
d4:f4:52:c9:b5:0a:ca:74:66:57:92:45:2d:76:19:
7c:2b:48:f1:47:2c:19:51:2a:cf:c2:ea:3a:75:e6:
20:33:51:1c:2d:f0:02:23:77:c5:35:36:20:2b:02:
57:ea:09:35:c4:d9:18:35:cf:e4:f6:16:fa:f3:3c:
85:4c:65:05:3e:34:70:27:1f:79:d1:68:d4:e6:80:
c9:46:1c:b8:f5:37:80:98:d0:e9:b2:74:2a:b2:de:
c5:92:b6:a3:d1:76:4e:35:90:01:c5:7e:b1:14:ab:
7c:75:b5:7a:11:37:9f:d7:70:20:07:1d:f1:12:a2:
5a:2b:e0:09:47:85:5a:02:0d:63:22:e2:1b:7e:d0:
a0:fa:98:a1:7c:69:3a:c4:9b:39:86:8b:15:9c:ca:
cc:a7:6e:63:eb:77:b5:bc:ae:41:29:5d:d0:01:0f:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:28:4A:09:09:95:1E:89:B3:D1:27:D2:41:25:03:02:62:34:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5A7D980590E11F18C135FFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:25:27:31:4a:a0:09:01:79:aa:b5:a1:4d:e9:66:fa:3c:e8:
fe:ab:27:0f:fa:da:d2:1b:70:48:12:b6:61:12:f4:0a:9c:30:
23:60:b7:94:cd:5e:96:14:91:3c:c8:a1:aa:cb:c7:f6:c5:26:
89:52:45:cf:dd:d6:35:b2:7f:0c:e9:87:8e:fa:1a:57:eb:03:
46:6d:e1:6a:6f:0b:fd:d9:22:a5:31:fa:60:e6:59:43:81:d0:
93:ee:d8:6b:6c:56:23:19:10:16:bc:93:aa:19:cc:9f:a8:2c:
74:b7:55:d3:5e:18:8d:0d:85:12:6a:c1:99:7b:1f:bb:83:52:
c0:7b:bf:dd:c5:a2:39:f2:a7:4d:12:88:fc:b3:4e:a2:bb:49:
2d:14:81:e0:d4:af:13:9e:6a:12:28:a1:d2:62:d2:bb:be:20:
22:f7:b6:47:14:72:62:48:55:10:00:61:96:6b:42:c3:9d:a1:
74:9a:ed:2b:2a:3f:57:51:fe:6f:0f:32:00:1e:3c:fe:3a:a4:
b3:d5:28:ce:5a:c5:15:c6:0e:6b:cd:23:24:d7:cf:5e:91:3c:
e8:12:1a:9e:17:68:9a:c2:04:59:09:bd:03:c8:25:62:40:a0:
a4:a3:e4:53:2a:90:54:97:26:14:e3:73:22:7e:8d:48:3f:11:
1e:7d:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:18 2026 by rpki-client