Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8400D9E69BB11F1A104C1CCCE1D38B0.roa
File: D8400D9E69BB11F1A104C1CCCE1D38B0.roa (raw, json)
Hash identifier: fm8lH2Jl+eN/mCIX/6p12nNJiwV7ysgv67ZdvqIVVDc=
Subject key identifier: 6F:58:8F:38:5F:5D:CB:8B:BB:8F:1A:A5:90:ED:6D:64:95:A2:7F:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8400D9E69BB11F1A104C1CCCE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:44:54 +0000
ROA not before: Tue 16 Jun 2026 19:44:48 +0000
ROA not after: Mon 27 Jul 2026 19:44:48 +0000
asID: 63023
IP address blocks: 156.229.119.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
156.233.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Jun 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114279 (0x1be67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 19:44:48 2026 GMT
Not After : Jul 27 19:44:48 2026 GMT
Subject: CN=6a31a7b5-c502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:b8:cd:84:03:96:56:6a:5b:09:2e:25:d8:
10:7d:97:44:65:61:46:5d:fd:37:4f:9d:78:3d:79:
4c:96:21:ba:2e:30:02:c3:dd:57:2c:5c:81:03:09:
be:16:e0:ff:8d:4a:3a:4b:8a:19:6f:63:aa:36:00:
e8:30:49:df:bf:55:d8:61:e9:ea:5c:da:e2:2c:13:
df:d6:67:3b:8c:5d:29:b8:95:ae:36:71:6e:7b:66:
c8:40:6b:0f:c6:18:0f:7b:b7:e1:19:4d:60:e3:b5:
8c:0e:61:52:45:63:93:08:d6:8b:ee:0e:26:a8:e1:
6c:60:76:b3:ef:35:03:2a:68:af:ab:b1:37:50:3c:
05:cd:30:ae:c2:10:2e:fa:b5:9d:dd:a4:ec:ee:78:
18:c9:7d:ed:23:bd:e1:bc:76:ee:22:48:28:57:c6:
6c:62:e5:56:03:92:d3:92:cb:0e:79:a7:b8:e4:ac:
43:78:59:6e:80:3d:04:62:1d:d6:4f:b0:c9:2d:b1:
e4:5e:e3:5a:aa:a4:0e:1d:ec:e3:8b:f6:db:41:03:
bf:f9:53:0d:4b:44:ed:f2:25:2e:7b:0a:cc:f5:aa:
96:44:49:30:96:ee:d5:03:cb:3e:0d:b0:d2:93:9e:
1b:18:e8:18:c7:f6:96:6f:ee:2f:a8:1e:da:0e:cc:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:8F:38:5F:5D:CB:8B:BB:8F:1A:A5:90:ED:6D:64:95:A2:7F:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8400D9E69BB11F1A104C1CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.119.0/24
156.229.239.0/24
156.233.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9b:02:9d:6a:04:cd:18:72:6a:89:de:ee:a1:0d:01:76:82:
79:8b:1e:60:5d:90:8a:47:d3:8f:fe:30:1f:ad:ec:15:d2:cd:
fa:e7:1f:8d:21:b9:7e:18:21:a4:d7:82:c2:04:e3:5c:03:57:
a0:97:76:2e:95:11:56:e5:68:74:5f:1f:2d:2c:4d:13:24:4b:
68:26:31:e1:e1:f6:f4:0e:6a:96:c1:ee:d9:07:ca:5a:6c:49:
8e:48:12:7d:0c:b9:94:4b:9c:16:80:b6:b7:9d:60:dc:21:85:
cb:a0:e2:f1:52:ef:76:15:5c:61:a5:19:55:e0:66:2a:aa:45:
b2:f7:f3:64:ed:ea:3d:22:61:a0:67:3b:6e:fb:64:5a:d8:d5:
5b:4b:82:3e:dd:e4:e5:04:71:e5:14:36:18:77:16:c6:7c:d4:
07:70:2a:45:d5:56:8f:e1:4c:b4:3b:43:bb:8d:41:d2:1c:0e:
4c:85:6d:e8:c4:d8:3b:6a:72:f8:64:95:3d:38:f4:4b:32:76:
3b:01:5f:66:81:92:f4:59:8b:d2:a5:e1:f5:89:74:a1:40:8e:
b1:18:bf:80:7c:8f:46:6a:35:19:f8:b2:cd:be:02:37:2c:78:
7b:7c:36:cb:4c:5a:46:94:00:9f:5c:b1:b6:1e:5d:7a:47:ac:
7a:e5:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:21:07 2026 by rpki-client