Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9B1269C698611F19084FF0FCF1D38B0.roa
File: E9B1269C698611F19084FF0FCF1D38B0.roa (raw, json)
Hash identifier: bGEQKr0MQeSXDIJxN3ubojRZOxGcHVEAYMheLq0qurE=
Subject key identifier: EA:49:39:F5:F4:10:88:1A:CB:97:F1:98:7E:07:47:1D:7C:8D:81:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9B1269C698611F19084FF0FCF1D38B0.roa
Signing time: Tue 16 Jun 2026 13:25:59 +0000
ROA not before: Tue 16 Jun 2026 13:25:55 +0000
ROA not after: Wed 22 Jul 2026 13:25:55 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114192 (0x1be10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 13:25:55 2026 GMT
Not After : Jul 22 13:25:55 2026 GMT
Subject: CN=6a314ee7-a036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:39:f7:75:db:4e:fd:d3:16:9d:03:d9:3d:
55:c8:97:52:38:d7:81:b3:4e:97:37:8b:d9:9a:1d:
b5:61:f1:de:e3:39:d3:c3:d2:0d:44:6a:5b:0f:81:
46:4b:0e:1a:bf:48:78:45:0e:09:f0:29:ac:92:41:
a3:ab:1e:60:93:f5:5d:d1:74:e8:32:18:c9:8e:a9:
cb:8f:bc:83:f9:34:38:c4:21:fc:85:96:76:1c:fb:
b9:dd:02:91:42:02:c9:6b:2e:67:53:72:68:56:d6:
e8:9c:a8:e9:aa:b0:93:af:a5:04:00:1e:58:e3:12:
45:12:e0:c5:28:03:f7:19:e5:ce:38:fd:be:51:cc:
fd:12:a4:c3:4a:73:2a:64:ba:9b:c1:71:31:14:84:
77:dc:2f:41:6e:0c:dc:86:08:84:5d:f2:4f:2f:3c:
22:b3:df:94:b8:3d:d1:47:27:9e:9b:98:fe:5a:04:
1e:88:d4:95:53:c4:12:b6:13:99:cb:d2:26:11:d1:
18:34:cb:20:f2:fc:97:07:7c:b3:f6:b7:88:a3:1d:
7c:3e:01:44:a4:e1:8d:05:44:f1:e3:41:69:a7:8c:
d9:20:ea:c1:26:dd:43:2f:78:06:d0:63:9d:7c:a4:
cd:47:bf:ce:0e:e3:9b:52:85:b9:5e:4a:c6:61:0f:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:39:F5:F4:10:88:1A:CB:97:F1:98:7E:07:47:1D:7C:8D:81:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9B1269C698611F19084FF0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:6d:57:48:72:d5:f9:e7:ae:07:45:53:99:09:9f:ad:60:95:
1d:59:5d:88:10:ec:37:27:90:91:b4:49:29:ee:ec:3c:ba:a9:
e2:c7:2d:e8:37:5d:07:b3:89:7a:46:9b:7c:82:31:3f:97:ad:
67:dc:55:13:00:6f:87:f5:65:1e:62:51:6c:ec:b2:cf:95:20:
c2:91:bb:85:06:fb:47:1b:f5:35:c6:11:82:d8:22:51:0c:9d:
07:b9:39:a3:64:d8:ed:0c:06:6f:58:80:91:1e:8b:5b:97:9f:
71:44:86:e9:0a:b2:16:37:ef:8c:9e:f9:55:34:52:5e:0d:75:
4f:2d:22:3e:28:e3:78:8b:13:a5:6c:8e:69:8e:63:7f:ac:d4:
80:3d:cb:c3:01:35:0b:3f:49:75:5e:12:bc:ca:4d:68:0e:5e:
54:30:a1:79:ad:34:cc:b7:01:bd:f7:e0:0c:b3:0b:77:d8:a3:
f1:ff:fa:31:2f:c9:c7:d3:47:de:d0:12:9d:65:87:0b:b2:e1:
e4:f0:ac:3e:b8:3f:73:df:1b:73:00:c0:0f:92:bb:2d:bf:c5:
8a:98:d3:6d:95:0f:ec:b8:29:7b:61:ee:5a:90:4c:d0:b3:98:
98:65:3c:9e:96:ab:aa:92:df:d7:aa:c6:5c:6b:3b:53:a2:02:
c9:b7:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:48 2026 by rpki-client