Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE252D00828511F1B03DD1DCCE1D38B0.roa
File: EE252D00828511F1B03DD1DCCE1D38B0.roa (raw, json)
Hash identifier: alwEj6Wx7s5n/qYv+5PnQI+2IDbNWlPjeOZ2K7Njtx0=
Subject key identifier: B3:11:E1:BC:14:90:5E:01:67:43:1B:35:D6:25:8F:53:39:6B:8F:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C600
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE252D00828511F1B03DD1DCCE1D38B0.roa
Signing time: Sat 18 Jul 2026 08:51:56 +0000
ROA not before: Sat 18 Jul 2026 08:51:52 +0000
ROA not after: Sun 16 Aug 2026 08:51:52 +0000
asID: 150706
IP address blocks: 156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116224 (0x1c600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 08:51:52 2026 GMT
Not After : Aug 16 08:51:52 2026 GMT
Subject: CN=6a5b3eac-c2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:fc:61:e6:16:d8:c4:18:61:92:b3:6e:60:
d7:25:d3:dc:1f:f5:66:5c:68:1d:fd:e5:32:5b:94:
4f:8d:97:8c:5b:4e:b5:87:e6:3c:4e:c2:ef:dc:37:
01:89:24:a7:fa:1f:cc:8a:af:88:3d:2e:cb:97:c9:
f7:03:c6:b8:c2:01:db:38:27:37:cd:8a:c0:93:5a:
cc:4a:3d:f1:98:df:8e:e8:97:90:4f:05:a8:80:c7:
30:14:bf:01:96:b7:bc:a6:c4:7d:94:43:8a:e7:30:
20:ac:86:bd:6e:90:99:ce:e9:c0:94:b7:c1:fd:0f:
e9:5b:20:a9:c1:75:9a:f6:3a:3a:7a:1d:41:fb:ac:
0e:90:c7:c9:f5:b9:be:4b:a0:19:58:4f:9c:f8:39:
8d:54:96:d8:16:1a:d9:32:1d:49:e5:e3:ee:8d:f4:
6a:bf:99:42:6f:d8:f2:a0:03:48:37:bf:9a:ef:b2:
7f:24:47:74:1a:1a:73:3e:09:a4:8a:e4:07:e4:fb:
be:ea:f7:cf:57:31:46:cc:25:af:e0:26:01:cb:bf:
16:fe:f8:c7:4a:82:0e:76:25:55:86:f6:a8:24:72:
c3:94:2f:17:ab:fc:9c:66:48:85:49:65:26:77:08:
41:83:35:d9:f8:74:d1:a0:fe:94:bc:55:36:bf:19:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:E1:BC:14:90:5E:01:67:43:1B:35:D6:25:8F:53:39:6B:8F:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE252D00828511F1B03DD1DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.3.0/24
Signature Algorithm: sha256WithRSAEncryption
86:48:64:d5:8c:cb:d9:38:e4:91:72:c4:2f:f9:30:26:94:b2:
95:38:c9:58:a9:9c:2b:3e:1a:a7:df:6e:47:2f:7f:c9:cf:b8:
e5:b3:8f:33:5d:f9:2c:f7:a3:b2:fb:d8:b6:df:dc:1b:64:11:
ed:77:43:02:c7:a3:42:d7:8f:4f:d6:7a:1a:6d:fd:23:2f:5c:
b5:61:4e:e9:36:a2:cf:e8:81:3f:a8:05:9d:15:c7:a7:e3:23:
21:20:68:cc:82:89:e1:72:ee:fa:6a:13:7b:7b:74:3e:a3:bf:
52:f3:9a:0d:0e:4e:f9:1b:ad:d6:72:66:92:8a:f6:1e:cd:8b:
25:0b:92:d1:79:53:6b:0d:32:15:60:bf:a8:a2:c1:12:a8:20:
a9:1e:0d:8e:1a:65:6a:b6:27:d0:cc:3a:53:35:e1:66:da:8f:
e2:8b:eb:e0:0e:c2:e6:88:85:5b:4d:5f:24:b1:73:8b:d3:49:
43:ad:78:b0:ad:b8:1b:20:d3:bc:c3:5d:76:62:b5:f0:7b:e8:
53:86:8f:11:e7:0b:0a:9a:9c:56:01:10:72:1a:9c:f3:98:d9:
f1:76:af:0c:d1:89:7c:02:41:e8:61:45:a1:a8:b8:dc:7d:23:
e7:09:24:a5:9c:95:b9:b8:5b:c4:b6:a7:3c:a9:6f:18:5f:b3:
96:1d:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:40 2026 by rpki-client