Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F80629405A6D11F1B8F368D7CE1D38B0.roa
File: F80629405A6D11F1B8F368D7CE1D38B0.roa (raw, json)
Hash identifier: XOxyBfeI9U4xR7nzX2505X31cR4Hgu/UkTxWbI4AHqs=
Subject key identifier: B5:4E:F8:01:B2:6E:35:4D:5D:70:35:EC:74:E9:82:3E:1E:B8:CE:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F80629405A6D11F1B8F368D7CE1D38B0.roa
Signing time: Thu 28 May 2026 08:19:39 +0000
ROA not before: Thu 28 May 2026 08:19:34 +0000
ROA not after: Sun 05 Jul 2026 08:19:34 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113267 (0x1ba73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:19:34 2026 GMT
Not After : Jul 5 08:19:34 2026 GMT
Subject: CN=6a17fa9b-88e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:be:59:a1:83:4d:f7:c8:c8:45:44:5f:b0:
d9:d3:16:38:bc:92:ac:ea:dd:84:6c:d2:98:66:55:
66:ff:9d:ea:32:85:4e:8d:92:7f:2f:61:30:f3:58:
eb:10:ca:b5:61:75:ad:22:78:02:11:25:24:c8:09:
46:97:07:27:5f:f7:97:0e:aa:22:6e:b2:60:90:28:
34:4c:08:1a:59:20:0e:68:dd:64:c8:c7:85:8f:2a:
61:67:dc:be:bf:c9:2e:0a:f1:9b:a5:2a:bf:70:cc:
79:ef:fb:c1:5e:54:80:e3:3f:2d:41:ea:2a:88:70:
66:13:d1:56:61:1e:c3:50:97:b3:bd:6a:6b:8f:7d:
b0:06:78:12:a9:6f:0e:fa:57:77:73:fc:2d:51:1e:
f2:f0:a5:e9:6d:ca:15:8d:c6:ff:c9:1c:32:67:c6:
67:47:71:27:fb:47:0a:e5:e4:99:73:80:c4:11:66:
5a:20:82:db:83:39:15:14:7c:c7:7d:38:5b:20:50:
ac:9c:c3:82:6e:66:fd:38:af:2a:82:3a:61:4c:7f:
88:be:a8:8f:03:7e:6e:35:3a:9d:30:3d:db:b1:36:
54:c4:aa:f2:09:9f:78:14:c7:62:18:be:ae:95:87:
b0:75:c4:14:0b:43:54:29:b1:f1:9e:6f:e9:4d:28:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:F8:01:B2:6E:35:4D:5D:70:35:EC:74:E9:82:3E:1E:B8:CE:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F80629405A6D11F1B8F368D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:6c:51:8d:65:87:58:b0:fe:28:d4:c1:45:b9:47:c6:9f:32:
d3:2f:7b:a0:03:94:64:00:d6:77:cd:52:1e:87:ff:8f:63:8a:
da:24:66:b4:d0:f3:4f:d6:02:ee:b0:e4:4a:22:b8:10:64:6d:
b9:d7:b8:bc:43:45:30:58:d9:2f:41:f1:fd:7c:91:a6:d9:80:
0d:f3:49:d4:11:e8:62:fd:3a:94:3a:00:29:b7:3b:f9:1f:2c:
7b:93:f2:ae:2f:a4:ee:4c:43:f6:b5:3d:07:a0:a7:84:af:ca:
c4:b8:b2:70:35:0b:4b:fc:0b:c3:da:74:3f:43:73:7c:01:cd:
7e:86:11:6b:c5:f6:2b:5a:f6:40:6c:d5:3d:aa:50:03:92:2e:
e5:99:c5:88:da:c1:e1:93:2d:2e:fc:c5:9f:c8:81:19:84:d1:
58:f5:57:80:09:dc:65:13:32:22:85:be:56:7d:00:42:df:bc:
e3:45:24:7e:65:e2:13:da:1b:03:05:ab:6b:e9:ad:0c:d0:32:
26:cf:e7:4d:cf:ce:49:60:d3:4f:38:cb:a4:67:7c:c7:25:d8:
27:87:97:1d:91:28:b1:0e:13:43:c9:55:e5:b7:6d:b1:16:91:
15:7b:55:41:8b:a1:b7:f7:bf:59:5d:88:a0:e3:d1:f5:91:b1:
82:2d:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:56 2026 by rpki-client