Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6182938C4C8A11F188AAEFC7CE1D38B0.roa
File: 6182938C4C8A11F188AAEFC7CE1D38B0.roa (raw, json)
Hash identifier: ya26SUY3/tXyBZypk2TJXB+NAC/cfpDq0/gVtfeRytM=
Subject key identifier: 9C:B6:77:EE:E8:5D:22:11:37:43:1B:95:6E:49:02:48:5B:DF:91:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B36F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6182938C4C8A11F188AAEFC7CE1D38B0.roa
Signing time: Sun 10 May 2026 16:07:45 +0000
ROA not before: Sun 10 May 2026 16:07:41 +0000
ROA not after: Wed 10 Jun 2026 16:07:41 +0000
asID: 213169
IP address blocks: 156.229.160.0/21 maxlen: 24
156.229.160.0/22 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111471 (0x1b36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 10 16:07:41 2026 GMT
Not After : Jun 10 16:07:41 2026 GMT
Subject: CN=6a00ad51-a892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:17:27:cb:f8:50:a5:58:cc:67:af:74:5b:
98:0a:41:24:2b:be:db:04:45:88:ad:be:6f:2c:03:
34:a2:e7:8d:bc:6b:72:8b:52:eb:f5:49:31:58:72:
29:75:83:7c:72:7d:f8:0c:77:24:14:1d:48:dc:88:
e5:b4:e5:1a:dd:3a:b4:1b:96:5d:bd:b8:ed:2b:54:
3f:30:c2:4c:e1:64:31:e6:9c:bd:a9:39:56:e6:81:
81:fb:ca:52:48:ac:9a:46:4d:a7:aa:b8:27:2c:db:
0a:e5:31:4f:eb:8d:9c:cc:19:52:33:89:db:3c:6a:
f4:45:77:c6:cc:70:84:97:61:19:56:bf:3a:d9:40:
3f:c3:3c:ee:df:40:b1:f3:2f:5d:fe:75:33:e1:41:
95:39:25:f2:b6:b4:f9:49:b0:09:d5:c4:61:5d:e3:
14:a3:68:8b:db:f0:08:10:7d:a4:c1:2e:38:14:9a:
b9:0c:23:4a:85:ec:45:c9:23:aa:d9:e0:d5:1b:64:
36:75:7a:33:bc:d5:c0:93:ec:45:79:5e:b3:66:52:
e2:5d:fb:1a:2f:f4:f6:de:ef:81:93:8d:3f:25:f7:
d6:27:b4:ea:0d:d7:f0:98:fb:2d:3d:ba:e8:df:11:
00:48:12:5e:ff:02:0c:02:36:c5:19:43:4a:60:5b:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B6:77:EE:E8:5D:22:11:37:43:1B:95:6E:49:02:48:5B:DF:91:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6182938C4C8A11F188AAEFC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/21
156.231.112.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f0:ea:3d:ad:59:36:01:31:94:db:f6:61:4d:58:f6:fe:34:
e4:73:20:20:58:3d:c3:4f:84:8a:c7:a6:d4:88:d9:b3:22:1b:
57:f0:a9:0d:e0:e2:69:1e:8d:06:de:4c:37:7a:06:22:63:c2:
ba:a2:5c:2a:18:a4:ff:76:d1:4e:61:f0:c3:f1:04:21:e6:2b:
01:fb:69:fe:09:74:11:3d:80:b9:69:e0:e7:c7:88:05:cf:53:
67:1a:f3:98:3a:4c:db:49:da:c9:2d:e0:15:20:ba:83:8f:f1:
0d:1b:2a:9f:7e:c7:8c:8c:56:e0:74:13:6a:6a:fe:36:92:c0:
eb:c9:17:e5:30:0b:28:4f:d7:59:f5:5c:13:4b:6f:e9:2d:04:
56:2c:af:fc:eb:8a:29:db:f4:29:10:0f:23:73:aa:3a:dc:99:
69:d9:18:70:ee:8e:af:e8:22:fb:a4:75:42:87:3a:4a:e8:0c:
9d:61:ea:66:9c:56:0c:94:98:7b:0a:50:e9:de:12:a6:d3:d4:
bb:78:5b:a0:bb:f5:71:d7:48:ed:ed:f8:90:c4:55:3b:55:61:
40:84:9a:67:0c:c8:ae:2e:e9:6a:38:b1:d3:26:42:d9:97:c7:
b9:9f:1b:07:90:39:bf:85:32:4e:8e:e9:4a:6f:25:6a:81:1e:
e0:0e:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:50 2026 by rpki-client