Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64898736448611F1BC0EE809CF1D38B0.roa
File: 64898736448611F1BC0EE809CF1D38B0.roa (raw, json)
Hash identifier: nEFvJAC/nWRpx6FNV+VpF3BWd7LsqLIe2sA2YwyMlZg=
Subject key identifier: 55:FF:A1:1A:3D:AC:D2:9A:EF:BA:50:DA:BC:48:EE:D9:B2:E3:1B:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B034
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64898736448611F1BC0EE809CF1D38B0.roa
Signing time: Thu 30 Apr 2026 11:19:03 +0000
ROA not before: Thu 30 Apr 2026 11:18:58 +0000
ROA not after: Thu 04 Jun 2026 11:18:58 +0000
asID: 211961
IP address blocks: 156.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110644 (0x1b034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 11:18:58 2026 GMT
Not After : Jun 4 11:18:58 2026 GMT
Subject: CN=69f33aa7-8a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:c2:a2:71:d6:70:bd:32:f5:6b:3d:0d:c0:
40:12:e6:b0:fb:9e:77:e5:b7:5e:f0:59:4c:49:e1:
3a:2b:df:7d:d1:03:2b:e0:79:7a:09:1f:be:af:11:
a0:02:9b:53:48:5d:95:76:8a:07:65:6b:59:9b:be:
d5:7d:b6:4d:70:26:3c:b4:10:13:92:c9:cc:26:04:
23:2a:ec:3b:94:5d:59:1b:c3:8c:97:7a:96:10:06:
ef:d3:92:52:88:30:ce:6c:ba:4f:b2:7f:14:c4:46:
b7:c5:13:4b:6a:70:87:c5:7d:34:b6:a0:da:63:ab:
1c:db:7d:82:97:55:19:9e:c5:89:cc:ab:c1:f4:45:
eb:49:b7:92:ed:71:b0:5b:a3:e3:75:a0:a8:05:0b:
3a:df:d1:0f:45:1b:21:62:4f:72:3f:e9:2e:03:bb:
a5:3e:09:b5:99:fd:57:f7:28:85:35:94:01:91:cd:
83:0e:cf:4f:fa:4b:b0:e1:91:70:61:07:bf:af:a5:
4d:d1:84:8a:d8:24:6a:7b:4c:db:64:54:bd:d2:f4:
07:b2:54:a7:e1:85:51:3e:2d:04:75:ea:b7:19:0e:
d2:85:07:95:ac:6b:f6:dc:58:c6:8f:29:59:f7:2b:
9c:4f:75:ab:67:5a:89:8a:fc:d0:66:db:82:99:62:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:A1:1A:3D:AC:D2:9A:EF:BA:50:DA:BC:48:EE:D9:B2:E3:1B:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64898736448611F1BC0EE809CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
37:39:7d:a2:22:e6:4b:2c:1c:e6:2e:bb:7e:f3:c4:36:ff:12:
4b:c7:7c:93:14:bb:a8:6f:dd:55:8a:85:d4:fb:1a:1a:26:f2:
75:0d:eb:3f:76:1b:7d:9e:b9:6d:56:71:df:d6:e1:29:01:1f:
3d:6e:aa:83:43:f6:28:7e:be:81:69:79:b9:1a:e6:82:fe:6a:
c6:78:d5:32:08:0b:56:ad:e3:5d:5a:db:df:0a:82:f6:d7:cb:
29:41:fd:25:37:51:ba:a0:c3:cc:b4:2e:b6:6c:3c:7a:c6:78:
69:0d:b5:4b:91:ad:ab:18:bd:d4:9b:2c:06:c2:7a:03:e4:ee:
a8:6f:fd:c4:68:47:27:f8:a9:3c:5b:e7:d0:10:f8:84:07:7a:
b7:28:48:93:d3:c2:4a:bc:69:d9:af:ef:2f:63:56:1a:61:52:
3c:54:31:8e:a0:16:3e:28:a5:9b:7c:45:02:9a:5a:88:53:83:
15:49:b8:89:4d:71:1d:75:68:22:32:82:26:db:16:ba:3b:ab:
a4:24:d9:95:d4:da:2c:b8:a4:9f:44:42:77:42:25:87:dd:17:
4d:d6:1b:be:2a:3e:e1:37:1c:98:f3:e5:c7:ac:aa:93:d1:f4:
7a:c6:aa:ac:4d:d7:4f:96:5c:64:69:c7:3a:bc:37:af:9c:d1:
58:a5:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:25 2026 by rpki-client