Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6533EE0E454B11F1A6E29CB9CE1D38B0.roa
File: 6533EE0E454B11F1A6E29CB9CE1D38B0.roa (raw, json)
Hash identifier: E3pEKl86ULbkoXQZtgkrJewWKHhoHVeTZVtYj1riw04=
Subject key identifier: 32:C0:CA:59:DE:55:BF:15:1B:D3:BE:9F:EA:93:0C:E7:C3:32:04:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B06B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6533EE0E454B11F1A6E29CB9CE1D38B0.roa
Signing time: Fri 01 May 2026 10:49:15 +0000
ROA not before: Fri 01 May 2026 10:49:10 +0000
ROA not after: Fri 05 Jun 2026 10:49:10 +0000
asID: 40779
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110699 (0x1b06b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:49:10 2026 GMT
Not After : Jun 5 10:49:10 2026 GMT
Subject: CN=69f4852b-ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:75:f0:b0:a3:c2:d9:15:20:1b:7c:c9:92:
45:ca:17:c8:c4:13:11:3a:0c:3e:b8:25:28:61:e4:
27:81:e2:e6:e5:5c:c8:70:7b:b1:8b:79:0b:a9:4c:
55:3f:1f:f6:8e:35:a5:83:1a:8c:95:b1:32:8e:4c:
3c:f7:a9:fb:25:44:f8:15:77:d4:d8:f0:e1:49:f8:
95:bb:4a:35:88:07:5f:59:27:5f:40:3b:c3:a7:98:
93:2a:18:08:03:d7:a1:f2:55:ff:b1:ba:1f:a1:24:
ab:8d:37:49:43:0d:4a:08:99:b1:32:60:3a:25:11:
74:bd:f2:45:b9:ee:a0:36:e8:9e:c4:7c:dd:8c:22:
ba:5c:ba:0d:8e:95:5b:f5:e5:47:be:11:ef:3d:3a:
c2:13:00:c1:7b:97:8d:be:e2:a8:3c:5b:27:52:de:
5f:84:bc:3c:5f:0d:e1:92:79:78:1f:e5:9b:30:c1:
33:89:d4:2b:29:d9:6c:ff:e7:d0:29:0b:c6:c9:de:
2d:76:79:dd:f4:2a:39:da:b5:56:c3:31:d6:21:bc:
4c:17:41:27:98:7a:8d:c6:27:37:5a:2c:27:52:a4:
13:18:b0:a4:81:f9:0a:b1:32:66:3f:67:9d:4b:04:
19:01:91:a5:1c:96:a7:3c:a0:31:51:01:d4:1f:15:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:CA:59:DE:55:BF:15:1B:D3:BE:9F:EA:93:0C:E7:C3:32:04:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6533EE0E454B11F1A6E29CB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
03:91:90:84:58:14:6f:75:f5:03:a8:10:03:af:36:f3:b9:a6:
ca:0e:e0:7f:b1:1d:dc:a4:5d:e2:fc:09:ea:b5:33:31:62:29:
db:43:9b:eb:d8:5d:71:6b:0a:12:47:94:52:a5:d4:4d:ea:ed:
2c:18:39:b7:ec:1a:1f:95:85:43:e2:10:1c:bf:e8:c3:92:15:
59:41:58:95:11:38:7f:63:9b:f4:88:d8:de:e4:6a:e6:b4:7e:
7f:5e:60:37:3b:51:97:a6:b3:a8:c1:12:55:2f:30:6d:4c:e3:
81:d1:9c:e1:50:66:1b:1c:f1:ce:5e:bb:ce:5a:41:49:2d:54:
fa:2e:8e:d5:f2:a8:0d:06:64:c5:eb:01:04:19:01:e1:4d:02:
54:e5:a5:29:e1:54:0c:72:09:cd:4a:c0:40:a9:41:0e:f4:cb:
d8:a4:6e:6f:ee:e9:3d:33:3d:46:48:30:be:50:7c:00:bb:9a:
2e:f4:85:68:18:2d:cf:3e:74:c7:d3:76:6e:a4:cd:82:27:a9:
04:11:db:a5:b7:51:b1:26:f5:13:df:dc:1f:5d:b2:66:d9:cd:
f3:23:1d:72:69:60:05:07:86:aa:b7:71:05:5d:9e:06:05:d3:
f5:09:51:dc:da:1f:4d:72:e8:de:68:d4:40:d3:77:13:76:99:
37:a4:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:52 2026 by rpki-client