Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A0F120442EA11F1A1E859C2CE1D38B0.roa
File: 6A0F120442EA11F1A1E859C2CE1D38B0.roa (raw, json)
Hash identifier: 4odK8KXwzWe5rY60y9vyx2gy13WsXecyt8eEmvqvsNU=
Subject key identifier: 01:D5:18:AE:DC:82:D1:44:20:4C:2E:4A:3D:F2:27:6E:20:C9:64:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A0F120442EA11F1A1E859C2CE1D38B0.roa
Signing time: Tue 28 Apr 2026 10:10:00 +0000
ROA not before: Tue 28 Apr 2026 10:09:54 +0000
ROA not after: Thu 04 Jun 2026 10:09:54 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110494 (0x1af9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 10:09:54 2026 GMT
Not After : Jun 4 10:09:54 2026 GMT
Subject: CN=69f08778-d858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:e9:d8:a5:3b:3e:e7:62:e3:b5:6f:aa:8a:
90:9b:08:88:64:90:b7:df:4f:3b:0f:d1:dd:52:a1:
8b:fa:6b:2d:31:bc:e4:e3:f9:f3:7b:d5:ac:bc:3a:
6e:8b:33:cf:68:bf:cc:c5:03:36:8a:b9:bc:45:8e:
20:bd:5f:6d:b4:1b:2d:b6:3a:f4:b9:0c:12:6d:e7:
ba:c2:1c:5d:b5:20:3a:6f:11:53:48:ba:47:4a:d8:
49:2a:ae:d5:79:a5:42:82:38:13:8b:89:fb:50:73:
3f:38:fa:ac:98:07:fa:0f:b1:cd:24:ba:eb:45:e5:
0d:26:34:25:c2:1d:65:9e:8e:2f:6f:a1:87:ca:5b:
2f:2e:25:98:19:97:36:89:02:55:13:f6:d6:17:af:
97:4f:54:40:15:83:80:7b:89:4c:98:a4:42:c7:bf:
99:c6:72:bd:b1:98:ac:03:d2:57:8c:3a:85:42:42:
22:b6:95:99:83:13:84:2d:1e:e3:22:c3:db:b1:c7:
f7:51:12:13:be:ca:54:a8:7b:d1:8f:29:0d:87:3f:
51:48:15:e6:5a:da:78:8e:ca:70:a6:27:32:0b:59:
2b:8f:6b:da:1b:7c:c5:98:38:99:b3:fa:9c:d3:f3:
4a:db:93:44:1e:d3:f2:b4:f6:20:cb:dd:39:ca:6a:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:18:AE:DC:82:D1:44:20:4C:2E:4A:3D:F2:27:6E:20:C9:64:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A0F120442EA11F1A1E859C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:c9:63:a1:86:74:92:5f:54:b0:30:4a:77:18:ee:67:bd:7b:
72:df:84:9c:3d:b2:4d:4a:bc:78:f3:27:6c:d3:95:93:2f:6d:
bc:5c:c6:a4:f9:38:1d:e0:d7:b8:24:94:4f:91:ea:6a:2f:47:
14:1f:77:96:dd:1d:13:83:36:0f:1f:f0:ec:44:5b:0c:02:fb:
66:4e:de:86:27:39:48:68:30:13:86:43:39:e8:4f:f7:85:2c:
0f:fc:7b:55:08:f8:54:9b:dd:21:49:76:8d:87:eb:22:f7:37:
95:49:ad:b3:9f:0d:00:60:e2:b2:c9:8a:bf:65:15:7d:64:4d:
55:ac:25:a4:da:2c:e8:35:44:de:75:06:de:3c:14:a1:bf:16:
f5:bb:eb:02:0a:e1:da:23:35:07:72:f4:1f:de:6c:9c:fb:cd:
f7:15:e7:b0:d4:32:33:59:fb:99:e7:b0:df:24:ea:fa:eb:fa:
27:8d:ef:a5:92:21:10:43:48:77:8f:e2:0f:49:7e:8b:fe:94:
f6:b7:bc:ee:3b:06:fd:15:19:00:fe:f3:b7:1e:31:77:e9:f5:
13:10:d8:6b:7d:ed:f3:a5:f8:8f:d5:ca:56:99:02:08:18:26:
df:8f:24:22:a5:52:e9:d6:c7:2e:c3:e4:80:73:ff:08:cc:ab:
c3:41:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:17 2026 by rpki-client