Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A8991F64A8211F18FEA8EE8CE1D38B0.roa
File: 6A8991F64A8211F18FEA8EE8CE1D38B0.roa (raw, json)
Hash identifier: iDiLJlyKfN8VXds0cocWt30iU9M5GdgCBWgk7IjMZi4=
Subject key identifier: 5F:DD:08:DE:0E:1C:1F:01:5F:6A:C6:0A:80:44:54:27:30:02:EB:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A8991F64A8211F18FEA8EE8CE1D38B0.roa
Signing time: Fri 08 May 2026 02:05:42 +0000
ROA not before: Fri 08 May 2026 02:05:38 +0000
ROA not after: Fri 15 May 2026 02:05:38 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111269 (0x1b2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 02:05:38 2026 GMT
Not After : May 15 02:05:38 2026 GMT
Subject: CN=69fd44f6-01db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:f6:65:d7:96:96:75:5f:09:68:f7:0a:c5:
50:e6:2c:91:0c:c5:90:d9:39:d3:b8:57:f4:8f:d4:
3f:a5:41:a9:f2:5d:21:51:9a:8f:0d:f4:62:c9:99:
a3:d8:1a:44:74:f4:a9:e7:3a:74:26:1e:8e:35:6c:
ba:2a:8e:f4:6e:83:ea:68:91:a3:ff:d5:2c:3d:a0:
dd:f2:d6:3d:4e:36:46:2b:b1:a5:d3:a2:75:50:d4:
3a:53:12:59:a5:72:12:fe:7d:6d:a4:a0:68:96:5e:
bf:00:a3:a5:4e:34:9a:b3:21:ee:1b:ce:3e:57:1a:
f6:5a:9f:0e:6e:83:6d:76:8d:f5:46:a8:5c:f7:3c:
81:79:a8:d4:77:a3:bb:f9:5c:06:f9:b4:4a:73:ba:
18:f5:d7:3a:47:96:4b:3f:ec:88:7a:28:3c:6e:b4:
7b:c4:c4:53:72:fb:1c:a7:d5:39:3b:ec:bc:d9:9e:
26:79:e3:8d:f3:dd:01:47:a7:74:0c:2d:21:be:c3:
dd:f4:f4:16:a0:1a:23:a9:72:25:e1:cf:e0:df:4d:
b4:92:ba:4c:f3:2c:a2:1f:6e:c0:16:5c:f3:dc:96:
1b:b0:41:fd:15:0b:7b:12:e6:a1:e0:a2:f0:19:33:
fe:4b:e3:67:74:4c:fb:ca:8c:09:70:60:72:df:28:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:08:DE:0E:1C:1F:01:5F:6A:C6:0A:80:44:54:27:30:02:EB:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A8991F64A8211F18FEA8EE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
ab:10:9c:cc:39:73:3e:19:39:aa:70:e4:92:ca:c5:07:ba:d5:
b3:30:de:87:76:6d:6c:0c:1b:66:1f:fe:77:a1:29:12:f0:a4:
f6:33:15:0e:83:bf:7d:33:60:a3:86:ad:8b:f1:25:d6:95:88:
23:78:2c:ee:bf:26:55:ee:16:f5:ea:73:6d:48:50:5d:77:66:
e4:7a:90:be:6c:9b:4a:3e:96:a8:ec:7f:1c:fe:f3:d1:42:e3:
23:3d:52:97:b6:a5:42:bf:ea:ca:a0:d0:74:27:ab:c9:ca:d5:
81:81:1f:e2:84:46:9f:06:69:f0:62:2c:89:da:b0:8e:98:1c:
ef:44:a3:41:e9:d9:47:45:d9:ed:71:03:0e:f4:66:03:5f:b9:
a5:03:17:2d:86:1a:91:f6:aa:90:3b:74:c5:c9:6b:83:c4:fe:
94:b7:08:3a:62:f5:b0:48:af:01:02:4e:e1:96:3d:e4:a6:54:
34:cb:e0:a7:bc:a2:f3:d0:db:82:57:17:75:33:e6:50:d5:38:
cf:d9:fd:16:fe:23:06:d9:37:bc:bc:9c:87:14:e7:ca:e4:4a:
7d:3d:fa:54:4f:d2:fd:52:fa:7e:57:f2:70:68:75:dc:9e:53:
62:8f:72:d8:2a:35:91:2b:30:74:fc:e4:0f:f5:89:b9:88:47:
b6:0f:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:27 2026 by rpki-client