Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7484F622456F11F1BA8E810FCF1D38B0.roa
File: 7484F622456F11F1BA8E810FCF1D38B0.roa (raw, json)
Hash identifier: axCvEjsLyYsXBkcfftQwEprl5jrbl1tfvskoNfm/EqU=
Subject key identifier: D1:C3:C8:55:E9:D7:81:E1:93:47:24:79:99:8D:A7:54:4B:B8:89:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7484F622456F11F1BA8E810FCF1D38B0.roa
Signing time: Fri 01 May 2026 15:07:23 +0000
ROA not before: Fri 01 May 2026 15:07:18 +0000
ROA not after: Thu 04 Jun 2026 15:07:18 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110796 (0x1b0cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 15:07:18 2026 GMT
Not After : Jun 4 15:07:18 2026 GMT
Subject: CN=69f4c1ab-407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:36:e0:ec:0e:7b:a0:f1:41:43:c9:45:16:
16:3f:a2:78:b2:e3:e3:a2:d9:9c:f2:2a:2d:1c:86:
23:35:b9:e0:1f:70:e0:6d:18:fa:e2:c8:21:20:33:
7c:eb:61:8e:cb:d3:ae:9f:f5:82:c2:3d:ca:03:c3:
e1:89:9e:85:f2:20:15:cc:0b:d8:40:df:3b:8b:f5:
e5:09:09:14:d0:a8:df:3e:18:f5:9e:80:df:ac:0c:
36:30:ab:93:bd:d4:ab:4d:6b:0b:7d:ae:69:37:5f:
bd:35:5b:f0:61:a4:ba:2f:33:c1:be:bc:87:59:0c:
ab:08:5e:0f:de:43:23:13:d2:91:f7:2b:c8:9c:1e:
15:65:99:39:15:9f:42:ec:96:11:5b:e7:12:a3:5a:
e5:8e:fe:95:ce:06:15:87:0b:b3:30:51:24:e4:fa:
4f:34:55:01:a6:af:a8:59:39:9b:ed:a7:78:d2:7c:
43:67:3b:8a:2a:5f:5e:d7:36:9d:8a:7e:d4:1a:f5:
2e:a4:3c:1e:3c:e2:81:1d:1c:68:b9:4a:07:9e:af:
73:17:b3:79:bc:07:71:80:be:d3:74:97:b9:c0:19:
43:63:a9:64:b3:97:a0:88:b8:91:09:c5:b7:d9:d7:
f8:f4:9b:98:cf:cf:5b:43:94:0b:8f:17:11:13:1c:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C3:C8:55:E9:D7:81:E1:93:47:24:79:99:8D:A7:54:4B:B8:89:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7484F622456F11F1BA8E810FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:e0:09:cb:b0:56:01:cb:f7:48:60:e5:2e:5e:42:77:ce:62:
8d:0f:14:92:64:6d:26:20:ff:73:c2:9b:f2:7c:96:ca:d0:e4:
02:14:c2:c4:dc:0d:5b:5f:a1:6a:03:65:6d:6a:b2:67:28:67:
1d:18:94:7d:31:af:d8:71:57:79:f4:c4:4b:97:03:70:25:5b:
78:e5:12:90:82:4e:e5:94:5a:85:2e:bf:92:06:74:6a:ec:4f:
72:ca:7e:8a:9d:b8:66:73:f0:a9:de:a7:ab:cd:3f:3f:c4:f5:
16:a2:f3:0e:99:a9:21:df:48:a3:e9:31:60:99:63:29:03:94:
f5:07:ee:53:82:42:04:d1:d0:46:15:80:c6:86:25:58:2e:fc:
3f:1f:07:71:ba:2c:9b:cc:ca:e0:91:c3:0c:63:54:1d:74:68:
b1:07:58:59:84:8c:4c:01:df:5c:9d:86:c2:6a:fa:31:1b:ce:
c7:0b:7d:97:1f:74:98:50:d0:f6:3e:03:96:77:fd:72:81:51:
9b:b9:e0:dd:83:88:84:76:5e:14:ad:d2:35:2a:70:3e:df:6f:
a6:82:d8:34:46:84:41:a0:e4:a5:6c:6a:65:ec:4f:eb:c5:a7:
86:77:75:8d:9e:6e:1f:27:87:bb:c9:bd:b4:e6:c8:c3:c7:fa:
90:4d:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:09 2026 by rpki-client