Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11610DC4A0A11F1957C8018CF1D38B0.roa
File: A11610DC4A0A11F1957C8018CF1D38B0.roa (raw, json)
Hash identifier: lXgbwqkt75qBTCu/JLXE3ba0wRXSJ2FLpP/BnEIcMbo=
Subject key identifier: 7A:00:2E:FE:0C:90:17:B4:97:DD:08:FB:12:F9:9A:34:D1:64:21:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B24E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11610DC4A0A11F1957C8018CF1D38B0.roa
Signing time: Thu 07 May 2026 11:48:14 +0000
ROA not before: Thu 07 May 2026 11:48:09 +0000
ROA not after: Fri 15 May 2026 11:48:09 +0000
asID: 150706
IP address blocks: 156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111182 (0x1b24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:48:09 2026 GMT
Not After : May 15 11:48:09 2026 GMT
Subject: CN=69fc7bfe-d39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:4e:66:c7:cc:a8:86:e1:fa:46:b6:05:b6:
56:4c:2e:ab:5b:78:21:55:2c:ca:73:26:f5:52:d7:
62:f5:bb:19:0f:d8:37:df:34:ed:bd:da:2d:ef:a4:
1c:16:01:6c:71:a9:8b:3d:42:3e:62:9a:89:ba:c9:
43:96:a5:5e:9e:62:cb:15:30:47:d0:49:a0:d5:ec:
dd:12:02:11:1a:d1:6a:ab:fa:69:b7:c3:02:5f:38:
bf:81:5e:24:ad:cf:e7:7e:52:e9:b5:6f:dd:26:ed:
88:e9:e0:36:fa:cc:50:f7:d6:70:5c:b8:79:bd:f9:
76:91:23:53:56:ad:ec:05:4a:dd:c8:3e:a1:e3:d6:
e6:f9:ff:5c:b1:41:32:5b:98:e0:80:64:e4:5a:f3:
84:49:59:64:82:bc:15:6c:aa:33:e1:e7:c1:3b:55:
4d:50:83:97:45:72:d9:ed:b7:fa:3e:68:0b:dc:19:
3d:15:c8:41:65:70:6a:de:63:af:1b:fe:e1:a3:76:
f7:7b:6e:ea:ba:f0:ba:7b:01:ce:c1:3d:c3:f8:99:
b7:9a:ea:1a:05:dc:19:04:a9:80:f6:33:48:87:82:
b9:e4:66:d6:e2:50:ba:63:46:ea:b6:d3:db:59:07:
18:71:cf:40:12:ed:1a:41:c1:5f:f9:43:be:1b:42:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:00:2E:FE:0C:90:17:B4:97:DD:08:FB:12:F9:9A:34:D1:64:21:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11610DC4A0A11F1957C8018CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.112.0/21
Signature Algorithm: sha256WithRSAEncryption
84:05:68:93:a6:7a:a3:58:e8:f2:88:7d:be:20:a1:e2:b5:22:
97:77:aa:9f:b7:3c:72:63:40:6f:15:db:3f:2d:bb:1c:45:c8:
f8:7c:b5:98:3e:c3:59:d8:e3:a6:20:3c:9e:81:0f:58:e0:e2:
5f:29:7d:72:49:33:73:2a:17:e5:eb:82:69:cd:a5:04:9e:5f:
31:46:a2:0b:48:8d:dd:f0:d7:c1:0d:b6:97:25:a5:a5:0d:09:
d5:5d:2a:53:e3:e1:66:f1:de:76:91:39:66:73:54:a6:6a:f5:
dd:cb:61:0f:b1:b5:69:f4:e6:3b:6b:e4:31:b2:c0:6a:06:c2:
50:c0:3a:d5:b6:af:2f:43:31:68:6c:fb:82:d6:8b:d6:18:da:
10:43:b2:cd:83:12:9a:39:c5:2d:31:db:09:86:a4:b7:c7:0b:
60:03:8e:81:74:d5:72:80:ce:ea:fe:41:19:16:ce:46:31:9a:
02:b8:a8:2d:db:d1:bb:e8:d8:86:7e:35:c2:8e:dc:a5:6b:b2:
16:d5:7e:29:c2:69:10:3d:6d:3c:58:3b:e5:8a:89:f2:71:7a:
e0:3f:47:f9:30:09:9e:56:16:ce:77:d5:13:ac:25:52:dd:7f:
5b:96:5f:ee:35:17:7a:ed:f1:2f:5d:7d:a8:10:8e:18:0a:52:
e1:1d:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:26 2026 by rpki-client