Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD8A619A448011F189FD76E7CE1D38B0.roa
File: AD8A619A448011F189FD76E7CE1D38B0.roa (raw, json)
Hash identifier: culnB0yG6KLXWyGYw1ppD98SIYci0e4NRfWUAhjJdnE=
Subject key identifier: 09:79:9D:05:6C:ED:F9:19:E4:7E:BD:98:FB:43:77:14:A5:EF:38:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B024
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD8A619A448011F189FD76E7CE1D38B0.roa
Signing time: Thu 30 Apr 2026 10:38:09 +0000
ROA not before: Thu 30 Apr 2026 10:38:04 +0000
ROA not after: Thu 04 Jun 2026 10:38:04 +0000
asID: 136800
IP address blocks: 156.234.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110628 (0x1b024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 10:38:04 2026 GMT
Not After : Jun 4 10:38:04 2026 GMT
Subject: CN=69f33110-4876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:fc:c1:1d:90:38:e4:2a:dc:b5:c3:59:82:
aa:c9:6c:fc:a9:00:d1:27:65:fe:3b:a0:36:79:01:
fd:f7:4d:f6:60:74:44:f2:33:08:4d:f3:2b:5e:09:
f9:ee:ae:ed:0a:31:80:c8:46:6d:e1:98:7b:a2:2c:
82:e2:12:49:79:19:fc:9f:69:ee:a9:a5:d4:c3:9a:
a6:14:0f:d6:1a:34:ad:ef:95:de:3d:22:44:23:44:
67:8b:9e:d9:de:d0:16:1a:4e:27:d0:63:99:66:a2:
cb:01:07:5d:05:8b:e9:1a:05:af:01:70:f1:e5:04:
7e:a3:04:4b:93:5b:e0:73:9a:47:96:8a:7e:8a:53:
f1:cc:ae:5e:1b:b2:62:89:42:54:27:48:43:f1:de:
05:a7:6c:b5:9c:c6:6a:35:e0:c8:e5:54:c0:4d:8f:
c4:19:b2:75:5c:5e:4b:0b:25:19:30:3c:37:31:a5:
4f:f7:35:16:01:8b:85:12:eb:c4:eb:b3:b0:5f:3b:
f5:06:03:2d:64:7f:03:dc:27:db:ac:13:4a:31:44:
60:df:79:5b:1d:f7:48:09:2d:04:a5:c3:ad:1d:cb:
ab:8d:96:f6:eb:65:1a:11:7c:56:87:1f:0d:6c:4c:
86:d1:59:79:a4:8c:73:40:8a:5e:52:83:10:c0:9e:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:9D:05:6C:ED:F9:19:E4:7E:BD:98:FB:43:77:14:A5:EF:38:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD8A619A448011F189FD76E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.77.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ee:70:76:e3:1b:8f:e1:f0:55:0c:47:c9:5c:5f:6a:b4:c2:
6a:c2:f0:6e:2c:35:77:5b:3e:a6:0b:40:80:ef:a6:74:9f:91:
d9:59:9e:cc:8e:5c:ca:24:e2:91:48:eb:39:07:bb:3e:4c:e6:
a7:23:a8:f7:51:f9:d9:1c:62:6d:2a:8f:bd:6f:35:e0:bf:e8:
8a:80:68:ee:92:02:ae:33:e7:79:d3:0f:6c:54:43:8c:f5:ad:
d6:52:cc:a0:61:30:f7:55:c4:52:80:68:dd:2c:c9:ad:58:e2:
9b:40:05:c9:b0:bf:69:3d:9b:04:54:6e:f7:d0:d0:b3:7f:62:
1c:2e:44:13:30:a4:56:2e:d7:37:ce:43:40:38:9b:b1:3a:a3:
d9:a4:9a:f7:70:8d:b0:11:bb:07:77:43:34:65:d8:2b:0b:9f:
8c:ba:66:0b:43:fc:2f:63:1f:cd:d9:64:f5:11:92:e8:1e:bb:
d2:b9:83:20:c0:8b:f0:ac:d5:e4:bf:2c:b6:36:4b:e6:95:2d:
59:b8:2c:c9:fd:c7:29:bc:54:60:19:cd:1c:34:b0:c4:c3:2d:
fd:d7:40:b7:49:93:92:84:71:a8:5d:e4:2e:81:09:42:50:29:
c5:cc:cd:7b:94:73:bd:60:40:e7:bd:93:da:85:36:fd:b6:9f:
17:3d:f6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:26 2026 by rpki-client