Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29D9F2A4D0511F1B7F6C6C0CE1D38B0.roa
File: B29D9F2A4D0511F1B7F6C6C0CE1D38B0.roa (raw, json)
Hash identifier: 0ww4lifj/AvDtqxBbAlfZE75Wkzz1ceAZolYq0dfZ+s=
Subject key identifier: 54:30:85:D4:4F:7A:20:62:6E:59:05:40:AD:F2:D9:57:06:D9:2C:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29D9F2A4D0511F1B7F6C6C0CE1D38B0.roa
Signing time: Mon 11 May 2026 06:50:29 +0000
ROA not before: Mon 11 May 2026 06:50:25 +0000
ROA not after: Sun 14 Jun 2026 06:50:25 +0000
asID: 269070
IP address blocks: 156.249.64.0/24 maxlen: 24
156.249.65.0/24 maxlen: 24
156.249.66.0/24 maxlen: 24
156.249.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111531 (0x1b3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 06:50:25 2026 GMT
Not After : Jun 14 06:50:25 2026 GMT
Subject: CN=6a017c35-f596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:c6:36:e8:16:32:2a:a5:ee:07:e5:9d:d1:
8b:2c:1f:e0:24:18:7d:a1:4e:f0:1f:b0:23:4e:f5:
38:19:0f:2f:ec:90:7b:bb:c2:fc:ba:82:13:92:18:
b4:de:a4:55:f0:b1:b7:29:7a:bb:d5:ee:41:8b:16:
5c:3d:44:23:2e:f2:69:99:d5:03:61:f1:82:32:bb:
24:76:18:7e:de:7a:ae:36:63:a0:db:16:bf:81:5d:
1a:b8:9f:ba:a9:a1:34:b8:92:98:07:66:4b:d3:52:
c7:7e:eb:7e:fe:5c:ad:63:bc:bd:05:05:bd:13:b8:
e1:1f:b7:db:29:7b:6d:34:c5:c9:05:23:02:fc:c4:
1e:5a:35:94:76:a2:3b:f1:11:1a:cd:42:35:a8:cd:
22:c8:7f:d0:08:d3:82:be:65:b2:76:22:cb:e1:92:
d2:1f:47:7c:ee:2f:c6:e4:cb:74:6c:8e:16:be:cc:
e0:dc:b9:b2:f3:34:70:e5:6f:22:78:6a:56:8b:53:
9e:46:d8:9c:51:c5:4c:b8:58:5a:31:9a:d9:fd:5f:
e3:fd:dc:a7:61:1e:12:18:d3:88:cb:a1:66:b9:bb:
ee:ca:3a:9e:14:5a:10:40:38:a8:08:b1:6d:8e:3d:
68:1a:e9:3e:31:0b:7c:7f:e3:c6:db:fb:f1:56:35:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:85:D4:4F:7A:20:62:6E:59:05:40:AD:F2:D9:57:06:D9:2C:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29D9F2A4D0511F1B7F6C6C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
29:02:00:be:af:b6:5a:6b:8d:40:69:ed:4c:62:69:c8:24:18:
54:d3:82:5d:fd:07:42:3e:34:8d:60:5d:7e:d4:20:ae:b2:23:
f6:94:db:2c:f3:42:a6:2c:4a:fb:3e:11:a7:98:e0:41:26:9e:
e6:87:1b:30:69:cc:10:f5:52:e7:89:76:96:91:41:29:1f:c6:
4f:a6:b0:d2:93:3a:dd:c8:09:e4:15:bb:44:77:1f:73:f3:3f:
78:28:d9:19:31:7d:a1:ba:88:41:ec:8f:35:f4:bb:3f:15:03:
a9:da:95:eb:d2:90:68:d8:00:91:42:7a:38:12:bb:ec:be:c2:
36:0c:da:60:2e:61:8a:e0:d4:92:06:78:a0:42:1b:c8:47:8d:
4c:fe:42:47:64:dc:3e:b9:02:74:6a:10:47:36:e8:2c:62:74:
5e:23:35:27:ae:c8:00:9d:bb:0f:af:53:e0:3a:61:4c:42:7a:
5a:f7:db:2b:3c:34:cd:38:5c:20:2c:46:f8:bd:70:fd:f7:af:
1f:3d:46:4f:ad:f5:b3:55:d9:47:0e:50:a2:2c:3b:b5:6c:ac:
28:37:bc:73:3f:6d:9e:e7:98:ef:bb:49:48:06:33:2d:3d:84:
cb:ff:76:63:99:6f:93:64:2c:5d:b7:b8:0c:b9:be:b0:e9:92:
83:fb:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:48 2026 by rpki-client