Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D60B936442E611F18C45FFADCE1D38B0.roa
File: D60B936442E611F18C45FFADCE1D38B0.roa (raw, json)
Hash identifier: aqnnCtt0VB6EFkZ7/6mkJhJDCzpNeXgB1kOzmVPzBRA=
Subject key identifier: DA:D6:72:BD:89:F1:C3:24:E9:AB:6E:64:31:C4:F3:80:1A:B7:4F:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D60B936442E611F18C45FFADCE1D38B0.roa
Signing time: Tue 28 Apr 2026 09:44:23 +0000
ROA not before: Tue 28 Apr 2026 09:44:18 +0000
ROA not after: Thu 04 Jun 2026 09:44:18 +0000
asID: 136800
IP address blocks: 156.234.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110484 (0x1af94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 09:44:18 2026 GMT
Not After : Jun 4 09:44:18 2026 GMT
Subject: CN=69f08177-bb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:e3:0f:16:fc:6c:86:9b:be:13:73:e2:27:
43:11:91:98:28:00:27:7e:33:c2:4a:c7:82:c2:7a:
02:15:8e:c5:af:cb:75:16:dc:11:fe:02:75:6a:4c:
1f:3b:46:bf:c9:29:3b:ef:6b:d7:b9:66:5e:cb:7a:
a7:b2:ee:25:aa:89:7f:86:75:85:8f:ce:ec:e7:fa:
83:ce:51:51:be:a1:62:fe:f9:45:15:3f:6a:a5:44:
11:61:7b:60:c4:5b:e1:74:54:5f:52:d5:c5:94:11:
6f:18:92:e1:46:3e:e3:f1:f8:7a:4d:3c:f1:34:f3:
c1:8e:7d:a8:af:a1:f6:5d:25:ff:0e:52:ad:19:b8:
1b:4d:c0:8f:e9:d1:ae:77:9c:3d:3d:a0:ed:05:e4:
03:49:c9:85:6d:fb:96:7a:81:64:f6:d0:8f:db:2a:
ce:aa:eb:50:89:0d:aa:b4:27:97:5f:d1:53:81:db:
6e:61:be:06:9c:79:70:4e:5f:d1:58:7c:f4:d4:da:
33:7b:9a:d4:ff:a9:34:f9:ad:48:f2:5c:11:89:50:
44:91:a1:5b:bc:3b:45:f2:3e:a1:b7:42:da:c2:60:
90:a0:5f:af:f3:21:86:c4:dc:8f:d9:29:13:cf:df:
e5:1a:cc:d4:cc:60:92:01:bb:e4:b2:ee:2a:1c:8a:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:72:BD:89:F1:C3:24:E9:AB:6E:64:31:C4:F3:80:1A:B7:4F:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D60B936442E611F18C45FFADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.77.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d2:01:19:66:4f:1c:85:b9:dd:62:ae:19:ca:a4:4b:2e:32:
6f:89:30:e1:8b:c6:93:d3:a0:4f:d8:be:78:7f:66:ce:64:f8:
ac:97:f0:94:c8:f7:f6:2e:fb:aa:af:77:20:84:a4:29:71:87:
ee:a3:8f:4e:d6:5e:d0:36:6c:c6:de:22:68:a7:38:7b:89:cc:
5f:f6:12:07:05:83:20:46:d2:65:31:55:3f:01:28:f0:91:2b:
b4:0e:55:5b:12:d2:76:8a:9e:5f:71:37:60:bb:ff:ee:76:59:
c6:f2:33:58:27:7a:fa:fb:0c:62:59:fe:49:33:e4:df:26:40:
a2:16:93:a8:8b:bc:14:85:09:bb:08:84:37:a6:a7:e5:e1:22:
09:ee:51:73:e6:02:4f:d7:a6:2d:34:23:44:9c:e0:19:2a:52:
50:2b:e7:b9:05:c1:e0:8a:81:bc:e1:54:ab:96:91:11:3d:2d:
78:9e:4f:b3:02:99:38:90:70:87:9d:f9:bf:44:65:54:f7:03:
9e:25:9b:de:43:81:b9:6d:fc:7f:63:02:e1:76:63:b7:80:08:
44:00:49:96:0b:a9:d3:d6:a3:f8:a1:d2:d9:52:d1:f3:e5:06:
a5:87:41:6b:66:86:1e:0f:92:90:f6:63:53:6e:dc:72:1b:b6:
bd:b3:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:23:59 2026 by rpki-client