Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E5BEE62AAB11F1ABA87491DAE4EC9C.roa
File: 06E5BEE62AAB11F1ABA87491DAE4EC9C.roa (raw, json)
Hash identifier: yAiOy4fAJWyMGxShWNXNoCfrKGmVBvlpHBudZfl+9sc=
Subject key identifier: B0:7C:FC:8E:24:BA:23:79:03:4E:B9:A4:E0:23:CD:1D:31:10:91:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A809
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E5BEE62AAB11F1ABA87491DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 13:35:47 +0000
ROA not before: Sat 28 Mar 2026 13:35:42 +0000
ROA not after: Fri 22 May 2026 13:35:42 +0000
asID: 401696
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108553 (0x1a809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 13:35:42 2026 GMT
Not After : May 22 13:35:42 2026 GMT
Subject: CN=69c7d933-2884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:97:97:da:0d:b0:8b:07:0d:b4:f3:85:3b:
08:67:f0:9b:a3:3e:1e:a3:f4:d1:49:c2:7e:c6:e4:
c9:03:96:7a:95:27:b7:d9:e2:50:ed:29:35:af:43:
d6:5b:f0:9a:43:67:d9:f3:b3:c4:dc:d5:56:21:b7:
1b:77:86:a6:8f:b8:19:92:71:89:86:46:42:23:a6:
0d:ed:7e:f3:6b:cb:11:a8:fc:b7:ad:47:46:54:11:
45:b9:bb:ab:29:78:a9:15:40:ab:e4:7a:76:cb:42:
9f:05:0f:f0:0d:bb:df:5a:79:1f:f8:33:25:3f:82:
00:38:c5:89:78:6a:88:67:15:a9:21:67:31:41:eb:
da:d3:92:1d:a3:b8:75:46:d9:37:d7:f1:7b:2e:1c:
df:7e:23:f6:01:34:69:4e:ba:b0:ac:29:27:e9:57:
cd:3c:d8:a5:f9:52:a4:1f:b9:c1:7b:c8:f4:52:ff:
44:5d:7d:99:2b:b7:2c:4e:25:c8:60:b5:bd:56:63:
1b:cf:16:4d:df:11:49:38:b1:1d:bd:60:82:7b:18:
9e:d9:de:d1:b2:98:25:b4:74:0f:f7:e3:40:9d:89:
2b:de:e2:9b:3d:24:c6:2b:06:25:20:df:24:b6:37:
29:7c:6b:bd:45:e6:8a:95:27:cf:22:ba:5d:48:34:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:FC:8E:24:BA:23:79:03:4E:B9:A4:E0:23:CD:1D:31:10:91:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E5BEE62AAB11F1ABA87491DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
23:25:b2:d1:02:69:7e:c7:af:27:e7:f2:68:b9:65:05:98:45:
38:ae:9e:4d:4b:2f:de:9d:6b:9a:a8:1e:94:66:6e:8e:95:2f:
18:2c:72:85:ad:27:d4:40:9c:c2:d3:49:4b:38:ef:0f:7f:2e:
7b:3e:d2:57:96:77:f3:cc:85:99:ab:8b:57:20:49:f1:12:7a:
0c:11:c4:0f:01:c5:ba:9f:18:fa:3b:f3:21:c2:d0:a5:69:a1:
33:95:b2:f4:2a:fb:64:9b:96:65:51:64:c2:4a:37:c5:23:0b:
8c:4f:8e:37:a4:70:a7:f1:0c:32:58:5c:48:45:b4:53:1d:85:
43:a1:d9:0b:c7:f6:ae:10:e8:66:75:30:c8:61:ae:18:d7:e9:
08:8c:cc:8e:eb:13:4d:06:a8:73:de:13:cc:16:07:6a:1a:6a:
d6:34:2b:8c:69:14:c3:0b:04:82:c4:1a:d4:00:81:c7:52:75:
3a:11:1a:b1:b7:e1:e4:36:74:c0:2d:2a:5b:46:14:f1:7c:3a:
0f:5e:77:8b:da:96:3f:36:fc:e0:dd:0d:78:41:52:06:91:f9:
cf:78:b3:26:d0:75:bf:aa:af:cc:93:23:d2:3f:8c:d2:08:e9:
fb:ab:d2:c6:27:d3:2a:ad:eb:8d:42:40:2b:01:9e:2b:0d:57:
33:86:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:55 2026 by rpki-client