Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22CF1090601511F1A81354ADCE1D38B0.roa
File: 22CF1090601511F1A81354ADCE1D38B0.roa (raw, json)
Hash identifier: Aq9h4o0uK4+n3+9+4gA0y1lvOygRBPE3es1dg6ia6lw=
Subject key identifier: AB:54:37:26:5D:07:36:22:43:78:85:DC:7A:14:99:AF:09:56:3C:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22CF1090601511F1A81354ADCE1D38B0.roa
Signing time: Thu 04 Jun 2026 12:58:52 +0000
ROA not before: Thu 04 Jun 2026 12:58:47 +0000
ROA not after: Fri 10 Jul 2026 12:58:47 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113620 (0x1bbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 12:58:47 2026 GMT
Not After : Jul 10 12:58:47 2026 GMT
Subject: CN=6a21768c-ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:60:3b:46:1e:fc:a7:0e:ab:e2:c6:9d:ed:
88:3a:0e:04:32:70:8c:51:b4:70:84:68:1b:b4:8f:
8c:19:ae:bc:36:c6:40:a1:ec:65:79:05:1c:32:bd:
58:d0:0e:dd:e9:5c:4d:97:41:83:9b:28:42:59:c2:
00:ca:bf:97:a4:80:c3:a3:9c:a2:d1:45:ff:e8:d0:
10:42:8f:44:25:19:83:28:4b:47:95:08:56:31:6c:
b5:8f:ee:51:76:58:9b:0f:d3:34:33:1a:b9:3c:36:
f9:a8:3a:73:94:c8:34:6c:15:a9:8c:79:80:82:2c:
4b:3f:ba:4c:67:bb:87:4c:15:d6:ec:6a:3e:36:f1:
26:51:83:4e:1d:bf:3e:a9:6e:c3:72:df:9b:98:e2:
69:d4:41:8e:a6:48:31:ed:7d:95:30:de:e8:38:69:
4a:6f:cf:e9:fd:7f:4e:84:b2:64:f7:fc:e6:bf:92:
4e:ad:71:68:72:4e:d3:1b:39:ae:64:3c:7b:47:34:
a4:90:bd:a9:24:c3:79:ca:8d:c0:14:46:37:9e:c3:
09:a3:61:24:64:d3:fd:cb:8b:c7:c2:38:0e:f2:69:
ee:c7:93:39:c6:25:5f:ee:17:45:c2:3b:fa:f0:e7:
b8:14:71:61:4c:27:bc:cf:39:2b:20:91:14:69:c7:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:37:26:5D:07:36:22:43:78:85:DC:7A:14:99:AF:09:56:3C:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22CF1090601511F1A81354ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
Signature Algorithm: sha256WithRSAEncryption
9a:65:4c:ae:c5:1e:73:04:e5:a6:d3:24:a8:0c:54:c2:1c:a5:
f1:7c:61:b6:85:77:93:ca:2f:6a:37:98:fa:97:e8:8b:9a:5e:
86:f8:0d:9c:03:60:2c:74:ef:f5:2e:86:1a:3c:c6:c2:58:3c:
51:0d:9a:c6:86:87:9e:e3:a8:57:dc:5e:3f:58:bb:2c:ff:a7:
d3:b9:42:e5:93:38:f9:36:e9:b1:74:b0:cd:93:d2:39:9c:ed:
b9:11:56:34:90:1f:91:99:fe:78:d4:a4:88:9b:b6:1b:79:b2:
0c:bc:06:25:76:cd:85:21:2d:99:06:ab:66:82:e1:74:68:76:
94:c7:14:7c:08:8b:5c:52:08:1a:27:ea:e7:59:e1:34:f8:fc:
d3:82:06:ad:0e:01:57:07:c6:96:8e:e0:65:12:12:94:96:4e:
4a:87:3c:b7:05:df:6f:8f:3a:ac:df:1a:0d:23:41:72:79:3a:
41:ee:b2:cf:77:6c:8e:99:eb:57:84:44:a8:39:a1:e0:8f:61:
ac:a2:c4:ee:ac:cf:a4:bb:f9:74:f4:33:50:7c:00:d6:81:79:
39:99:0d:78:ab:5f:34:a5:f6:93:1b:fa:86:0c:9f:02:ff:63:
83:fd:6f:74:70:ef:14:de:f0:8f:b6:a5:9d:a7:0c:85:af:fa:
35:d3:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:19 2026 by rpki-client