Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A66D68C647111F194978AA7CE1D38B0.roa
File: 4A66D68C647111F194978AA7CE1D38B0.roa (raw, json)
Hash identifier: KOJn5B0PkDZeHDJb9hnSv44d4Re7wvMISU8/dvRpmSs=
Subject key identifier: 2E:CE:DA:D9:54:64:3F:CC:E1:16:FC:48:BF:F6:4E:07:26:5E:CD:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A66D68C647111F194978AA7CE1D38B0.roa
Signing time: Wed 10 Jun 2026 02:08:37 +0000
ROA not before: Wed 10 Jun 2026 02:08:32 +0000
ROA not after: Wed 17 Jun 2026 02:08:32 +0000
asID: 401615
IP address blocks: 156.226.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113812 (0x1bc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 02:08:32 2026 GMT
Not After : Jun 17 02:08:32 2026 GMT
Subject: CN=6a28c725-0ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:c1:18:5c:80:ac:19:12:62:a6:ca:52:d1:
c1:5f:6d:74:f9:23:5d:fa:33:b5:bf:52:6c:0e:35:
46:63:58:8d:ac:fb:ca:75:b0:f6:47:8d:89:c3:41:
c1:66:d5:c9:a8:a9:fd:67:6d:7c:72:d1:14:fd:88:
71:26:f9:b8:24:f6:76:db:6c:d7:43:47:4b:28:5e:
17:31:01:f5:33:20:23:f0:e8:b7:b4:96:3e:dd:65:
6a:c7:e6:c5:3d:41:f0:a6:4a:47:85:66:bf:98:18:
7e:5b:0e:b7:46:1e:ed:e3:be:f9:1c:17:d6:cd:f6:
c5:7c:f4:2d:ee:5b:b2:7d:1f:b3:23:4e:67:b9:fa:
2b:31:ec:cb:08:be:84:af:3e:d1:6c:77:7f:25:5a:
35:74:7e:24:ff:23:a7:39:ce:14:90:69:58:09:eb:
2f:0e:48:32:3c:09:b4:92:0c:15:e8:3f:04:e6:c4:
10:49:83:e7:51:79:2a:1b:62:db:94:d6:48:7b:ae:
e3:92:8c:87:d8:e9:fa:b2:44:fc:e8:29:31:d8:54:
00:fc:e6:6c:b8:dc:b8:fa:c6:e8:d1:c3:03:d5:60:
0a:82:a6:30:35:d2:b1:6e:46:e6:fc:65:8e:fe:6b:
49:de:85:2b:05:1c:c0:66:30:99:60:76:4e:d7:9d:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:DA:D9:54:64:3F:CC:E1:16:FC:48:BF:F6:4E:07:26:5E:CD:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A66D68C647111F194978AA7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.170.0/23
Signature Algorithm: sha256WithRSAEncryption
06:c3:53:fe:9c:33:c7:3d:e6:58:e8:3a:d2:1c:76:c3:84:87:
c7:6d:8e:a9:cc:7c:c4:99:b8:a3:a0:78:f3:f6:30:0b:46:b4:
98:31:72:46:fa:08:41:a4:aa:cd:37:b1:b1:5c:9a:1b:a2:39:
de:20:52:ca:e2:60:fd:0b:f3:92:5d:46:0d:b0:3d:40:e8:ec:
49:7e:19:0d:5c:e8:b1:15:df:0e:15:60:51:11:75:11:f1:46:
f7:29:2e:65:bb:3b:8f:5c:4c:f3:52:d5:0c:a5:55:8b:02:37:
6b:8d:e4:87:f2:95:9d:79:b7:fd:67:2b:61:d0:c4:7a:52:be:
24:32:69:43:a8:df:d9:cf:56:c1:40:4e:2f:fd:65:83:91:cd:
97:50:6d:1c:92:54:a9:85:fa:36:e6:4e:02:ee:b8:86:a0:e2:
89:1f:d8:3d:b8:1d:65:af:4c:d8:8f:b6:83:45:ea:e2:26:cd:
50:43:8c:f5:79:bd:a8:07:b1:a2:11:b4:9d:40:e7:d9:92:79:
46:9f:b1:44:5e:46:51:83:ee:67:11:ef:ff:5c:b1:99:be:85:
75:65:04:71:1d:0c:66:36:9f:af:50:65:af:ba:2e:2d:ca:5d:
dc:36:b9:c7:7e:03:3f:9f:61:67:7e:da:d9:bb:6f:70:54:20:
32:89:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:41:04 2026 by rpki-client