Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E6644A2633B11F1B1B84ED4CE1D38B0.roa
File: 4E6644A2633B11F1B1B84ED4CE1D38B0.roa (raw, json)
Hash identifier: KqNhJHyEKuyHGAGIlRQMqy1d0hOckfzMv6IdJR8E0dw=
Subject key identifier: C1:F3:D8:4A:73:F7:CD:B3:9E:FE:A2:34:10:BB:5A:33:34:55:B1:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E6644A2633B11F1B1B84ED4CE1D38B0.roa
Signing time: Mon 08 Jun 2026 13:09:40 +0000
ROA not before: Mon 08 Jun 2026 13:09:35 +0000
ROA not after: Thu 08 Jul 2027 13:09:35 +0000
asID: 328888
IP address blocks: 156.225.6.0/24 maxlen: 24
156.225.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113764 (0x1bc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 13:09:35 2026 GMT
Not After : Jul 8 13:09:35 2027 GMT
Subject: CN=6a26bf14-d790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:c1:bb:4d:fc:08:75:4e:c6:af:51:0f:a1:
83:49:fe:c8:7c:88:be:16:80:3b:79:ad:26:f8:f8:
72:53:d1:1e:39:33:6c:ba:a2:ca:e1:65:ee:bf:0b:
ef:e4:ef:47:d7:ae:0a:f7:b6:52:5f:a9:ab:56:cb:
16:ee:97:28:63:5d:72:8f:82:5b:1c:39:6a:47:47:
77:94:f9:d9:77:60:80:21:36:be:ba:33:01:bf:8c:
c6:3a:c1:e6:32:fc:18:04:45:8e:d7:2f:55:52:ef:
56:df:ad:f4:e3:ae:60:dc:9e:5c:07:ea:82:5c:0c:
0d:c1:b9:f0:b3:9b:f2:c8:69:0c:95:36:64:40:cd:
84:6f:4d:c1:1c:05:4e:28:0c:2c:bb:9b:03:d6:84:
42:cd:c7:10:7e:44:22:12:44:3a:af:34:78:4c:39:
0c:40:5b:82:a2:e7:8b:39:92:72:f8:10:12:21:72:
23:f1:e8:8c:ea:a7:43:da:86:4e:c0:f2:d8:ce:3d:
98:10:74:96:1c:0e:74:61:e4:a5:b3:9e:38:8e:8a:
e4:60:cd:fb:17:8e:eb:96:30:e6:a3:26:ec:d9:99:
6b:d1:92:7d:14:76:dc:72:d2:ca:f5:39:3e:b0:b4:
5d:dc:2c:39:84:60:d0:71:f0:2f:52:4e:02:1f:28:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F3:D8:4A:73:F7:CD:B3:9E:FE:A2:34:10:BB:5A:33:34:55:B1:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E6644A2633B11F1B1B84ED4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.6.0/24
156.225.32.0/24
Signature Algorithm: sha256WithRSAEncryption
56:71:f0:82:63:6d:86:ab:01:ed:0d:4c:7d:c2:b6:12:ab:78:
25:bf:9f:51:85:a6:89:c5:8c:d5:f8:52:c9:49:ac:54:04:bf:
58:c8:95:23:34:9e:84:c0:9d:fa:a0:46:a9:e1:1b:02:ff:1b:
57:16:70:f8:8c:43:1e:11:f5:d8:0f:fa:b0:4c:e3:6b:3d:4b:
5a:54:26:36:56:7a:c3:07:69:cd:68:73:f7:1d:c4:60:c8:d6:
d5:c3:b7:15:0f:34:0c:6d:4a:16:70:6f:f1:c8:9e:df:45:a3:
ba:11:a5:8f:55:5d:25:4d:6a:9a:14:6a:23:c5:46:be:1a:b2:
09:9e:ee:de:a1:50:97:ff:d3:c8:fe:83:c6:41:d6:a2:6a:b0:
7d:dd:17:11:65:f1:1a:ca:ae:22:b6:30:37:b4:ba:3e:b4:5f:
ba:00:24:b9:56:19:b3:21:4c:4d:ef:aa:c5:dc:e3:1a:01:75:
8d:ee:f3:3b:ff:29:87:44:fc:fa:fe:83:3d:26:97:1c:53:79:
a0:3e:a7:2b:b3:16:97:1c:53:7a:1c:6c:a7:86:15:71:ea:ee:
04:dc:5b:98:39:71:85:84:29:9f:cb:b7:a9:a0:b6:ce:23:8c:
61:5f:ce:3f:a1:4d:0f:d5:99:34:f5:93:2b:37:b6:f7:fb:4d:
b1:34:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:23:50 2026 by rpki-client