Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6186570660DA11F1997812DDCE1D38B0.roa
File: 6186570660DA11F1997812DDCE1D38B0.roa (raw, json)
Hash identifier: dA/01b4AZ18vG995hhdhmqocS7Po7JfM5jT0dI5JVd0=
Subject key identifier: 10:62:A5:AD:1D:FC:A3:30:0E:67:AC:66:15:32:79:45:2E:05:8A:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6186570660DA11F1997812DDCE1D38B0.roa
Signing time: Fri 05 Jun 2026 12:30:48 +0000
ROA not before: Fri 05 Jun 2026 12:30:44 +0000
ROA not after: Tue 05 Jun 2029 12:30:44 +0000
asID: 17561
IP address blocks: 156.242.188.0/24 maxlen: 24
156.242.189.0/24 maxlen: 24
156.242.190.0/24 maxlen: 24
156.242.191.0/24 maxlen: 24
156.242.192.0/24 maxlen: 24
156.242.193.0/24 maxlen: 24
156.242.194.0/24 maxlen: 24
156.242.195.0/24 maxlen: 24
156.242.196.0/24 maxlen: 24
156.242.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113689 (0x1bc19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 12:30:44 2026 GMT
Not After : Jun 5 12:30:44 2029 GMT
Subject: CN=6a22c178-6cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:05:cc:f7:ea:2f:f1:9c:41:b7:39:24:9d:
19:77:c6:27:2a:83:00:a7:b1:48:85:3f:07:ee:82:
63:f9:0c:60:90:05:ee:55:2c:1d:e4:07:22:dc:29:
91:ec:cf:ef:ed:93:3a:b3:9d:43:5f:ef:1c:7f:53:
4a:ed:79:9d:05:dd:7a:0a:ef:40:21:47:a6:09:61:
b5:29:fc:48:fb:3f:00:18:2f:9c:c2:aa:80:0d:65:
14:50:58:30:56:42:55:58:14:01:e3:74:44:cc:ce:
d3:49:d2:a1:e3:63:93:17:d6:95:5f:c3:44:6b:41:
b1:c3:57:8a:62:86:6c:45:0f:14:ca:00:18:9f:0b:
a9:b3:64:41:d9:96:e9:bc:64:9c:fd:71:51:7d:0a:
d1:6a:cd:2a:de:28:fe:b2:d9:dc:4d:d5:b7:ea:43:
ad:97:71:e9:8f:d2:1d:d5:b1:b2:34:22:1e:b9:1c:
1f:cf:99:35:17:92:cc:0a:a8:93:b6:a8:43:3d:47:
dc:8f:9f:2e:d8:ee:c1:84:b3:5d:8d:1f:fc:d0:90:
97:db:9d:a3:79:74:51:f5:4a:02:85:02:ca:0e:d3:
72:45:15:66:30:46:6e:63:15:69:a4:13:8e:e9:a9:
8b:54:a8:0a:6b:d2:b5:4e:94:b2:ef:42:ca:e4:33:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:62:A5:AD:1D:FC:A3:30:0E:67:AC:66:15:32:79:45:2E:05:8A:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6186570660DA11F1997812DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.188.0-156.242.197.255
Signature Algorithm: sha256WithRSAEncryption
84:74:70:86:c2:80:b3:db:31:ff:76:46:bd:99:db:f4:70:ca:
95:d7:b0:50:e7:72:f6:57:e9:0b:de:e0:56:96:2a:3a:52:12:
ac:13:ba:2c:7a:aa:88:8a:40:47:dd:e8:37:45:45:fa:e2:71:
d3:8e:3f:7b:f1:97:ff:c0:c5:86:af:0c:64:98:14:f4:23:1f:
84:5f:c5:75:0b:dd:8c:f9:05:69:9f:16:24:d8:08:ca:1e:c9:
d1:ce:de:a6:65:e8:62:02:e2:05:1e:86:d7:00:4a:32:2a:28:
f0:3d:12:c6:70:34:a5:22:01:51:26:69:a1:0c:d6:4c:4a:52:
1e:91:84:00:ea:61:5a:e0:d7:8a:45:a5:9f:2f:67:bb:82:c6:
fb:3f:cf:f3:6b:2b:02:58:4b:f2:12:03:f9:d4:98:8f:0c:90:
d8:03:ea:cf:26:0e:99:48:18:eb:e6:e1:30:11:ac:31:45:9c:
89:da:e3:e7:85:79:78:23:fb:92:57:a5:7c:00:47:e0:a6:92:
b8:74:ad:73:81:b6:e6:a9:1a:b7:22:17:b2:e0:af:77:eb:92:
d4:7a:dd:08:dc:74:2b:ba:f0:f9:e2:fd:fa:68:ed:05:a5:34:
1f:0a:71:26:00:3f:2e:36:94:be:7b:49:fd:8d:bb:1a:14:de:
2a:02:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:18:45 2026 by rpki-client