Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6546CB10FC1B11F0AD0B1EAADAE4EC9C.roa
File: 6546CB10FC1B11F0AD0B1EAADAE4EC9C.roa (raw, json)
Hash identifier: 7/oFbDX7Ikb3dix+DXrLwN/FHrVA68VIviwzUu0zYDE=
Subject key identifier: E4:33:25:30:62:3E:C6:03:98:5F:F1:DD:2A:87:89:E4:0E:9A:68:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6546CB10FC1B11F0AD0B1EAADAE4EC9C.roa
Signing time: Wed 28 Jan 2026 07:31:44 +0000
ROA not before: Wed 28 Jan 2026 07:31:39 +0000
ROA not after: Mon 02 Mar 2026 07:31:39 +0000
asID: 17497
IP address blocks: 156.225.14.0/24 maxlen: 24
156.233.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 07:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105014 (0x19a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 07:31:39 2026 GMT
Not After : Mar 2 07:31:39 2026 GMT
Subject: CN=6979bb60-8d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:97:ba:91:7b:fb:a8:b4:82:89:be:16:c6:
fe:d8:d2:2c:a9:da:e0:e1:55:47:45:65:a0:60:c0:
bb:a8:6e:38:84:89:b8:17:7b:4b:e9:30:35:d4:c3:
04:f3:99:93:ac:e6:fe:19:86:d0:9b:32:35:e1:e4:
80:1d:3b:c9:9d:d1:be:e5:1d:a3:8c:49:75:60:15:
84:b7:a4:82:04:94:76:41:7c:ce:ac:a6:de:cc:57:
4e:a1:9d:d0:3f:07:d9:4a:1e:13:53:f8:cf:32:53:
db:39:0e:54:5d:27:76:0b:60:26:ff:3c:0f:4d:ef:
93:ad:20:87:8c:97:3a:82:b1:b2:e3:f8:a0:08:01:
8d:81:82:e5:b6:46:bf:4e:da:92:dd:bd:79:3e:42:
a7:6e:22:83:d3:55:ee:88:de:2e:61:99:34:31:dc:
52:57:1f:1e:f9:6d:aa:b9:70:36:b4:6a:ea:16:65:
8c:3a:fb:16:f0:95:cd:47:e9:88:7e:c7:c9:5c:48:
dc:46:62:ea:a3:6b:26:2a:3e:eb:ba:32:71:6c:03:
43:60:17:de:c0:b1:76:d2:4f:be:20:00:f6:b0:7a:
63:96:93:d2:41:c3:24:7b:c1:a7:10:78:50:62:e1:
41:6e:4f:05:a5:e8:31:67:27:dd:a9:20:d6:95:22:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:25:30:62:3E:C6:03:98:5F:F1:DD:2A:87:89:E4:0E:9A:68:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6546CB10FC1B11F0AD0B1EAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.14.0/24
156.233.3.0/24
Signature Algorithm: sha256WithRSAEncryption
26:89:3c:9c:f8:98:e2:e9:58:72:cb:6c:a3:17:74:27:19:dc:
a1:5f:99:22:9b:11:e3:83:ce:f1:53:0b:40:ec:4a:d8:16:e2:
31:4c:ab:28:87:1a:e1:d7:b3:03:65:61:3e:b8:7b:a5:cb:22:
5c:11:e5:0c:3a:91:f6:cc:62:59:d5:99:96:d2:35:5f:dc:46:
42:de:7f:05:77:0e:d1:cb:d2:08:82:c0:0c:9b:86:ed:93:07:
b7:1b:fb:87:af:c7:40:f2:c7:63:58:4b:0b:42:9a:de:5c:b2:
fd:a2:96:16:2a:33:14:dc:81:d4:6b:db:c3:21:97:d0:95:8b:
8e:1d:56:28:dc:ce:0c:77:26:69:ff:1f:20:1e:8e:76:a0:cc:
d6:7f:da:da:52:71:e7:d8:66:a1:59:17:5c:7a:5f:f0:52:c4:
06:e6:4c:13:88:bb:3c:74:c6:61:23:ed:bb:d8:9f:85:b4:85:
7f:94:3c:03:1a:bf:c4:8a:5f:be:e7:29:f6:d3:80:8d:15:b2:
5d:6d:9c:6a:e9:bf:44:b8:41:c3:47:d0:9b:08:6e:42:b5:3a:
e5:27:f8:05:92:e5:21:03:7a:b7:99:1a:73:91:bb:42:57:6c:
4f:24:e3:ef:02:1d:41:01:61:69:46:a1:09:1e:aa:cb:2f:96:
b4:11:aa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:23 2026 by rpki-client