Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B23024829AB11F1BC03AFC5DAE4EC9C.roa
File: 6B23024829AB11F1BC03AFC5DAE4EC9C.roa (raw, json)
Hash identifier: G31w+oOwiCykwFHB8cNRBTcrnGKT8RLk+Y/09QCZzhU=
Subject key identifier: DD:27:E4:C3:AA:3C:51:96:98:F4:E1:95:C0:4A:44:44:88:84:0C:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B23024829AB11F1BC03AFC5DAE4EC9C.roa
Signing time: Fri 27 Mar 2026 07:06:04 +0000
ROA not before: Fri 27 Mar 2026 07:05:58 +0000
ROA not after: Sun 10 May 2026 07:05:58 +0000
asID: 401783
IP address blocks: 156.230.160.0/24 maxlen: 24
156.254.116.0/24 maxlen: 24
156.254.117.0/24 maxlen: 24
156.254.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108449 (0x1a7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 27 07:05:58 2026 GMT
Not After : May 10 07:05:58 2026 GMT
Subject: CN=69c62c5c-a9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:38:af:2f:ba:8f:f5:f2:c5:02:f7:54:dc:
fc:34:a8:7e:c7:0b:f3:77:0b:7b:bf:cf:54:35:15:
a6:cc:26:64:06:b2:e1:ed:1b:49:6c:22:26:a0:00:
82:bb:0d:62:3a:77:f2:b3:1c:02:cd:23:17:79:23:
49:41:6c:b2:f2:ff:7c:1d:df:61:35:7f:fd:6a:10:
d7:95:7f:59:b6:cb:03:59:78:54:69:fd:06:50:d5:
3b:37:9f:af:7d:2b:69:a1:5c:b9:d7:ae:9c:d0:5e:
0a:6b:45:6d:75:35:44:71:75:d7:96:c0:e7:0f:5d:
43:8b:c4:ed:42:fe:55:1b:eb:87:8c:1a:82:a5:c7:
5d:74:99:05:b1:c1:60:f8:8d:35:0a:46:9b:75:d3:
8d:a3:14:dc:b2:a3:7d:b0:4d:ae:d3:4d:77:2f:05:
7d:da:7f:d0:7f:00:c2:55:8c:31:91:b4:83:a8:bf:
2b:f5:f8:19:1a:8d:18:ac:2d:b7:8c:3c:ed:2e:d2:
c0:c9:71:5f:c8:56:83:84:39:6f:6c:e8:14:cc:96:
4f:21:5c:a5:2a:53:72:b3:49:24:e1:6f:01:2e:34:
0b:57:96:ad:ee:7d:8e:66:9d:76:b2:e2:cc:0c:9e:
8f:78:fd:47:38:97:28:5c:e5:bf:a9:a6:bf:1d:de:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:E4:C3:AA:3C:51:96:98:F4:E1:95:C0:4A:44:44:88:84:0C:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B23024829AB11F1BC03AFC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.160.0/24
156.254.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:ed:65:db:6b:89:b8:ce:40:44:b4:08:a7:ab:e0:11:ba:ed:
5c:9d:b4:9f:0b:c8:24:ca:c3:5a:fe:c7:21:82:17:2f:0b:b0:
5b:93:2b:31:8c:4a:5b:23:86:5e:da:fb:ac:62:b5:2e:cb:fe:
30:47:6c:2d:c7:90:5a:2a:a3:61:7a:63:2d:80:b0:6d:06:00:
4c:e0:71:75:49:31:9b:28:dd:6d:fb:e9:f1:e0:5d:30:e1:91:
e0:c4:a6:5f:07:66:4c:6a:80:c3:fa:fd:4c:2c:c5:91:b9:9e:
28:93:41:b6:62:bb:94:2d:54:76:02:b7:11:a2:9c:e0:1d:12:
16:fd:20:ab:f3:86:8a:e6:ad:b4:25:6d:50:67:b0:8b:45:71:
bd:96:be:df:af:d8:95:44:7e:46:91:78:99:db:b4:2a:8a:c6:
bb:55:7d:2a:a6:77:6f:a4:f6:63:82:94:04:fc:9a:c8:97:95:
6c:f5:59:ac:5f:d6:00:ab:32:03:c4:35:fe:56:a4:80:33:e2:
17:9a:46:01:2c:33:90:1d:0d:9b:09:3d:44:42:a3:7b:c4:48:
79:1f:41:17:93:85:04:cb:10:68:f9:9f:f2:fe:67:f9:e2:bf:
33:2f:39:29:f2:1e:3b:a1:c6:18:4f:9d:11:02:c8:05:5a:23:
a1:5e:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:38 2026 by rpki-client