Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D016E3264B011F1913D32B3CE1D38B0.roa
File: 8D016E3264B011F1913D32B3CE1D38B0.roa (raw, json)
Hash identifier: k90VW+4n8h+wmMYmbd8xMzKZtPYxZ4tFtiCEh++vA1Y=
Subject key identifier: 6D:F9:54:1C:9A:C4:4D:91:49:25:78:57:AA:51:40:56:D7:58:70:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D016E3264B011F1913D32B3CE1D38B0.roa
Signing time: Wed 10 Jun 2026 09:41:27 +0000
ROA not before: Wed 10 Jun 2026 09:41:22 +0000
ROA not after: Fri 10 Jul 2026 09:41:22 +0000
asID: 139613
IP address blocks: 156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113842 (0x1bcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 09:41:22 2026 GMT
Not After : Jul 10 09:41:22 2026 GMT
Subject: CN=6a293147-8f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:3b:88:2f:36:9c:3f:88:3b:9a:c5:1e:f3:
0f:87:aa:6a:e5:91:54:d5:fe:42:b6:0c:df:2f:15:
d0:2b:ef:b7:c9:f9:12:f4:1f:ec:28:ba:d8:cf:8b:
85:92:61:61:fc:a5:e7:52:1d:dc:f6:e0:c0:54:66:
cc:17:3c:4b:b2:55:a8:e3:00:f1:f3:73:18:64:39:
f0:95:7a:20:69:68:b5:03:69:c9:3a:f0:08:17:86:
8c:c5:11:90:d9:a2:26:83:e2:2f:86:a2:4d:e0:66:
23:65:9c:ab:bd:54:ba:9a:7c:ba:d5:fc:e3:de:7c:
10:ab:01:4c:eb:b4:a8:ce:39:e2:8e:d0:eb:09:d8:
78:34:fe:40:f9:4b:93:b3:a1:52:23:8b:87:7d:c9:
18:57:47:63:8e:57:c9:54:72:2c:52:ef:d5:a9:42:
b1:11:33:58:f8:3a:0c:2f:39:06:cc:a9:be:87:38:
a4:b9:f7:ac:21:b5:31:29:6e:81:18:f0:68:be:3d:
15:c9:db:19:e1:43:21:1b:07:67:03:d7:ec:0b:ed:
3f:90:73:5b:13:2c:e4:3a:95:76:c4:f1:52:db:39:
17:18:a2:f5:ad:19:74:a6:7a:21:5b:4b:6f:89:84:
c2:d5:95:9f:ad:76:14:d8:d1:6a:16:33:83:f7:ea:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F9:54:1C:9A:C4:4D:91:49:25:78:57:AA:51:40:56:D7:58:70:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D016E3264B011F1913D32B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:44:07:dc:76:66:24:82:e5:7a:b4:6c:dd:d1:07:ce:08:72:
f9:77:ec:cd:03:5c:93:2a:a9:30:15:c9:62:b9:0d:4b:ee:1e:
b6:84:87:01:d4:8c:e4:e9:90:b9:3f:de:5c:12:a4:dd:08:a3:
55:8d:1d:0d:60:32:4b:8d:da:8e:06:b5:0e:3b:38:85:0d:de:
bc:6e:b6:49:91:e9:01:33:d8:98:3d:49:d3:72:58:64:a3:44:
ae:72:c3:76:0d:6d:25:c8:d8:34:bd:82:d8:3f:d7:8a:09:85:
6d:55:6c:b3:27:34:e2:ea:15:9b:ee:bd:a8:65:7b:6b:0f:2c:
14:44:99:bc:1e:b4:a3:a9:b5:97:0f:5a:37:84:08:e3:53:3a:
b9:82:01:08:a0:2c:d0:59:6e:94:15:e5:b4:46:5b:e2:bf:a0:
52:2a:83:6e:c5:94:1b:f6:36:bc:2a:b9:5a:dc:2d:34:c8:a7:
4f:20:9f:f7:69:2a:00:b4:0c:75:5e:67:23:6f:7a:60:c6:f0:
2a:f8:26:30:3d:f8:9b:44:fd:8c:4a:b2:1a:5b:a8:87:67:21:
17:c7:8d:d1:77:c8:a9:d0:46:41:d9:91:3b:6f:c5:2c:75:f4:
df:67:d9:b1:d4:99:e9:34:b0:19:1c:f8:d4:ea:01:84:c9:cd:
99:89:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:17 2026 by rpki-client