Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A491085F2311F1BEBDD7F5CE1D38B0.roa
File: C9A491085F2311F1BEBDD7F5CE1D38B0.roa (raw, json)
Hash identifier: x1Sl1TJ/v3EzEyBZZUPlqd7kX2nO/OGT51o28DyLk/k=
Subject key identifier: FD:26:DF:21:8A:60:BA:A2:DF:32:66:3B:08:17:53:C2:B7:B6:EB:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A491085F2311F1BEBDD7F5CE1D38B0.roa
Signing time: Wed 03 Jun 2026 08:11:14 +0000
ROA not before: Wed 03 Jun 2026 08:11:09 +0000
ROA not after: Wed 08 Jul 2026 08:11:09 +0000
asID: 274065
IP address blocks: 156.238.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113547 (0x1bb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 08:11:09 2026 GMT
Not After : Jul 8 08:11:09 2026 GMT
Subject: CN=6a1fe1a2-a60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:ef:0d:1f:9e:7a:07:de:79:d3:1c:79:68:
46:e9:b4:45:6a:3d:44:ee:9d:b2:cd:ca:45:f8:61:
2a:79:88:6f:76:ff:4a:d2:41:a1:34:9b:50:f0:e8:
0e:ac:d1:b1:8b:b7:f3:dc:75:6e:97:97:bb:98:0a:
1d:ed:5a:7d:de:25:6b:12:39:3f:0b:fd:f8:05:fc:
01:e7:80:aa:0b:ae:31:4a:25:3c:09:d3:d7:5f:97:
b1:ec:c2:75:b4:e6:eb:ac:07:92:b3:04:3b:cf:b3:
21:7c:71:ae:77:32:c0:04:0d:be:d2:e5:4e:e8:55:
b2:66:db:f0:44:aa:37:f9:3e:6f:1d:5e:62:e7:f2:
2a:f6:3c:60:38:36:0a:81:c5:6d:cc:f9:24:ac:f5:
97:89:73:df:f3:c9:ce:a2:d8:83:19:5b:99:1b:0f:
a8:80:d3:cd:c7:75:53:7e:07:ca:8e:69:c2:5c:77:
cc:53:49:48:ba:eb:7c:45:fb:02:bb:a1:4c:21:a6:
b7:ba:a9:7e:5f:0c:f2:40:e5:93:d6:61:c1:df:4e:
b0:36:f9:4c:7f:c2:3d:ef:28:a7:24:c4:3f:94:4a:
b3:1a:03:6d:be:0d:1c:6b:31:27:83:15:7e:f7:b8:
64:1b:8a:7d:49:93:f4:58:85:7f:2c:1c:ed:66:7e:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:26:DF:21:8A:60:BA:A2:DF:32:66:3B:08:17:53:C2:B7:B6:EB:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A491085F2311F1BEBDD7F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f6:3a:60:9b:d2:13:d7:50:c1:4c:08:55:06:a1:2b:71:0d:
f4:d5:09:d8:3b:96:7c:21:2d:ff:e6:34:41:38:e7:7d:7d:92:
88:86:62:20:b6:d4:23:64:3e:09:4d:24:80:84:ae:4e:27:e9:
36:d2:7a:3b:08:f7:05:ea:a9:8a:6c:f8:a7:6b:de:8b:e4:a7:
75:2d:48:a9:ee:bd:6b:56:84:7d:53:c3:62:70:0a:e5:32:ef:
4b:14:5c:f9:ab:07:b9:89:86:4c:ef:46:98:28:b9:bd:9f:9a:
0f:60:9d:55:0f:92:47:02:d5:aa:49:94:e5:a7:33:6c:b1:4a:
47:b4:01:90:bd:d9:1c:c5:c7:3e:38:53:60:ed:8d:57:6d:c1:
bb:cb:46:c4:95:b6:8b:18:cf:9d:83:81:b1:55:ab:a4:2b:95:
fe:62:2d:88:77:13:72:26:72:97:a6:f1:58:d0:57:38:e1:36:
fd:9f:d3:af:ad:81:c7:0f:ac:be:4e:ab:e1:18:67:81:d5:c5:
e9:41:b0:d7:51:92:85:1b:61:fb:d7:85:30:0b:4f:c3:f7:6d:
e8:80:97:b2:bc:4a:9b:59:a7:cb:14:50:8d:19:d3:af:10:a4:
78:5a:f0:47:df:10:67:7f:a9:ef:0f:c4:9b:87:1c:40:e4:ff:
5b:e3:09:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:02:18 2026 by rpki-client