Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018C9E7485D211F1A0447FEBCE1D38B0.roa
File: 018C9E7485D211F1A0447FEBCE1D38B0.roa (raw, json)
Hash identifier: /pe3cJ5eLdrN7dxOi4fIwL+kZU0Lo9dbGPwr/ibmxXE=
Subject key identifier: A0:48:ED:B2:7B:AA:3C:61:0D:FD:10:DD:61:E6:30:28:72:F5:96:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C75B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018C9E7485D211F1A0447FEBCE1D38B0.roa
Signing time: Wed 22 Jul 2026 13:34:04 +0000
ROA not before: Wed 22 Jul 2026 13:34:00 +0000
ROA not after: Sun 23 Aug 2026 13:34:00 +0000
asID: 401739
IP address blocks: 156.247.40.0/24 maxlen: 24
156.247.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116571 (0x1c75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:34:00 2026 GMT
Not After : Aug 23 13:34:00 2026 GMT
Subject: CN=6a60c6cc-f8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:e7:21:7e:ed:12:19:e7:d9:62:bc:dd:8c:
1e:0a:c9:7c:9b:1b:8a:b4:0d:9d:0d:33:10:95:22:
cd:b8:d4:b2:bb:e4:d9:e9:54:69:7d:5e:9f:6c:05:
49:de:24:19:69:9c:20:57:75:ab:80:c1:d5:01:91:
48:64:43:49:05:93:de:a4:22:a1:31:6c:62:a1:96:
50:a0:56:86:9c:6b:33:d6:be:d3:be:b5:b2:da:a3:
55:73:f7:25:f6:e9:33:09:c8:8c:18:08:f4:ef:23:
0d:95:cb:85:1e:1c:6c:36:5b:ef:3b:34:81:2e:11:
b4:5f:56:3c:c3:3a:a5:65:13:e9:45:31:24:12:2d:
8f:1e:de:60:84:06:6c:7c:65:48:8f:ae:f6:f8:48:
10:ab:87:c8:53:66:c6:21:08:57:a8:83:a9:a4:8d:
09:e8:c1:aa:14:4c:51:2b:fd:06:54:1d:b8:ee:7e:
ff:59:c3:11:b6:37:2b:9e:9e:a9:d7:06:69:66:91:
63:58:98:48:8b:be:27:cc:7e:83:8b:04:a7:58:a8:
96:4d:03:e1:10:91:58:c8:aa:3b:2c:f0:da:4f:06:
76:75:93:9f:ea:ee:31:1c:e8:53:6f:c9:7c:ed:dc:
68:00:90:3a:f7:34:bf:2c:8b:80:51:47:9f:ce:9e:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:ED:B2:7B:AA:3C:61:0D:FD:10:DD:61:E6:30:28:72:F5:96:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018C9E7485D211F1A0447FEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:b0:d8:16:d7:67:78:41:fa:94:36:23:a0:09:a2:1c:c5:b5:
b1:f9:c0:25:12:80:0e:ca:04:8c:b6:d0:b2:38:c1:f7:a4:be:
7a:dd:75:51:68:23:9a:78:9e:ae:2b:a3:2a:2c:d1:31:9b:a4:
b3:ad:f4:68:82:59:fc:54:23:ff:37:8c:14:13:9a:fe:73:af:
82:27:0a:a3:7d:fd:d1:9d:6f:a2:e0:e7:a3:f1:41:34:0d:8b:
3d:d7:a4:7a:a0:13:29:39:eb:0b:33:bc:25:35:d3:ce:76:23:
15:56:42:90:3c:9d:77:90:a1:4e:ec:e0:04:c8:97:3f:a1:36:
0e:fd:6a:b8:63:36:93:43:b0:10:08:2c:54:9c:70:f0:2f:7b:
de:6c:be:f7:a0:20:70:07:d0:16:6f:c6:cb:3f:21:65:5e:52:
8f:ea:f3:17:c9:67:69:75:e7:a5:d4:9a:0e:69:cd:56:8a:05:
da:d9:42:ac:27:67:9e:c8:a4:50:5e:ab:8a:2a:c4:1a:b2:fb:
d5:2a:ad:d0:12:f2:9e:e2:16:82:89:5a:bd:74:5d:2c:1b:b5:
b0:62:a5:1c:2b:aa:cb:21:d2:f2:dc:62:d1:f9:06:1e:af:9e:
6f:1d:1d:85:f8:59:d1:1f:0d:aa:e5:91:e1:f7:e1:be:9e:ee:
98:cc:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:13 2026 by rpki-client