Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/020CD8F6842811F190709AC7CE1D38B0.roa
File: 020CD8F6842811F190709AC7CE1D38B0.roa (raw, json)
Hash identifier: 6JcJ+wBbU4Q4wD2nECYFRX7VqR9rneQ/KKS/MRDK6Es=
Subject key identifier: 9A:47:13:4A:00:5A:57:F8:62:62:B3:72:60:BC:0D:D1:B1:7D:3B:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C66F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/020CD8F6842811F190709AC7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:44:40 +0000
ROA not before: Mon 20 Jul 2026 10:44:36 +0000
ROA not after: Sun 16 Aug 2026 10:44:36 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
156.226.180.0/22 maxlen: 24
156.226.180.0/24 maxlen: 24
156.226.181.0/24 maxlen: 24
156.226.182.0/24 maxlen: 24
156.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116335 (0x1c66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 10:44:36 2026 GMT
Not After : Aug 16 10:44:36 2026 GMT
Subject: CN=6a5dfc17-502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:31:ec:30:7e:80:a7:f8:b8:ca:10:be:fd:
b4:71:1f:c7:5b:19:7d:93:f5:18:bd:62:d4:0d:05:
fa:d7:5a:74:3f:ca:09:67:6b:e8:4e:e3:d6:56:06:
83:26:07:c4:68:40:78:99:2e:6a:98:58:1c:82:5f:
e2:f2:bb:a6:ce:eb:f2:e8:3d:53:0d:2b:25:23:7b:
d2:73:bb:57:1f:84:da:18:25:cd:f9:a9:3d:ed:53:
82:36:23:ab:05:ff:62:d9:8e:22:68:c6:e2:45:c3:
e6:47:95:9c:46:0e:20:0e:a8:eb:ae:ce:02:89:40:
36:5f:ad:24:fc:c1:d2:c6:29:96:d1:dd:ab:bf:3d:
e5:67:54:1b:bb:fc:1a:1f:b0:45:b8:13:7e:41:f0:
a5:e1:bf:ff:5e:4b:e0:f9:4e:56:8d:f2:8b:42:af:
7e:22:49:47:ae:60:f0:69:46:8a:8f:5c:d8:e6:ce:
81:c6:cd:aa:96:26:cd:b8:5b:d6:85:42:32:a2:af:
e3:ec:a3:bd:a5:67:85:c5:b2:75:80:fa:e6:77:c1:
9f:6b:cf:08:ec:0d:9f:8b:03:54:ce:47:35:ea:f1:
f8:d8:ce:3b:39:14:26:83:7b:65:2a:48:37:9c:15:
3c:ae:35:18:84:67:3c:d2:68:ad:7e:b1:37:ee:37:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:13:4A:00:5A:57:F8:62:62:B3:72:60:BC:0D:D1:B1:7D:3B:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/020CD8F6842811F190709AC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
27:da:27:62:2a:47:f6:44:4e:26:51:47:0f:93:3e:ab:aa:90:
2a:92:45:a7:b2:ed:d6:b3:3d:08:38:34:3c:56:17:63:08:af:
aa:3f:4a:a5:5c:42:77:ed:31:e0:97:4c:88:1b:64:a8:62:6c:
fd:25:06:20:09:20:c6:65:b2:f7:d5:d8:f6:ec:07:7d:1c:a4:
bc:0e:dd:7a:16:17:f2:13:c4:ac:77:e5:78:9c:be:7f:12:98:
df:b5:0f:ee:d8:4c:49:52:d7:d8:68:d5:ea:9c:2b:8e:2b:c8:
16:29:97:53:ff:41:a6:f7:bb:11:f9:73:5f:5d:7e:66:97:1c:
7f:5b:d0:16:98:4e:68:00:45:65:d3:42:8a:77:b7:ec:13:23:
8c:ce:38:95:a4:0e:81:10:a4:37:26:85:52:d5:9d:c1:10:28:
fe:65:d8:e9:37:cd:72:5b:b0:a0:5d:5c:3b:9b:be:a2:57:28:
c2:07:8f:69:13:d4:b1:af:6b:0a:96:5a:f0:5e:27:da:b9:9f:
5e:ce:b5:2a:f2:a5:6d:83:fc:27:0f:5c:16:6c:95:64:df:dd:
f0:0f:cd:b3:9c:fc:3a:35:75:d2:96:57:65:c8:f2:30:b7:d1:
e7:32:46:66:a4:2c:85:6d:4a:4f:e8:71:21:3e:29:02:fe:b2:
bb:55:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:47 2026 by rpki-client