Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0531CE4C85BD11F1A15B1AEFCE1D38B0.roa
File: 0531CE4C85BD11F1A15B1AEFCE1D38B0.roa (raw, json)
Hash identifier: bp3UBp3eBkCI0p9c/IY1wo+JvuniByAhL1fw6/Qhc/s=
Subject key identifier: 15:9E:47:61:E3:30:4C:BA:36:E3:F9:D9:71:52:E8:33:48:29:EC:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C751
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0531CE4C85BD11F1A15B1AEFCE1D38B0.roa
Signing time: Wed 22 Jul 2026 11:03:51 +0000
ROA not before: Wed 22 Jul 2026 11:03:47 +0000
ROA not after: Sun 23 Aug 2026 11:03:47 +0000
asID: 13335
IP address blocks: 156.247.36.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116561 (0x1c751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 11:03:47 2026 GMT
Not After : Aug 23 11:03:47 2026 GMT
Subject: CN=6a60a397-2d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:a6:99:0b:8e:c0:64:40:76:b2:22:18:3d:
fb:e0:38:20:29:a4:1e:6e:f4:9c:9c:46:4c:6a:4c:
f2:d6:19:71:c8:07:bd:91:b0:99:e1:76:19:a3:2f:
50:86:02:c7:85:ac:e3:ce:69:01:ea:88:99:db:a0:
43:b4:54:0c:59:41:a2:ff:67:f0:7b:13:48:56:6b:
40:d6:7a:9f:8d:51:62:ff:88:cd:4b:79:cb:bc:84:
a1:1a:3c:38:f1:24:35:f2:e6:98:56:6a:ef:7e:01:
05:c9:5a:3a:5b:20:0e:70:29:82:12:69:97:cc:d7:
b6:9e:29:86:73:c9:5c:1b:0a:21:10:48:a9:8c:97:
ad:ed:9b:2f:38:87:fa:83:7f:b1:e4:a9:0a:74:34:
15:d0:1b:b9:f0:1a:33:39:a4:05:92:ad:10:18:76:
70:57:69:c0:9d:aa:dc:34:92:49:19:66:45:26:eb:
9b:4d:3e:f6:23:e7:90:06:2f:d1:1d:12:c5:dd:02:
7c:ba:4e:13:49:62:cb:62:f8:46:02:fa:e1:f6:a6:
c7:6f:dd:39:6a:ef:18:96:a2:e9:d1:3a:96:b2:60:
d3:6f:ec:a5:ed:29:01:b4:9a:85:f9:6c:e5:71:13:
80:75:7c:c4:15:d1:5c:19:b6:f5:c0:4c:8a:d6:03:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9E:47:61:E3:30:4C:BA:36:E3:F9:D9:71:52:E8:33:48:29:EC:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0531CE4C85BD11F1A15B1AEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:3b:1b:32:20:e0:22:98:ef:82:15:11:ad:bc:97:7f:2d:f5:
a0:f6:be:ad:4d:6c:58:03:01:b9:45:71:58:ad:0e:ab:cb:6a:
41:d1:e4:56:3b:34:e4:f5:54:55:33:6b:b0:94:c5:60:24:3d:
d1:13:b0:e2:b7:48:6c:22:85:59:9b:2e:84:fb:85:d1:12:ab:
e9:1b:b8:f0:56:a9:72:22:24:10:06:01:29:69:ff:46:ee:1a:
a1:d1:a4:4d:be:3a:bc:de:2d:e8:06:f4:b8:ec:cb:99:a5:96:
43:08:48:47:2a:38:20:57:27:05:c6:c9:22:73:65:19:28:95:
de:dc:4f:8d:8b:62:32:22:ec:e9:87:48:13:e3:b2:a5:d1:c6:
9a:aa:ba:3c:d3:e4:bf:3a:45:f4:57:fd:e3:71:a3:2e:76:c9:
c3:34:d5:10:cd:0d:a5:8b:a6:f1:75:30:bc:8f:cf:4d:ac:0a:
fb:49:d9:ef:ed:2d:bd:05:d3:ee:14:ae:af:b5:1f:24:84:77:
c7:fb:84:93:49:39:15:f1:5c:a8:53:e0:52:1e:53:39:c1:2c:
b1:22:b8:8d:d4:5a:12:6a:ed:97:6c:54:5c:44:48:02:44:fd:
79:f9:7e:96:fa:bf:e8:88:09:b9:e6:06:00:df:cd:6f:eb:f1:
81:86:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:52 2026 by rpki-client