Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310B9CFE850A11F19648A5ABCE1D38B0.roa
File: 310B9CFE850A11F19648A5ABCE1D38B0.roa (raw, json)
Hash identifier: VskDZuPs91ekrBxXchGvDtByyFcs3yogxEJNsEW9z+k=
Subject key identifier: F3:32:AF:73:85:F5:CE:66:94:14:3E:E0:F0:4E:54:B9:72:26:C5:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C72A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310B9CFE850A11F19648A5ABCE1D38B0.roa
Signing time: Tue 21 Jul 2026 13:43:45 +0000
ROA not before: Tue 21 Jul 2026 13:43:41 +0000
ROA not after: Sun 16 Aug 2026 13:43:41 +0000
asID: 17497
IP address blocks: 156.245.8.0/22 maxlen: 24
156.245.8.0/24 maxlen: 24
156.245.9.0/24 maxlen: 24
156.245.10.0/24 maxlen: 24
156.245.11.0/24 maxlen: 24
156.245.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116522 (0x1c72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 13:43:41 2026 GMT
Not After : Aug 16 13:43:41 2026 GMT
Subject: CN=6a5f7791-0716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:20:52:57:70:b3:ba:33:2d:cf:86:b5:60:
87:80:54:19:aa:e4:f2:d7:c0:91:c5:c3:3f:05:96:
23:1b:7e:34:fc:6f:8a:f3:73:27:39:d8:00:06:14:
14:49:ba:da:97:bb:52:85:0a:6f:67:25:7c:ac:54:
e5:82:64:17:dd:5b:b8:80:96:98:92:53:ff:f4:26:
35:1a:6f:01:c6:9a:a6:64:ca:c1:19:4e:f0:29:e7:
88:da:4a:76:95:95:5f:c2:6f:7c:65:1a:9a:3a:74:
0d:e5:99:70:a7:56:67:9a:4a:a1:c2:9e:30:d1:3e:
7f:20:81:9d:ca:3c:e1:78:bf:f6:e0:bf:91:bc:44:
8a:0d:64:2d:d9:90:87:d3:c3:df:a0:a4:53:af:46:
a3:f8:d9:12:df:19:2e:44:a1:fa:89:ef:80:2e:5d:
c2:be:40:9b:4e:b0:a4:db:dc:65:0f:b5:26:e1:9d:
d6:06:4b:46:2e:fc:c8:18:6c:8b:06:e3:b5:79:a3:
db:4b:5f:d1:1d:6d:fb:14:b4:50:25:11:23:78:0a:
96:75:8b:de:b4:ec:37:a8:70:82:71:1d:a3:91:95:
b6:be:3b:09:8a:78:e2:1d:18:4f:48:5a:3d:fa:19:
a4:d9:dd:1c:82:cc:dc:6b:10:d1:82:8e:40:c5:d1:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:32:AF:73:85:F5:CE:66:94:14:3E:E0:F0:4E:54:B9:72:26:C5:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310B9CFE850A11F19648A5ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.8.0/22
156.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
42:40:77:bb:5b:4e:07:67:b1:d2:94:36:59:a1:67:36:3a:4d:
a4:f1:76:9d:c2:6f:aa:fb:9e:1f:45:74:95:0d:6f:17:18:4d:
cb:3c:2f:e3:40:06:87:31:6e:c4:84:1f:07:94:0c:84:31:2e:
3d:ba:73:d8:d5:8c:f1:51:bf:67:58:e3:59:66:35:31:dd:43:
fe:9d:d9:e3:f3:62:4e:9c:71:4f:a1:92:4d:9b:5b:00:88:22:
b5:c1:8c:07:ba:d3:eb:e8:72:e3:e9:42:38:a2:2d:d7:67:19:
04:4d:80:84:ed:aa:36:c7:7d:65:5a:70:ad:79:5b:1d:97:fd:
5e:ae:7c:16:6b:f9:83:f5:b4:56:31:c5:75:20:e2:53:a3:77:
be:88:bb:83:7e:21:8e:b1:07:d0:14:e2:93:77:91:dd:e0:3f:
02:c8:39:9c:02:ea:49:be:00:ac:68:88:c9:09:be:83:c6:db:
f9:49:ec:b9:38:e8:5e:9a:a0:0b:75:93:31:c0:26:00:2c:59:
da:ab:4b:30:e7:89:db:26:56:31:7b:3b:b6:8c:50:f3:a6:31:
b2:f6:f4:12:d5:4e:f9:92:5d:e2:ca:47:0e:d8:73:26:bc:66:
49:4a:ba:1b:57:a9:e0:5a:18:b7:b2:6e:e0:f9:74:23:56:0f:
36:6f:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:42 2026 by rpki-client