Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BC0914843311F19152850ACF1D38B0.roa
File: 58BC0914843311F19152850ACF1D38B0.roa (raw, json)
Hash identifier: aLQGl4XTAWcf3uYmFSurSdYhYrvlZdwIBrLZm6pNGE0=
Subject key identifier: 31:87:8E:2A:A6:2B:33:3B:5A:CA:AD:29:9A:9D:3B:5A:0A:E7:96:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C683
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BC0914843311F19152850ACF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:05:49 +0000
ROA not before: Mon 20 Jul 2026 12:05:46 +0000
ROA not after: Wed 02 Sep 2026 12:05:46 +0000
asID: 62563
IP address blocks: 156.233.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116355 (0x1c683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 12:05:46 2026 GMT
Not After : Sep 2 12:05:46 2026 GMT
Subject: CN=6a5e0f1d-c280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:3e:a7:ce:81:f9:6c:89:3c:91:de:84:e3:
d5:62:25:90:35:14:1b:d9:71:49:b3:5f:27:f1:e4:
a2:fe:94:1b:2e:83:14:47:76:e5:1c:3c:80:be:4a:
9b:cd:3e:cf:83:af:ea:45:de:37:a6:8f:b2:ce:69:
cc:fd:c1:73:4b:3c:c2:cb:28:ab:d5:2a:e8:56:4c:
80:b3:39:89:5e:b9:42:55:30:75:f2:b5:9b:e7:0b:
25:6e:92:6f:0b:ce:23:58:9e:9b:52:6e:ee:ad:5f:
d3:6d:d5:33:cc:b1:f7:ca:96:1b:f1:ec:86:6c:4b:
be:ae:cc:b1:c8:2d:d4:f0:cd:09:8e:44:de:8c:6b:
a6:72:83:63:19:31:0e:d7:c7:78:07:e1:f0:32:3d:
1c:27:a6:40:fe:7e:9e:90:8d:12:14:29:2f:c5:c2:
b2:55:65:4d:ed:f9:6e:9d:bc:60:69:b5:bc:2f:0e:
9d:de:25:c1:e7:36:06:3b:2f:fd:41:48:79:ff:7d:
18:05:04:52:b2:5c:60:18:20:e8:d7:b6:69:26:13:
18:57:3b:c3:7d:32:9c:fe:e9:c6:24:46:2f:b7:35:
23:e6:3e:61:b4:40:35:70:6f:a3:4b:9d:77:d0:56:
83:5d:e2:a7:12:08:d3:db:3d:f5:79:5b:13:e1:27:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:8E:2A:A6:2B:33:3B:5A:CA:AD:29:9A:9D:3B:5A:0A:E7:96:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BC0914843311F19152850ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:44:cb:38:b1:be:01:7c:c3:8e:0a:68:d3:36:41:2f:b6:07:
4c:22:2c:d1:48:c9:1e:89:dc:a3:fa:b6:3f:88:52:0a:ef:7c:
6f:83:e8:02:04:ec:b0:99:bc:f8:0c:c7:4e:18:09:45:2d:39:
4d:de:04:98:be:aa:8a:94:dd:1a:1f:79:19:71:38:40:27:f4:
87:fc:5a:a3:d0:f1:c3:05:d6:7f:6d:72:60:2f:4b:69:34:fa:
fc:83:01:21:1b:48:3b:40:56:1b:5f:f7:53:19:e4:5a:37:8a:
86:a6:a7:aa:2b:98:12:0f:f5:95:a1:bf:40:0e:c8:e3:3b:f8:
44:79:b9:6b:16:cb:71:95:65:13:56:1d:56:e2:d4:a5:03:2f:
62:7a:be:2f:df:6d:20:63:d1:29:17:f1:21:00:19:b0:4f:a4:
83:42:c4:c8:eb:54:a8:b0:e1:b4:9a:72:4e:b0:21:5f:54:bb:
dd:78:8a:a7:7f:42:31:c1:61:62:be:c5:ec:f1:d7:08:f8:c2:
79:6d:7c:73:3a:ec:6b:f5:07:f0:83:17:d3:64:ba:51:6f:bd:
40:39:d5:40:f0:e3:29:dc:34:46:fa:3e:73:9b:d6:6b:7d:d3:
1c:55:57:f5:39:70:bc:54:b2:6f:7b:0b:37:7f:13:f2:92:6b:
89:49:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:33:53 2026 by rpki-client