Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/783E7D9C82B911F18C0A170BCF1D38B0.roa
File: 783E7D9C82B911F18C0A170BCF1D38B0.roa (raw, json)
Hash identifier: AWHMVI9m8BNWL77lh+UBbj96kVaLsTQQMSfzBXxDfHc=
Subject key identifier: 41:19:3F:D9:29:C4:F1:7D:8E:9D:16:C3:37:9D:60:7C:CF:AE:F4:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C608
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/783E7D9C82B911F18C0A170BCF1D38B0.roa
Signing time: Sat 18 Jul 2026 15:00:53 +0000
ROA not before: Sat 18 Jul 2026 15:00:48 +0000
ROA not after: Sun 16 Aug 2026 15:00:48 +0000
asID: 154321
IP address blocks: 156.226.176.0/22 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116232 (0x1c608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 15:00:48 2026 GMT
Not After : Aug 16 15:00:48 2026 GMT
Subject: CN=6a5b9524-a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:0b:11:26:ef:59:eb:2f:c5:bb:b2:64:2e:
92:d1:7f:d5:32:b0:9e:de:dc:07:f1:04:01:99:5a:
20:4a:56:a9:b2:13:45:e7:f4:b6:83:5b:16:14:db:
d2:ad:6b:84:35:cb:ed:d1:82:cc:f2:90:fa:c3:da:
a6:cc:ee:7c:92:d8:90:1d:26:2c:cc:73:e9:00:86:
8c:ec:b3:bc:61:c7:8c:74:c3:8c:e2:20:08:7d:51:
30:42:2c:61:2b:55:0f:f1:4d:6d:0e:f9:f6:4c:08:
1f:4f:bc:03:ee:54:22:7f:f7:da:1e:78:63:3e:2c:
1b:d0:b9:e9:65:7a:e1:5d:78:31:04:43:b9:39:64:
40:4a:43:dd:a3:aa:f3:9d:a3:bf:2c:d4:20:1e:80:
d8:f7:b5:4f:dd:a5:dc:78:4b:0e:7b:30:f4:b4:c1:
31:c8:b9:5f:58:aa:aa:ff:15:77:d7:61:85:63:34:
f4:29:c2:28:68:ee:d0:b4:e9:a5:76:a3:d7:ad:f9:
e9:89:5b:ae:0f:d0:0a:c9:a8:50:a2:6c:fb:4a:ba:
dc:2c:c7:e7:8b:5d:14:96:e5:a7:92:1d:7f:2f:ee:
d3:d1:86:14:e7:ed:00:44:5c:b5:a7:5f:35:74:59:
57:be:4b:81:bd:30:ae:0d:d7:0f:30:73:de:6d:96:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:19:3F:D9:29:C4:F1:7D:8E:9D:16:C3:37:9D:60:7C:CF:AE:F4:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/783E7D9C82B911F18C0A170BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:8b:80:7d:79:bc:d2:80:46:6f:52:50:33:67:07:53:be:43:
2e:21:e3:b9:0b:37:16:1e:ca:f7:18:f4:de:78:df:37:f0:a5:
be:7e:e2:40:57:24:a3:e2:cb:55:31:a1:7d:33:33:2b:58:ac:
21:7f:96:64:e6:64:74:87:e8:b4:ef:77:06:1e:80:d0:79:78:
4e:4a:32:7e:33:5c:a5:f4:84:4b:fd:7c:99:0b:7d:11:22:27:
10:21:34:90:2f:8b:f3:b1:5d:7b:9a:10:c0:dd:1b:1a:c0:36:
86:33:0c:bb:d2:8a:bc:16:b7:05:ba:72:11:46:4c:94:62:b2:
e4:9f:9c:3c:6d:18:1d:3f:a5:ac:82:6f:36:ba:de:49:2b:24:
b9:0d:33:38:96:6e:89:cb:75:9b:ab:4e:19:e0:8e:cd:ca:2f:
41:47:76:ab:7a:c5:68:f6:84:22:9c:06:12:be:41:a0:bb:ad:
14:9e:b5:3a:63:db:42:fe:05:b2:45:54:d8:f9:c9:72:4c:99:
7b:89:26:60:4a:86:7b:02:53:ec:35:45:d0:80:0e:ee:69:2c:
82:93:6d:49:2a:c9:2e:ae:39:ea:51:53:b3:31:4e:c5:f6:3f:
92:85:f3:d9:85:8c:58:68:4b:31:fa:bd:82:fe:c5:31:08:7a:
a7:90:ea:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:25 2026 by rpki-client