Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C8D81E484EF11F1952AE00BCF1D38B0.roa
File: 7C8D81E484EF11F1952AE00BCF1D38B0.roa (raw, json)
Hash identifier: ZN1wI+/3ZSZzV2MXAlp6TdFM4q/u2G3Cl0B/SmZYw54=
Subject key identifier: 02:09:21:0F:0B:40:86:3E:B0:31:05:0C:96:6A:CC:8E:83:B1:C3:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C8D81E484EF11F1952AE00BCF1D38B0.roa
Signing time: Tue 21 Jul 2026 10:32:35 +0000
ROA not before: Tue 21 Jul 2026 10:32:31 +0000
ROA not after: Sat 29 Aug 2026 10:32:31 +0000
asID: 48031
IP address blocks: 156.246.148.0/24 maxlen: 24
156.246.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116448 (0x1c6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 10:32:31 2026 GMT
Not After : Aug 29 10:32:31 2026 GMT
Subject: CN=6a5f4ac3-649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:d6:7a:f4:ec:b4:c3:70:3f:c6:59:e7:ef:
c0:b6:5a:34:52:01:1f:b5:08:71:df:83:91:11:6f:
e6:62:e3:8d:86:c6:db:1f:de:05:14:d0:a3:f4:36:
6b:af:a1:23:9b:5a:5f:bb:c3:24:f8:6a:2d:e2:c8:
fa:06:2e:b8:58:d9:ad:90:88:63:db:63:da:8a:fe:
87:2f:51:e6:9a:42:9c:5e:e3:3c:03:3a:97:9c:91:
17:01:1e:bc:a2:7f:30:02:53:71:3a:0f:db:17:71:
ec:01:35:b0:43:6f:bd:44:1e:94:f8:9f:a7:83:7f:
5c:48:a7:16:24:12:1d:4c:d3:74:f0:9b:d9:05:ad:
ff:0d:f3:8a:63:5c:07:0c:ca:b1:fe:2e:80:c0:9f:
52:b8:a1:0c:f7:2f:64:72:70:d7:60:74:55:73:ac:
dc:cf:26:ac:3b:c2:b9:70:92:65:d4:23:0e:49:d1:
88:7b:a0:77:d9:fd:27:16:ed:63:60:03:89:e1:5b:
ae:71:b8:1b:1d:c1:8f:a8:2a:8b:26:8f:34:27:c4:
b3:35:f4:95:3d:41:a8:04:45:ad:44:7f:43:0d:ff:
ad:d0:9c:90:a9:78:39:25:7c:58:ed:8d:f0:e6:4b:
d1:c0:08:13:89:d8:86:a8:95:9a:68:f2:3f:31:2e:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:21:0F:0B:40:86:3E:B0:31:05:0C:96:6A:CC:8E:83:B1:C3:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C8D81E484EF11F1952AE00BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.148.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:a4:f6:ff:a6:51:8e:19:7a:15:bd:ca:50:2b:62:24:14:36:
8b:7f:04:11:0e:e7:44:53:20:80:83:b7:83:97:b3:f4:18:8c:
fe:e4:d7:7c:b2:dd:bd:86:35:73:9b:89:d9:65:c8:6f:88:89:
54:99:b2:4b:3e:fe:74:08:27:f6:af:82:1b:5d:83:62:45:36:
ea:41:13:01:c8:4d:9a:78:30:96:c4:87:5b:05:be:84:11:1c:
f0:6c:42:41:c3:8a:db:86:89:b7:2e:8e:04:6e:37:89:55:fb:
ff:30:ab:1a:73:28:f3:27:b3:6f:fb:93:59:a6:ad:c9:ce:21:
91:0e:e3:2d:94:c1:82:63:bf:7a:b7:e0:a0:91:af:0a:28:49:
22:96:3a:65:b6:94:20:92:62:7d:89:99:77:b3:ab:32:c5:dd:
f0:f2:bc:8d:20:ac:48:6e:ac:73:c9:26:81:d3:bf:e9:3b:1d:
ef:cf:f0:a9:c3:41:e8:c1:64:c6:ad:69:cf:65:18:51:fd:f9:
7a:55:e9:42:12:07:53:25:63:c9:1b:3b:95:73:f6:d5:5d:38:
dc:ea:72:a8:3e:25:34:2a:1c:1b:37:21:3a:30:08:4d:2f:64:
81:1e:c9:28:3e:9a:ac:d3:28:1c:b4:99:72:b4:b9:ac:3f:ab:
5f:6d:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:26 2026 by rpki-client