Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CEE77B882BB11F1BE344C17CF1D38B0.roa
File: 8CEE77B882BB11F1BE344C17CF1D38B0.roa (raw, json)
Hash identifier: +Q+u1atXQvpgDplNJ3Jj+0F9+L/ynEJrglAf/Q0kizo=
Subject key identifier: B9:00:8C:12:09:D3:D2:C9:E7:50:F1:5F:8B:85:A1:CE:E6:71:43:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C60A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CEE77B882BB11F1BE344C17CF1D38B0.roa
Signing time: Sat 18 Jul 2026 15:15:46 +0000
ROA not before: Sat 18 Jul 2026 15:15:42 +0000
ROA not after: Wed 18 Jul 2029 15:15:42 +0000
asID: 17561
IP address blocks: 156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116234 (0x1c60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 15:15:42 2026 GMT
Not After : Jul 18 15:15:42 2029 GMT
Subject: CN=6a5b98a2-e308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:47:0a:00:3c:2f:ef:99:db:23:69:e8:ec:22:
13:00:f4:cc:ad:d1:78:df:ad:8a:e6:9f:53:7d:1f:
d1:34:e1:64:33:b9:77:7c:65:91:82:93:9f:95:0b:
ed:62:a3:1b:ef:8c:f7:f9:3d:70:b6:c9:9d:da:3e:
3f:7a:18:43:62:82:f9:0e:82:7c:ce:53:cb:ba:30:
ed:c0:09:9e:dc:c6:07:81:32:b9:d6:8f:81:8f:c5:
13:5a:bf:74:10:46:53:0d:c0:4b:ae:78:f8:74:b1:
9e:85:d9:94:4e:3e:95:0f:a5:93:0b:a0:aa:5d:58:
2a:38:32:05:45:2d:cc:be:cb:02:95:0d:8b:75:09:
7b:f7:61:a7:4e:fb:f8:ff:b3:7d:53:6f:7f:0e:4b:
7f:ab:5a:ff:dd:e2:ff:76:be:e1:0c:fc:0b:23:46:
ac:66:5b:58:73:66:ba:ae:fd:11:62:86:71:e6:67:
92:b2:dd:e2:30:5c:b3:70:73:b9:c9:98:6e:55:c2:
17:fc:69:b3:95:07:81:ac:fa:69:37:56:a3:0b:27:
df:5e:15:3e:ed:47:a1:3e:1f:fb:cd:c6:9a:f2:c6:
bb:a3:c5:b4:28:e4:c6:94:11:7e:15:72:70:10:8b:
18:cd:e7:06:5e:c4:5a:c5:94:6d:45:7b:f1:cc:17:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:8C:12:09:D3:D2:C9:E7:50:F1:5F:8B:85:A1:CE:E6:71:43:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CEE77B882BB11F1BE344C17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:23:11:47:34:f1:33:d6:aa:66:26:7d:a1:bc:9a:3a:a5:f7:
39:1c:fe:de:04:74:40:8e:74:32:27:01:e6:ca:d6:5e:eb:f4:
e1:0b:bb:07:e3:6d:fe:03:8a:2d:9c:ba:42:56:92:78:c3:c4:
ce:b1:5d:4e:f9:8d:3c:a1:f7:33:96:9a:e5:0e:12:98:45:fb:
5f:10:76:1a:99:34:b9:88:3f:53:aa:ab:ce:bc:e9:d0:a1:bc:
a3:12:e1:10:55:e2:22:4f:7e:48:d3:ee:c2:d8:81:95:65:51:
53:cb:a8:31:86:c5:87:19:9e:0d:c1:b6:05:a8:0e:60:58:94:
e4:44:55:23:34:6d:24:47:6c:b5:79:fa:52:69:d4:12:65:21:
db:fd:f0:dd:77:88:27:33:e2:b8:84:c0:2c:bb:d0:cd:e9:45:
a3:e8:95:48:f3:e1:98:ce:eb:de:e8:ce:ce:34:d4:75:fb:29:
06:43:1d:cc:43:49:d6:27:e3:45:c2:89:6d:27:2e:4e:9a:3a:
95:8a:74:d2:4e:a1:0f:ad:10:b7:ee:d6:35:30:03:dc:36:05:
0a:0a:31:c9:ed:66:e5:c0:37:fa:b2:74:c2:97:89:74:4b:ed:
80:9e:0b:14:bc:f9:20:d4:2f:57:80:06:0a:2a:ed:ac:ce:02:
1c:51:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:58:04 2026 by rpki-client