Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9312D67484EC11F1936985FACE1D38B0.roa
File: 9312D67484EC11F1936985FACE1D38B0.roa (raw, json)
Hash identifier: ypX7iWlCleOnYRSq0iy1cKcDJkBTKtx8S2w1geqOw4k=
Subject key identifier: 72:E6:27:62:A8:12:84:C1:38:0F:2A:20:2C:A5:97:AD:40:B0:1A:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9312D67484EC11F1936985FACE1D38B0.roa
Signing time: Tue 21 Jul 2026 10:11:44 +0000
ROA not before: Tue 21 Jul 2026 10:11:40 +0000
ROA not after: Sat 29 Aug 2026 10:11:40 +0000
asID: 212238
IP address blocks: 156.229.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116440 (0x1c6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 10:11:40 2026 GMT
Not After : Aug 29 10:11:40 2026 GMT
Subject: CN=6a5f45e0-7334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:7d:4d:a5:d7:2e:15:06:08:9b:a9:fb:6f:
69:ff:86:30:c4:21:2d:53:c7:6a:0f:5e:18:de:17:
b2:c5:05:15:42:9b:2d:10:cf:fd:b1:58:79:7e:7e:
26:08:80:04:78:5f:f8:43:f8:dd:84:95:a8:e7:80:
1f:60:f4:16:69:6b:85:0b:66:26:58:34:32:b0:bb:
d7:dc:ff:e3:d9:34:c7:d5:cf:49:3a:cd:ba:5c:ec:
93:54:f6:83:54:bd:5e:99:f2:3e:a4:29:a8:97:be:
97:19:ee:c9:48:bd:cd:63:6e:ec:56:41:24:fe:b0:
d6:9b:f4:71:80:b6:64:93:af:64:7f:73:f8:d8:05:
27:a9:8b:da:55:9a:38:96:99:e4:f3:a3:4b:f2:fd:
22:55:d0:03:f7:a8:7d:b9:d8:af:dd:39:66:f9:4e:
d6:fb:96:45:62:6f:3d:d8:3f:54:63:f1:02:02:c8:
79:dd:7e:33:9b:1e:0f:7b:7d:f3:42:94:b2:bd:b5:
38:5b:5d:c6:9c:29:47:38:ab:9b:6d:45:c0:b9:bb:
10:fc:43:72:2a:ba:4a:ad:72:9e:1c:4a:b2:bb:7f:
fc:99:99:4c:14:7a:b8:42:27:ed:60:cb:19:89:44:
f5:b6:b3:f5:c3:3d:63:52:77:88:d5:36:01:3e:20:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E6:27:62:A8:12:84:C1:38:0F:2A:20:2C:A5:97:AD:40:B0:1A:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9312D67484EC11F1936985FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.122.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:59:5a:81:1a:8d:bd:62:d2:fa:8a:fe:f2:c6:b0:68:59:e4:
c8:cf:1a:95:9a:db:44:b8:a7:de:89:68:d9:bf:83:b5:b8:50:
e4:07:e4:8b:b5:6e:21:92:58:4d:4b:87:31:3a:81:ed:47:b0:
67:6a:61:8d:b6:53:1c:13:80:cc:18:9f:a5:8f:e1:4c:72:40:
43:9e:22:14:60:98:f8:b4:30:ac:2e:d8:df:ec:dc:b7:b4:4b:
6d:ef:0e:b8:75:fd:b7:9b:3d:5d:ec:9a:c7:d0:66:c9:10:1a:
35:46:73:ed:22:56:0b:52:d7:aa:3e:e2:1c:b5:b6:90:79:b7:
97:fa:71:13:5c:9c:46:28:d7:99:c8:c1:d7:12:c2:a1:2a:da:
28:01:87:4d:11:30:85:0e:a9:52:13:4c:1d:85:09:dc:11:14:
22:4b:4f:67:30:45:55:34:bc:15:40:c9:6e:49:0a:37:58:96:
dc:4e:77:5f:69:24:ab:43:a1:fc:13:50:98:49:da:64:fc:b8:
51:78:59:5c:a8:7e:c0:09:fd:12:84:49:3b:90:43:92:47:bb:
cf:dd:fa:26:1c:e8:5a:83:4a:7d:a5:a3:ad:96:20:89:b4:0d:
38:4d:1f:41:70:ad:a0:78:b6:32:92:29:dc:4f:de:d6:6a:31:
73:3a:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:50 2026 by rpki-client