Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2FED3EA843211F18C535B05CF1D38B0.roa
File: A2FED3EA843211F18C535B05CF1D38B0.roa (raw, json)
Hash identifier: sqULCqDOxT+J4Q7QRwACx1biVf5+9oDvZ5boNqt16Fg=
Subject key identifier: A9:84:93:8E:0C:94:A0:54:3B:6A:B7:DD:9D:5C:9A:E6:28:AA:EC:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C681
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2FED3EA843211F18C535B05CF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:00:45 +0000
ROA not before: Mon 20 Jul 2026 12:00:41 +0000
ROA not after: Wed 02 Sep 2026 12:00:41 +0000
asID: 45382
IP address blocks: 156.228.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116353 (0x1c681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 12:00:41 2026 GMT
Not After : Sep 2 12:00:41 2026 GMT
Subject: CN=6a5e0dec-d5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:8f:9e:88:de:c3:bc:43:95:75:88:1e:f0:
47:19:a9:c2:5e:1b:74:8a:cc:c3:66:25:4e:d7:cf:
ba:4d:39:63:d4:7b:81:6e:0f:5b:45:d4:06:a4:30:
8c:8f:79:ae:db:10:a7:da:c1:a5:73:13:67:cd:10:
30:57:c2:01:af:0b:bd:00:eb:71:4e:d0:56:e7:f6:
c0:4c:79:98:8b:f0:33:b6:37:0f:3a:ba:9d:36:06:
c9:0f:fc:e4:17:8c:ba:45:78:58:85:0a:a7:f2:01:
d0:2a:2c:4e:d9:8e:a1:ee:07:eb:64:8f:e5:9e:ec:
84:1e:f2:b9:cb:77:e6:b8:e2:60:27:8c:de:ea:54:
df:d9:97:76:56:00:a4:e7:e3:a2:66:f6:e9:8c:1c:
a3:71:da:1e:a3:f2:50:02:fe:d7:62:f7:92:70:ed:
1d:78:ed:53:d6:d4:14:56:e5:94:68:ab:58:f1:7d:
f1:62:04:b7:8e:6b:1a:18:e8:d5:7d:f1:f3:12:bd:
d3:7a:02:8c:c0:97:cd:1f:d4:b1:c6:57:c8:6c:85:
55:19:79:b1:1a:44:3a:97:2e:d8:99:a9:dd:a8:1a:
7e:fb:75:bf:2a:f2:60:03:5c:f1:b5:00:92:fa:1c:
f4:8c:ce:88:4e:ce:c4:a2:c7:32:c8:5a:e3:b4:c6:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:93:8E:0C:94:A0:54:3B:6A:B7:DD:9D:5C:9A:E6:28:AA:EC:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2FED3EA843211F18C535B05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:eb:91:ac:d6:d4:09:da:e6:3f:cd:b4:59:4a:16:bb:88:1b:
bc:39:0c:1c:ce:61:e0:e0:55:1d:bd:f7:d0:44:dd:97:96:15:
08:5f:95:e1:37:b7:18:c3:04:c0:31:7d:95:fa:3b:ad:e4:75:
4f:75:d9:fa:60:35:de:3d:ae:79:29:b5:03:69:14:81:52:47:
1d:53:50:39:45:e1:95:50:6d:c5:d2:d6:2b:c0:81:ff:61:77:
00:9d:a7:c7:ca:81:16:20:dc:5f:b1:0c:dc:6d:2e:4b:03:df:
69:50:0a:13:cf:9d:15:d5:fa:b0:92:b5:47:fd:11:56:74:86:
58:6c:6d:7b:f2:e2:12:2c:4d:26:ad:34:49:23:cf:cb:e0:3f:
4d:a9:16:9f:6b:46:a2:f7:47:e0:e5:2f:6e:6b:b7:4c:92:e1:
e1:43:94:94:cc:79:5d:d6:64:84:f1:9f:5c:e9:16:43:61:e5:
24:6d:19:cd:06:44:5e:4e:66:bc:b1:77:93:3d:4c:92:53:05:
54:c0:f7:79:e5:fd:71:ad:b2:db:3d:b2:d0:23:5f:f7:c5:c2:
e9:93:5e:e4:63:19:83:ab:0c:82:0b:af:ae:79:fa:df:94:72:
bd:58:ce:38:a6:88:cf:51:b3:3b:b7:a8:e4:01:18:88:0a:aa:
1a:1f:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:58 2026 by rpki-client