Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0C3F1CE842F11F19EE4FBF4CE1D38B0.roa
File: C0C3F1CE842F11F19EE4FBF4CE1D38B0.roa (raw, json)
Hash identifier: WtiaQb9fwDsHMnr73lnIIPUT8fUwr4RttSUGSOmr5pY=
Subject key identifier: 76:8B:63:D6:BD:97:23:44:B1:11:20:ED:E8:99:65:21:68:2C:EF:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C67D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0C3F1CE842F11F19EE4FBF4CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:40:06 +0000
ROA not before: Mon 20 Jul 2026 11:40:02 +0000
ROA not after: Fri 28 Aug 2026 11:40:02 +0000
asID: 63023
IP address blocks: 156.229.239.0/24 maxlen: 24
156.233.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116349 (0x1c67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 11:40:02 2026 GMT
Not After : Aug 28 11:40:02 2026 GMT
Subject: CN=6a5e0916-a4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:b6:6d:da:14:2d:cb:1e:b8:37:93:ba:e1:
f8:02:bd:04:e8:2d:7f:a3:a4:7b:bd:a8:98:b8:2a:
bf:ab:f5:9c:e5:90:62:5f:ef:ec:a5:b9:06:c4:bf:
40:0b:d2:a3:86:08:8c:7f:ac:a3:c9:3a:79:7b:10:
51:32:35:c1:4f:3f:e2:14:c4:5d:b7:fa:4d:55:ad:
34:50:1e:84:1e:28:c0:42:10:ad:19:b8:89:2f:e7:
f9:46:40:62:1b:7b:5c:57:ea:57:c0:88:50:37:47:
92:98:18:50:76:03:f6:0e:dd:41:48:98:1b:30:13:
90:c2:e7:91:60:b1:e8:68:7e:71:d6:75:ba:23:f8:
96:ed:08:02:c2:14:c2:b8:11:1e:58:b3:d7:6d:c7:
88:92:b7:8c:47:70:35:c8:9c:f9:68:b7:90:bb:5f:
2a:fe:a7:cf:1a:c3:98:fd:26:22:be:b6:72:b6:0d:
37:b7:f4:97:f6:67:5d:e0:85:c5:88:2e:30:df:58:
f5:b3:33:8c:9b:56:76:74:a9:2a:61:0a:0d:81:19:
d4:1a:c7:20:06:5a:b5:93:42:da:7f:04:11:b3:c2:
5f:bf:a8:d4:d4:7d:74:7f:6c:51:b7:47:79:e0:be:
30:67:b9:85:6a:f5:20:3b:9a:91:63:ef:df:38:0c:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:63:D6:BD:97:23:44:B1:11:20:ED:E8:99:65:21:68:2C:EF:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0C3F1CE842F11F19EE4FBF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.239.0/24
156.233.2.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3d:7f:7e:09:60:d9:ef:f7:36:eb:6c:88:b5:18:af:5e:4f:
82:94:48:0d:18:c6:2a:54:2f:41:10:6b:6a:14:e8:a1:b7:bf:
5a:c9:c4:fc:4b:ac:8c:60:7a:67:4d:a3:83:8b:0a:b7:74:c1:
dc:e9:b5:c6:6f:0b:8b:ba:8e:52:51:1c:3d:c9:5d:e6:6d:95:
d7:ac:c8:3b:f4:e7:81:6b:d8:00:3f:0f:d6:26:ba:7d:b3:c3:
7f:0e:76:ae:a0:e3:a3:2e:84:da:55:44:5e:e0:08:70:fa:54:
e2:07:f1:87:eb:23:4f:1a:0a:43:90:3d:64:e0:11:8f:8b:43:
77:1d:6a:9c:b0:e4:65:b3:f2:04:98:74:0f:37:2f:2b:e4:b1:
c1:4d:d1:58:aa:59:a3:c5:9a:f7:5d:25:2f:9d:40:b4:01:7e:
a2:45:be:52:76:bd:ca:ab:c1:55:02:44:92:da:12:89:78:e0:
a7:73:39:74:1e:81:a5:4a:dc:75:8e:9c:4b:70:cb:68:55:ba:
51:87:85:7b:bc:88:bd:f1:dd:c2:30:67:ed:cf:f7:c5:d6:4c:
69:36:6b:de:e0:1d:1f:57:ad:ee:fc:46:f3:64:19:1a:7d:34:
d9:67:40:4d:9c:48:05:98:a6:67:22:16:38:c0:f6:d2:be:db:
a1:42:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:50 2026 by rpki-client