Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDACF6CA82B711F191BA9002CF1D38B0.roa
File: CDACF6CA82B711F191BA9002CF1D38B0.roa (raw, json)
Hash identifier: 3WfsXNzhP67tCpSUknLHmIp7Xr1V1lHDcVhlZ8meW+s=
Subject key identifier: EB:34:05:EF:50:92:6D:E6:3D:61:E9:22:68:DF:71:B0:C8:15:3E:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C604
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDACF6CA82B711F191BA9002CF1D38B0.roa
Signing time: Sat 18 Jul 2026 14:48:57 +0000
ROA not before: Sat 18 Jul 2026 14:48:53 +0000
ROA not after: Sun 16 Aug 2026 14:48:53 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
156.226.180.0/22 maxlen: 24
156.226.180.0/24 maxlen: 24
156.226.181.0/24 maxlen: 24
156.226.182.0/24 maxlen: 24
156.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116228 (0x1c604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 14:48:53 2026 GMT
Not After : Aug 16 14:48:53 2026 GMT
Subject: CN=6a5b9259-7edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:46:21:7b:30:ff:9e:44:d5:b5:86:eb:b8:d8:
ac:c8:44:34:39:dd:03:4b:67:8f:3e:44:85:6d:5c:
b6:3b:7a:28:60:c1:9c:75:aa:c1:ef:fb:b3:9d:4c:
bf:28:da:76:65:05:76:a4:69:c2:7a:fb:c8:8d:75:
26:88:c0:8b:73:8d:ef:c2:a0:e6:b8:66:13:24:41:
4b:79:19:5b:4b:37:92:e9:5c:f0:11:b9:9f:73:f3:
78:0c:ae:db:67:78:5a:8f:dc:a9:93:07:24:c2:ee:
00:62:d3:a5:c3:76:00:a8:a7:46:59:06:bd:67:b5:
6e:9a:e2:50:b2:42:3e:99:27:78:89:f2:f3:2f:5b:
90:a1:d5:af:ea:bf:2c:05:c5:88:41:61:6b:7a:f8:
38:87:d8:4f:58:be:9f:6d:b7:b6:82:6b:32:53:90:
b5:da:fc:27:bf:13:1e:1c:2f:3a:a2:de:a9:f3:a8:
a1:11:74:91:bd:26:2d:14:1a:e5:51:e7:66:4c:95:
34:43:ff:f8:7e:50:40:19:c0:b4:8c:cb:1a:a2:d6:
1a:be:25:4c:67:8e:33:d8:00:44:bf:bc:f7:e9:9d:
9d:41:80:58:07:29:7e:33:af:38:b0:ed:eb:f3:8b:
e7:34:a2:3d:c7:71:a9:8e:e2:a3:91:c2:3d:75:17:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:34:05:EF:50:92:6D:E6:3D:61:E9:22:68:DF:71:B0:C8:15:3E:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDACF6CA82B711F191BA9002CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:ac:78:3d:22:1b:2b:96:1b:99:94:f6:72:ec:25:54:e8:df:
e1:ec:25:43:ea:fa:bf:6f:50:c4:17:ae:9b:3b:96:e2:cd:aa:
09:c4:3c:cc:3a:51:25:e3:c9:5e:35:25:ab:6f:bf:92:58:02:
48:6d:eb:3a:32:46:3f:b1:45:e3:a6:dc:4f:e9:8b:a6:ab:bf:
29:c6:a8:50:29:0e:7a:a3:dc:13:b4:06:55:a8:fa:f6:ad:51:
d0:15:27:03:6f:d5:3e:32:77:1b:4c:79:d4:87:bd:8c:f8:5b:
01:95:17:e3:e0:68:31:2e:5e:cc:6f:46:2b:ff:0d:41:be:5a:
4e:ae:aa:31:eb:c9:bd:b4:f3:34:9c:57:cb:f1:bb:07:39:fb:
a4:2a:81:e6:c9:54:ab:b7:46:e5:5f:bb:82:75:17:50:b7:f4:
cf:64:e3:70:ca:27:10:2e:f6:c4:f3:57:59:f6:9e:40:19:f2:
fe:58:d0:f8:3b:5a:74:a8:9c:bc:8f:56:3e:81:c3:e8:33:20:
47:97:e5:6b:18:5c:98:22:93:64:50:ba:1d:a7:f1:71:17:1d:
bb:ec:a0:04:6b:0b:df:21:24:18:55:4e:b2:3b:93:a3:f7:9f:
d9:66:54:ec:f4:a6:73:0b:d5:85:d1:55:4a:8c:b3:5e:20:51:
8e:3c:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:29 2026 by rpki-client