Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70D62A6850D11F1B1D918C0CE1D38B0.roa
File: D70D62A6850D11F1B1D918C0CE1D38B0.roa (raw, json)
Hash identifier: +g3O74QFwI+mlnA2sq3A9IHa157grZSPqOw1XXjPpSY=
Subject key identifier: DA:26:EB:8B:65:72:A9:5D:8D:A1:A1:78:76:6C:57:91:96:A6:32:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C73A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70D62A6850D11F1B1D918C0CE1D38B0.roa
Signing time: Tue 21 Jul 2026 14:09:52 +0000
ROA not before: Tue 21 Jul 2026 14:09:48 +0000
ROA not after: Sun 23 Aug 2026 14:09:48 +0000
asID: 984
IP address blocks: 156.249.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116538 (0x1c73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 14:09:48 2026 GMT
Not After : Aug 23 14:09:48 2026 GMT
Subject: CN=6a5f7db0-8e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:11:e9:37:ba:9f:d5:d8:35:02:4e:56:ec:
d6:f8:4f:16:f1:5f:1a:67:92:67:b0:54:39:29:1b:
3d:b2:53:48:2b:3a:9e:3b:c4:d2:35:2c:32:07:bd:
11:16:07:18:59:b2:ed:fa:58:af:aa:3b:f1:84:15:
e6:99:42:50:2e:3b:a0:54:22:e8:c6:30:28:2a:1c:
34:3e:cd:8d:bd:21:8e:d2:7c:3e:1d:0b:e9:68:80:
87:ea:58:ef:25:f4:b2:50:69:85:fe:1d:29:e0:22:
02:77:ca:b3:58:db:1c:c1:02:92:13:c9:d2:b8:c8:
73:31:c9:9f:e8:cc:92:a8:96:b6:3c:a0:d9:05:5b:
ab:16:43:38:21:fd:2e:c0:af:19:cf:26:55:c3:eb:
9f:b4:6c:d5:f4:e6:e5:f9:d7:64:5e:88:0b:eb:da:
45:9b:91:e2:f5:09:ec:c5:58:6f:7d:5a:0e:65:29:
96:0a:bf:1d:e7:4d:1b:91:c8:e7:7e:8e:b0:ae:0f:
f9:2c:c9:02:0c:9b:ed:15:5e:d3:e2:79:98:97:8e:
46:17:08:92:06:61:9a:f9:45:30:8d:97:92:d7:2a:
7e:fb:ed:34:4f:9b:c8:cc:27:f3:a2:11:b4:64:ce:
06:72:58:43:20:9f:f1:44:50:97:9e:57:d3:13:75:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:EB:8B:65:72:A9:5D:8D:A1:A1:78:76:6C:57:91:96:A6:32:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70D62A6850D11F1B1D918C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4f:eb:38:aa:28:cb:ed:1f:6f:a4:eb:4c:6e:f9:02:94:67:
29:60:2f:76:4e:4a:8c:69:0e:9f:ca:55:19:23:01:b4:3e:bc:
d3:18:0f:ee:f6:5a:f9:61:d3:fb:8f:c0:e4:cf:4a:09:93:80:
c0:a2:1b:29:f4:76:dd:18:97:a0:be:a1:db:a1:07:a0:15:e1:
fb:45:b8:d5:d6:51:62:ab:58:a5:9a:c7:bf:3e:4a:2a:9f:b6:
80:d5:93:04:80:33:20:7b:6b:29:74:02:f7:54:84:4a:f7:ed:
ca:05:85:d9:c3:0d:ed:85:b0:b9:48:58:a2:28:70:83:f3:c8:
9c:09:a4:20:62:bb:a9:c9:13:d5:6a:ca:3c:fe:f3:bd:40:e0:
3d:76:96:b3:3c:5f:b4:79:81:9d:38:65:0d:d1:ce:ee:52:1d:
ec:d6:65:fe:4d:9b:0f:94:1a:ef:e0:95:cf:06:55:35:56:03:
dd:ea:28:b6:02:b9:02:8e:8b:0f:f6:d1:32:64:0b:93:24:33:
50:96:22:86:fe:6d:b8:51:8c:f0:29:1c:26:2e:0a:8b:32:59:
77:cd:02:2c:1f:a5:d2:15:6b:9b:7b:9d:b9:87:a1:7f:14:51:
fe:f3:90:00:64:c0:c8:18:0a:29:4b:81:39:b5:88:69:95:0c:
fc:7e:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:33:08 2026 by rpki-client