Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFE316E842311F1A35E83AFCE1D38B0.roa
File: FDFE316E842311F1A35E83AFCE1D38B0.roa (raw, json)
Hash identifier: h3T5ioHATRg73AY+HCVTBtX0FyzYAcl/U+6DBo3EZig=
Subject key identifier: 86:DC:64:3C:AA:4C:AD:2A:4A:BB:D2:1D:40:03:AB:82:17:CF:51:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C65F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFE316E842311F1A35E83AFCE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:15:55 +0000
ROA not before: Mon 20 Jul 2026 10:15:51 +0000
ROA not after: Sun 23 Aug 2026 10:15:51 +0000
asID: 984
IP address blocks: 156.249.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116319 (0x1c65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 10:15:51 2026 GMT
Not After : Aug 23 10:15:51 2026 GMT
Subject: CN=6a5df55b-07bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:4b:32:50:a3:8a:37:ae:f4:eb:93:5a:a0:
20:65:f7:ec:79:60:36:37:48:25:94:ee:79:bf:13:
c3:00:d0:60:b8:d5:cf:22:f0:e4:05:25:c6:93:2b:
3c:19:25:18:7d:31:6c:af:2c:fb:6a:89:db:39:0c:
2b:84:cc:b1:7d:26:79:b2:2a:05:95:b2:19:56:f4:
33:d4:66:c4:62:37:5a:6a:71:3d:36:44:b7:2f:3c:
d8:f5:2f:1c:73:9b:1f:18:91:c0:bd:b5:fa:ef:25:
41:d3:e8:78:35:aa:e2:b1:4e:e5:b9:21:d3:f4:3c:
e7:bb:38:1d:0f:91:d6:70:55:45:57:31:da:f5:fb:
85:63:25:52:b2:64:e9:8a:d1:09:c9:6e:8e:8f:7d:
70:86:77:1b:65:b4:99:04:fe:1a:f1:d5:74:e7:65:
a0:6c:4f:21:76:20:33:01:0c:8c:12:2f:9c:9e:7f:
2d:71:56:6e:1c:41:c9:d6:fc:76:72:41:bd:30:bc:
5e:56:72:f2:60:97:0b:20:29:ac:6a:a9:5c:90:a2:
2f:aa:52:ba:00:2b:a3:92:05:16:87:63:1b:61:6b:
ac:12:92:8b:30:3a:0a:90:60:32:75:88:29:3d:c5:
f2:0f:af:8b:52:fc:74:65:fe:32:9e:67:23:22:40:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DC:64:3C:AA:4C:AD:2A:4A:BB:D2:1D:40:03:AB:82:17:CF:51:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFE316E842311F1A35E83AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.203.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:08:a4:2c:ad:4b:20:31:2f:58:b2:83:52:3b:ec:d5:b6:60:
47:6e:82:0b:40:f4:2d:ca:3f:c8:cb:a2:e0:23:aa:09:d1:12:
af:b4:de:32:8a:9d:3a:0a:ae:94:3e:95:ea:0e:6a:ca:30:43:
50:e3:5e:53:b6:2f:ec:c0:6d:02:4b:c6:f0:86:a2:34:ad:a1:
90:99:19:54:41:ca:34:7d:1e:b6:85:3d:a2:94:43:6e:f2:b0:
9c:c0:31:a9:e0:f9:8d:47:e4:d2:02:66:b4:e0:78:b3:d1:5e:
5a:1b:77:19:4c:a6:7a:1d:76:43:0a:97:51:34:06:e1:94:36:
71:fa:b5:d3:ec:38:22:af:f6:e2:9e:5a:1d:5a:04:1c:87:f5:
f5:d0:31:ae:ea:2b:f6:9f:08:3f:ff:14:22:db:ce:6b:c1:c9:
7d:19:1a:1a:79:a8:1b:ea:08:79:5b:3d:99:87:38:6b:a2:af:
1e:85:ab:08:98:ea:45:18:63:36:cb:20:03:b5:3d:d8:e2:e1:
0e:52:af:50:ca:c6:40:fc:9a:24:40:43:16:21:1f:60:6d:35:
64:76:57:9a:20:7b:fc:d9:49:69:63:78:68:8b:0a:50:0b:b3:
71:5e:8d:41:3a:94:70:f7:22:77:86:79:55:04:77:76:6e:df:
aa:26:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:14:09 2026 by rpki-client