Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/423092FE844811F190DB7106CF1D38B0.roa
File: 423092FE844811F190DB7106CF1D38B0.roa (raw, json)
Hash identifier: rbEzzy1Z6bVrpIUjaoY1g/gq6tM0MnrHv81mcm8Ps6Q=
Subject key identifier: 9F:0B:F7:92:F8:0F:3E:2B:00:35:DF:60:B2:C4:1B:9E:C0:B5:9B:91
Certificate issuer: /CN=F36D987FAR/serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Certificate serial: 02
Authority key identifier: 49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
Authority info access: rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/423092FE844811F190DB7106CF1D38B0.roa
Signing time: Mon 20 Jul 2026 14:35:31 +0000
ROA not before: Mon 20 Jul 2026 14:35:26 +0000
ROA not after: Fri 20 Jul 2029 14:35:26 +0000
asID: 328459
IP address blocks: 156.38.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D987FAR, serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Validity
Not Before: Jul 20 14:35:26 2026 GMT
Not After : Jul 20 14:35:26 2029 GMT
Subject: CN=6a5e3233-da27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:67:df:30:56:a1:82:dd:f8:38:72:7b:3c:
8e:c5:2d:7e:fa:64:12:1b:5c:30:98:fa:f7:9b:51:
07:92:20:b2:40:d3:9c:d1:69:42:18:06:29:d6:bd:
d8:81:8e:61:56:5c:41:64:9e:62:b9:72:f9:ad:4a:
17:8d:f6:0f:31:3b:95:6f:6b:5a:5e:d3:4c:98:24:
be:1a:a9:c9:35:48:86:87:93:5a:0b:23:39:fb:1c:
a0:51:96:1a:a9:e1:50:16:d8:43:0b:65:49:8c:63:
63:74:eb:f2:2a:e4:1b:de:f8:eb:16:27:0b:0c:c1:
12:fb:db:10:2b:a2:36:1f:c6:44:00:9f:67:b8:74:
16:3e:06:89:3c:b8:df:72:fe:46:27:0d:77:e8:3f:
2f:57:eb:e8:c9:64:8d:37:f4:16:6f:97:86:1a:dd:
9b:ae:7f:e0:8c:8f:58:3d:ae:20:ad:7c:b5:3b:1c:
56:58:d5:3e:c3:54:5c:ee:7a:46:be:f2:a2:b4:f5:
95:b6:c1:6d:da:c5:64:8a:1a:d4:a6:f9:98:1c:90:
3b:49:a2:a9:ee:44:58:75:07:56:7e:3e:2b:b8:9c:
c3:74:09:1d:24:c1:b9:a2:00:e8:9a:e1:c6:af:f2:
38:31:04:2c:1b:d7:a4:60:a9:2b:6e:ad:d1:6c:d0:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:F7:92:F8:0F:3E:2B:00:35:DF:60:B2:C4:1B:9E:C0:B5:9B:91
X509v3 Authority Key Identifier:
keyid:49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/423092FE844811F190DB7106CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.38.16.0/20
Signature Algorithm: sha256WithRSAEncryption
95:50:29:61:be:fa:04:74:5e:fb:0c:63:97:21:31:ad:f1:5b:
ce:1d:59:99:b3:34:af:eb:e0:ea:ca:33:08:45:c0:1e:bf:3c:
a9:68:55:94:bf:78:7f:90:e9:97:7b:0c:54:aa:5e:97:90:79:
e6:e6:28:97:5e:2f:ea:b0:12:25:26:f9:78:4b:18:b2:5b:08:
00:f2:66:ff:16:80:eb:86:ea:da:e4:42:09:49:c6:e3:6a:69:
28:d7:88:27:9a:80:41:c3:c3:8d:d9:38:8a:c1:5b:54:65:5a:
61:04:ae:13:e7:93:7c:d4:c5:8f:5b:76:b6:85:14:68:b7:52:
ed:64:02:f3:8d:f8:a1:df:d1:84:16:cd:6c:b5:73:76:63:46:
f0:4e:b4:44:75:60:e8:9f:bf:06:bb:cc:00:ef:0a:36:bc:1d:
ba:dd:bb:3c:eb:57:78:80:78:9c:ca:a3:f7:75:14:86:fc:20:
19:eb:42:cb:e7:43:fe:da:fc:df:74:d0:e9:37:cb:b1:28:7c:
5d:86:38:b8:89:ce:d7:b2:8a:b2:48:94:4a:64:f6:ad:88:7a:
7b:ee:7f:ac:d1:23:4b:af:6b:30:ac:35:6d:aa:f3:5b:10:86:
e2:d5:5c:ff:1c:30:37:17:c7:bb:f5:c0:bd:78:a9:47:a1:8b:
b4:10:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:42 2026 by rpki-client