Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548F89AA84F711F1BD0C8BBACE1D38B0.roa
File: 548F89AA84F711F1BD0C8BBACE1D38B0.roa (raw, json)
Hash identifier: KFdGVoS/EzLOC6ZP1nyry0jJjNyZig/dgZ0JJsPrH0M=
Subject key identifier: B3:94:3C:CD:1F:C1:4A:3B:5B:FB:C2:D4:3A:C2:90:C3:38:09:AF:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548F89AA84F711F1BD0C8BBACE1D38B0.roa
Signing time: Tue 21 Jul 2026 11:28:44 +0000
ROA not before: Tue 21 Jul 2026 11:28:40 +0000
ROA not after: Sat 29 Aug 2026 11:28:40 +0000
asID: 44559
IP address blocks: 156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116476 (0x1c6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 11:28:40 2026 GMT
Not After : Aug 29 11:28:40 2026 GMT
Subject: CN=6a5f57ec-f1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:04:75:67:12:8a:d2:a4:be:3d:a7:c7:c7:
3f:12:b5:4e:fd:d1:79:80:14:d4:4e:99:ad:5c:54:
fc:ff:d3:4b:20:0d:c1:d1:67:2d:2d:26:be:2e:45:
8b:77:73:ce:34:6f:8a:30:0b:09:be:29:47:87:22:
6e:b8:6b:e1:37:33:81:af:ef:60:42:58:ff:10:15:
0c:64:89:28:59:bb:67:62:47:ed:58:4c:76:26:a3:
e5:e9:67:b3:2e:9b:8d:77:e0:e8:f5:ed:c7:fb:b5:
0f:f1:72:91:7f:3c:3f:d9:80:78:9d:ee:7c:6d:47:
b0:36:9c:7a:70:a4:ef:ca:4d:8f:f3:2a:b3:d6:5c:
bd:c5:b1:09:29:2d:cb:a5:32:da:75:00:0f:55:f9:
c5:3c:83:00:ee:f1:19:0a:cf:71:df:f0:23:8b:34:
db:95:84:54:8e:dc:a8:ad:cf:95:2a:a0:74:a1:8a:
25:ad:4f:e4:ce:d9:cd:92:da:42:2d:5a:65:6f:d9:
d6:a2:96:0a:b2:64:03:91:66:f3:2d:c5:fb:1e:18:
b6:dd:5f:b8:89:de:96:11:9c:ac:35:5c:c6:18:fb:
31:c6:55:c5:86:d1:2d:ad:dd:8a:87:e3:fd:d7:c7:
d4:9a:53:e0:70:19:ae:35:99:da:99:9b:3a:0c:a9:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:3C:CD:1F:C1:4A:3B:5B:FB:C2:D4:3A:C2:90:C3:38:09:AF:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548F89AA84F711F1BD0C8BBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.248.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:8a:91:0b:2b:05:71:25:cd:13:48:99:db:ee:6f:b4:bc:51:
8f:f8:c8:32:50:cf:bb:7c:f1:f6:b1:b3:52:da:c4:0c:c6:8c:
02:f2:c1:14:80:90:fb:e4:d0:c9:a1:07:fe:6a:f6:f9:6e:a0:
e0:f6:80:79:a3:07:29:4c:75:25:55:e7:52:1e:a7:f3:d1:36:
72:12:0f:29:f3:f5:98:fc:8b:ea:c1:17:40:ca:b7:e5:e3:68:
78:a6:65:36:49:e2:0e:38:4b:05:55:f9:b5:d9:15:5e:5f:70:
b6:82:ff:d3:47:5e:c5:cb:3a:e6:f8:b8:f5:31:f5:e8:35:e0:
8f:c1:64:f0:03:03:c3:7c:9a:fc:60:1b:bf:e1:cc:92:62:d5:
68:12:70:6a:38:f8:c6:f2:7d:2e:82:52:b4:e0:eb:e4:3a:02:
6a:1b:ce:df:09:ac:59:b9:0e:ca:75:15:89:83:d6:75:f6:19:
a8:e8:13:ed:40:aa:de:72:d9:d3:d0:37:68:32:c4:a7:bd:07:
ac:9f:e6:1b:02:85:69:ab:43:1a:ea:73:bb:60:dd:91:d7:85:
e8:25:20:eb:54:44:1f:f2:ad:c6:d9:42:d4:30:5d:9b:13:f6:
2e:23:68:26:54:02:08:f6:48:c8:33:aa:6b:73:f3:ff:2c:e4:
80:64:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:45 2026 by rpki-client