Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C93984927F7311F18584F4DECE1D38B0.roa
File: C93984927F7311F18584F4DECE1D38B0.roa (raw, json)
Hash identifier: z4ur2S3pseNXXivVsL/yEuKmBJ4ECVc5hg/kNLOR6Ag=
Subject key identifier: DD:37:2B:37:3C:18:55:63:E8:84:B7:2A:3A:31:A5:4A:63:B3:F5:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C511
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C93984927F7311F18584F4DECE1D38B0.roa
Signing time: Tue 14 Jul 2026 11:04:30 +0000
ROA not before: Tue 14 Jul 2026 11:04:26 +0000
ROA not after: Fri 21 Aug 2026 11:04:26 +0000
asID: 3257
IP address blocks: 156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 Jul 2026 22:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115985 (0x1c511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:04:26 2026 GMT
Not After : Aug 21 11:04:26 2026 GMT
Subject: CN=6a5617be-d8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:e2:0b:6b:6a:81:83:c7:8e:f4:85:9d:9c:
98:1b:3e:b3:a7:fd:ac:5d:d2:f1:02:2d:0b:67:14:
60:ee:5f:86:16:f4:38:4a:03:3c:33:45:14:b4:42:
64:52:e1:8d:67:06:47:10:3f:cc:e1:03:7c:83:39:
0d:f6:64:c6:63:04:4e:10:6b:88:34:c1:86:26:93:
73:67:75:40:fa:a4:5f:df:a3:63:2b:de:30:5b:5d:
cf:3c:71:55:fc:b3:c9:d1:6d:a9:37:99:4e:a0:10:
14:35:bd:1d:32:dd:84:0c:65:6e:42:dd:68:c5:52:
71:e6:e6:9e:aa:8a:f5:40:4e:ab:0a:9a:83:86:c1:
9d:90:2b:45:d1:0c:62:07:35:d4:c9:d1:18:7b:bd:
71:7c:58:58:61:db:f2:04:e6:52:20:5f:54:c5:5f:
44:eb:bd:46:c8:7e:10:b0:be:23:28:e6:7c:84:2b:
1e:12:0a:46:14:84:0f:80:52:56:67:9f:50:24:e8:
9f:5f:dc:6b:f8:57:bf:24:d0:7f:ce:d1:a4:68:8d:
52:1b:42:be:7d:c7:7d:ec:98:6e:44:47:2b:f0:ae:
5e:cc:82:8a:d3:b9:44:b8:e1:b4:27:0a:63:ed:2e:
9d:97:43:8b:3b:f4:57:04:46:41:6e:c6:c4:62:1e:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:2B:37:3C:18:55:63:E8:84:B7:2A:3A:31:A5:4A:63:B3:F5:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C93984927F7311F18584F4DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.7.0/24
156.228.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:cb:63:9e:dc:e4:80:6e:57:cf:b7:ee:d8:bf:31:4b:4e:60:
49:83:5d:b0:85:ec:7c:b0:1e:29:75:4d:18:3f:ab:55:0d:f7:
95:89:5d:f7:c6:90:69:ab:e5:df:35:19:03:55:67:8f:9b:ff:
b9:6c:ac:b8:0e:de:fc:69:23:0f:e4:59:e9:19:e5:35:74:40:
f3:91:70:a2:8b:7c:54:14:e7:0f:4c:68:08:5b:ba:92:a7:b1:
a0:5f:e8:1e:7c:08:82:a1:8d:8b:0f:00:74:87:68:7a:92:5f:
68:8e:41:85:c7:7d:25:c2:9c:db:5a:29:bf:60:4c:be:2f:85:
f8:22:99:8e:ff:65:8e:b2:75:de:35:ab:74:a0:f4:eb:28:ac:
e6:aa:5d:45:03:ad:f5:dc:1c:5f:bf:59:4f:68:ec:c0:09:ad:
73:89:fb:ca:32:b9:9a:7b:ee:f1:6a:da:2f:81:b6:f6:9a:79:
24:9e:aa:53:86:95:42:01:cd:b3:25:04:4a:1f:b4:32:ee:19:
98:d0:4c:e3:c3:97:9c:aa:d4:ce:a9:c5:c4:f6:8a:d9:2d:66:
88:36:87:50:ab:f1:8d:68:28:83:fd:3f:2d:37:15:88:cd:99:
82:9b:2c:ab:8f:cd:1f:da:4f:cb:95:c0:d1:f6:85:98:8c:1f:
f1:14:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 02:44:30 2026 by rpki-client