Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02267BCE7C4111F1A0359DEDCE1D38B0.roa
File: 02267BCE7C4111F1A0359DEDCE1D38B0.roa (raw, json)
Hash identifier: M0wmwR0nJp2UbJObBTyEk8WqLRTmxeHsMzVpNwSNeKc=
Subject key identifier: 4E:61:53:9E:A7:94:FD:EC:0A:85:12:D1:A2:A8:5F:4D:7C:03:B4:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C452
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02267BCE7C4111F1A0359DEDCE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:23:28 +0000
ROA not before: Fri 10 Jul 2026 09:23:23 +0000
ROA not after: Tue 18 Aug 2026 09:23:23 +0000
asID: 54600
IP address blocks: 156.245.64.0/18 maxlen: 24
156.245.64.0/20 maxlen: 24
156.245.80.0/20 maxlen: 24
156.245.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115794 (0x1c452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:23:23 2026 GMT
Not After : Aug 18 09:23:23 2026 GMT
Subject: CN=6a50ba10-16b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:09:57:5e:36:9a:a8:78:86:53:1e:35:01:
f1:eb:28:2c:3c:38:f2:91:7b:63:3a:84:9d:ae:41:
50:6f:c8:50:82:ca:aa:ed:6b:a5:3b:10:f7:c9:43:
e3:60:2f:ba:cd:29:e5:6e:39:2c:b9:6b:3d:30:3a:
49:35:14:5a:78:83:4d:47:7c:84:99:26:fb:6b:7a:
ed:7c:8e:ff:5b:90:84:dd:5c:b3:96:89:e2:42:de:
bd:a4:77:7d:20:4f:b4:ec:1f:64:e6:66:19:e8:ba:
47:cc:c9:49:42:91:2b:40:2b:cf:7c:11:23:ff:e6:
89:7e:5e:c5:57:1e:db:b6:c4:16:dd:75:ca:93:ef:
26:c5:eb:9d:73:77:76:4c:b1:bd:d8:15:d5:3b:fd:
9a:a0:d2:f5:27:e7:45:6d:e6:f2:36:69:21:b8:d8:
5f:0e:2e:a2:2b:f7:00:a8:5e:cd:9c:64:74:93:ec:
dc:39:a3:45:87:a1:1f:da:10:da:20:2d:64:60:04:
28:c4:4d:c6:cc:e5:f6:7e:90:e5:1c:60:d2:0a:f3:
bd:24:b1:0d:95:e0:bf:c8:65:cc:cc:1e:79:36:08:
9f:c8:b2:ec:0e:67:ce:5c:bf:c5:36:82:c0:52:bb:
4d:78:6f:09:61:bc:5f:a6:04:a2:f0:69:79:04:51:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:53:9E:A7:94:FD:EC:0A:85:12:D1:A2:A8:5F:4D:7C:03:B4:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02267BCE7C4111F1A0359DEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
65:de:b9:ac:a5:d5:58:03:5b:f2:8d:3a:4f:77:70:6f:a0:f7:
46:40:b7:85:fa:ff:f3:2d:e1:f4:ab:68:d9:e7:8a:e8:d5:0e:
2c:10:e7:b7:d7:c0:42:b7:87:d2:2a:72:b1:f1:b5:c1:e1:b9:
5f:09:d3:b1:a0:a9:88:4d:c3:ce:04:7f:ca:f4:75:eb:ff:4a:
e1:25:b8:ca:fd:42:b7:e6:3b:e8:06:a4:97:b2:a2:6d:43:a2:
c7:c6:81:89:d2:d2:12:00:02:35:cf:b3:55:0c:07:07:8b:41:
5e:3d:ff:1c:bb:79:c6:1f:6a:00:17:e5:1a:e0:a2:4d:3f:87:
8b:10:8c:84:51:f6:42:21:35:44:35:dd:6c:06:63:2e:b4:70:
c8:66:26:77:54:d4:ae:cc:2f:ca:80:58:e0:07:f2:e0:76:e8:
24:86:ab:bb:27:cc:f3:0a:8a:b9:99:0c:9a:25:b4:17:05:e2:
e2:b3:16:b1:1b:e8:c4:b7:73:54:4a:16:d8:df:6c:8f:b1:67:
18:44:10:5a:a2:8a:b4:97:5d:11:a9:08:34:a0:50:77:12:33:
df:27:be:9e:fc:ba:91:a4:fe:2c:c0:c5:76:13:9e:90:92:f7:
c0:05:93:19:90:1e:a0:d4:37:da:f2:3d:65:db:4a:de:2d:00:
29:b0:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:59 2026 by rpki-client