Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05076AFE816611F1935DACEFCE1D38B0.roa
File: 05076AFE816611F1935DACEFCE1D38B0.roa (raw, json)
Hash identifier: UZ4e6yOvP24lMxWwunicZvod3xVB0o/X9FXWufFoiXs=
Subject key identifier: 52:9D:13:F0:2B:72:44:5B:E1:96:7F:1D:38:D9:EF:E6:2E:9F:C1:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C580
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05076AFE816611F1935DACEFCE1D38B0.roa
Signing time: Thu 16 Jul 2026 22:31:00 +0000
ROA not before: Thu 16 Jul 2026 22:30:55 +0000
ROA not after: Thu 20 Aug 2026 22:30:55 +0000
asID: 400619
IP address blocks: 156.254.18.0/24 maxlen: 24
156.254.21.0/24 maxlen: 24
156.254.23.0/24 maxlen: 24
156.254.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116096 (0x1c580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 22:30:55 2026 GMT
Not After : Aug 20 22:30:55 2026 GMT
Subject: CN=6a595ba4-f535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:ef:95:58:a9:15:0f:46:90:58:d3:25:7a:
52:39:ec:ec:52:67:af:fc:05:1b:25:5a:fd:56:fd:
34:30:8c:18:bb:ca:6f:54:6b:b5:40:fa:72:99:3e:
87:75:06:26:c7:0f:50:1f:12:fb:0e:a6:19:c6:88:
d8:ff:9e:d5:6b:78:5e:a7:eb:7a:b0:e4:4c:5a:07:
d1:14:c7:d8:27:ba:93:b4:72:6a:88:b5:08:b6:ac:
91:5e:05:1f:14:90:32:8a:0b:38:7f:5e:05:cd:b0:
2f:5a:5f:7c:2b:93:21:23:66:e3:99:90:1b:f8:ed:
c2:72:3b:1e:04:11:10:ae:f1:99:ee:6a:8b:bc:f4:
94:13:02:d4:af:15:1f:5c:d7:df:b2:57:8f:e8:84:
0d:b7:b9:ec:f4:b3:df:57:d3:ef:86:7b:7d:46:93:
6d:57:d8:75:6d:1b:0b:9f:b6:8f:ce:6e:49:3a:bf:
96:4b:a9:0f:ef:c3:fe:9c:cc:a9:f6:75:21:c0:04:
34:54:78:70:41:0f:cf:1c:2d:d8:0d:d1:78:fa:e8:
9b:be:84:1d:5b:14:db:2c:da:e8:d7:f7:6f:4b:cd:
22:ef:92:0b:ed:2c:ed:9a:f6:00:fc:12:16:28:45:
4f:99:f6:2c:03:5d:1d:8d:9d:08:67:39:d9:23:89:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:13:F0:2B:72:44:5B:E1:96:7F:1D:38:D9:EF:E6:2E:9F:C1:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05076AFE816611F1935DACEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.18.0/24
156.254.21.0/24
156.254.23.0-156.254.31.255
Signature Algorithm: sha256WithRSAEncryption
84:a6:3a:cc:0b:81:2f:80:eb:38:12:d4:94:78:d7:40:85:0c:
0f:15:8b:f9:b1:90:02:a5:3c:38:ce:40:4c:d6:3c:ea:86:0e:
a0:fd:4b:69:95:a9:96:1d:29:bd:f6:81:ef:fa:21:da:16:45:
3b:5f:da:9d:b7:a8:92:12:a9:c7:2e:ba:e9:25:f5:13:1b:e3:
19:d2:2c:66:37:b2:70:7d:e5:b1:a2:9c:37:7b:d1:1c:e1:43:
15:5b:04:2b:bc:f5:6d:eb:f0:2d:0f:b7:59:3f:c6:9e:55:d6:
1a:62:69:91:f3:be:0b:70:e2:92:f2:3f:b5:e9:e0:64:af:ee:
0b:fd:ae:36:44:01:45:95:e2:ad:e9:60:0f:50:52:14:11:a6:
2f:6b:4a:2f:2b:d9:c6:4f:97:8d:27:fc:ce:c7:40:f0:57:a3:
33:32:21:d9:e8:3c:73:0b:dc:da:34:a1:6c:af:15:0c:ef:d6:
c8:46:eb:cc:ee:41:ba:35:29:3a:5f:95:f4:6d:62:23:cc:eb:
a5:23:5f:26:2e:c0:80:5c:84:27:bf:66:84:43:9a:fa:7f:f2:
f1:fb:58:24:6e:10:75:ab:d6:47:d7:9f:8e:4d:48:2b:9c:ee:
a8:be:98:4f:7b:01:55:02:00:14:a5:09:cb:0f:27:20:57:c7:
aa:4a:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:43 2026 by rpki-client