Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/076AF55E80F811F1B0A88EE3CE1D38B0.roa
File: 076AF55E80F811F1B0A88EE3CE1D38B0.roa (raw, json)
Hash identifier: g5d7d8r7GdlIZH9PXDk7jo/L2UzPivPtnL8TMjaKtfM=
Subject key identifier: 3A:D2:D5:46:AF:CD:03:0D:92:62:B8:EF:B8:07:98:F8:CA:83:07:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C555
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/076AF55E80F811F1B0A88EE3CE1D38B0.roa
Signing time: Thu 16 Jul 2026 09:23:39 +0000
ROA not before: Thu 16 Jul 2026 09:23:35 +0000
ROA not after: Sat 22 Aug 2026 09:23:35 +0000
asID: 8796
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116053 (0x1c555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:23:35 2026 GMT
Not After : Aug 22 09:23:35 2026 GMT
Subject: CN=6a58a31b-15d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:1b:e1:ff:9d:cd:73:7f:b8:39:92:10:5d:
cd:f3:c9:cd:45:42:19:1a:85:04:6e:ab:56:b6:d1:
7b:eb:99:37:3f:9f:e6:f1:c8:fc:fa:69:f6:a8:f6:
b8:b0:58:68:1c:93:7f:0e:9e:95:66:0d:17:03:64:
a4:48:6d:1b:46:9e:e9:fe:39:c3:41:32:76:e9:d0:
6b:b4:ee:03:30:d7:ec:8e:e9:60:bf:3a:30:8a:ee:
94:a9:c6:99:2d:4d:9f:96:16:85:fb:46:35:ab:11:
4f:fb:e9:aa:3d:a9:06:2c:a8:c5:05:08:80:ac:24:
18:d3:9f:14:91:44:87:80:ed:62:c0:5a:33:8d:ce:
af:6f:75:5d:b9:43:4d:b3:f7:ca:23:b9:43:51:98:
04:07:78:17:47:94:a4:42:91:2d:0b:70:f8:62:10:
2b:34:b6:91:4c:07:b4:e0:22:44:e9:c8:64:79:40:
e3:78:44:1a:02:80:43:24:d1:1e:b2:38:97:5d:09:
ee:2c:4a:9a:05:67:65:86:ca:d9:14:a8:15:fd:5c:
f2:99:e6:61:d7:00:43:41:83:a6:d2:59:0b:94:fc:
81:8b:5b:db:f7:04:57:81:08:fc:77:44:b0:c0:1f:
a2:f2:e6:2e:e9:c9:ca:57:e0:5a:9f:e4:34:e2:d9:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:D5:46:AF:CD:03:0D:92:62:B8:EF:B8:07:98:F8:CA:83:07:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/076AF55E80F811F1B0A88EE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
35:b4:6c:83:68:85:a1:4d:e7:1f:33:ff:2d:43:d6:4f:65:66:
8e:cd:d0:a6:37:e3:cd:63:77:6e:2c:fa:fb:2f:91:04:96:2d:
0a:9f:cf:12:c9:5c:9a:6e:51:cb:5a:ae:33:13:63:53:e6:cf:
28:65:cb:d5:4e:83:d2:70:f6:ad:77:50:47:64:28:7e:2b:4d:
ac:36:8b:9b:20:f8:64:28:5f:57:29:4e:2b:91:f2:4c:05:89:
fa:96:c3:0c:95:ce:f6:ce:e6:ae:3d:a3:af:5d:f4:23:18:fd:
dc:91:87:9f:40:75:e2:6e:10:c0:c2:4a:c0:46:83:e2:db:a5:
d9:1e:a1:c8:99:ce:bb:e6:1a:77:88:28:7b:81:ae:78:6c:29:
46:e2:5b:cc:0c:05:10:fa:07:1a:66:fe:12:a7:a3:a0:2d:3c:
17:d1:3d:98:e2:e2:ac:b6:b7:91:46:ba:e6:9f:dc:bf:49:e9:
5b:43:0d:8c:ea:fb:4b:26:b5:40:c8:a7:ae:02:e7:a0:1b:e2:
ff:28:12:0f:83:20:f9:0a:d6:86:0b:35:86:a9:76:81:d9:fb:
18:69:88:55:78:94:a5:27:7c:19:da:18:60:d7:ed:6c:a5:9d:
c1:00:bb:dc:71:bc:18:25:51:9b:92:39:7c:78:6a:9b:93:7b:
9e:c3:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:36 2026 by rpki-client