Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA85D9488BC11F1B1FC30BFCE1D38B0.roa
File: 0FA85D9488BC11F1B1FC30BFCE1D38B0.roa (raw, json)
Hash identifier: XbRihKd+C/xbpZlezAdAl7JJWHg3jC4oOrmslfu1Uog=
Subject key identifier: F4:8D:88:6E:30:48:D9:D6:51:37:F9:7C:38:70:14:82:97:99:6B:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C806
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA85D9488BC11F1B1FC30BFCE1D38B0.roa
Signing time: Sun 26 Jul 2026 06:34:32 +0000
ROA not before: Sun 26 Jul 2026 06:34:29 +0000
ROA not after: Sun 30 Aug 2026 06:34:29 +0000
asID: 17497
IP address blocks: 156.225.14.0/24 maxlen: 24
156.233.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 28 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116742 (0x1c806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 06:34:29 2026 GMT
Not After : Aug 30 06:34:29 2026 GMT
Subject: CN=6a65aa78-6c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:46:85:48:87:2f:d8:a9:e3:45:ef:37:15:
f8:12:4e:3c:d5:9f:1f:d8:64:58:9b:af:32:64:fc:
43:94:fa:5a:c1:66:41:e2:44:cc:81:f2:1e:24:95:
f0:f0:2e:e3:61:52:93:ad:3b:09:dc:29:28:81:92:
ea:33:3a:2d:5a:dd:f3:13:ee:da:dd:7f:2b:7f:3f:
36:0e:23:54:3b:df:43:c5:f9:5c:ad:bb:28:23:40:
cc:bb:b5:b4:88:4d:1e:58:5e:e9:38:50:f1:f7:1f:
5e:b4:7f:94:fb:0b:15:1e:fd:83:f2:b7:55:1d:a4:
9c:57:a0:75:17:8f:a4:6e:7e:90:e8:44:cc:49:8c:
f9:83:7c:ff:a8:73:6b:d8:67:03:d0:a3:ee:b1:73:
e3:3d:af:8c:c6:1f:8e:9b:3a:90:43:75:e4:74:da:
e8:78:5a:b5:3b:2a:ec:fd:9e:39:b6:b4:ff:39:ec:
66:7e:9e:b1:20:6b:1b:08:1e:d6:25:fc:57:31:32:
e7:c5:7a:29:f6:ae:c7:fa:2b:16:23:7f:3b:46:ce:
b3:b9:af:b7:47:c7:f0:b2:e4:a4:13:98:99:d4:a8:
d5:fc:58:9d:4f:e0:9b:23:d7:95:d5:6f:3b:c2:37:
06:cb:62:75:b8:8a:ea:25:30:36:ff:9b:70:0b:10:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8D:88:6E:30:48:D9:D6:51:37:F9:7C:38:70:14:82:97:99:6B:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA85D9488BC11F1B1FC30BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.14.0/24
156.233.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6c:25:93:e7:59:ba:8e:e8:32:9a:34:fa:57:d1:68:84:ee:
33:af:1d:eb:94:d7:f5:ae:23:36:2f:7a:27:5e:cc:04:83:d7:
56:e3:92:ca:d4:a3:4e:68:80:8d:6a:5f:52:30:96:99:05:19:
b0:ba:00:07:2c:a5:2d:a8:b8:ca:29:5b:df:84:b7:ad:59:2a:
50:46:b7:3c:99:62:80:df:dd:61:b8:b2:a4:36:ef:1e:b0:e6:
6f:7c:01:45:53:ae:6f:c1:76:76:21:5f:94:a5:e4:45:64:b6:
11:fc:7d:d7:e1:58:4e:18:73:d4:f7:38:82:15:13:62:d7:67:
7f:ee:f3:98:d9:9a:11:79:2a:1a:56:74:ea:36:23:d1:83:d6:
2b:15:9a:9f:93:64:8d:c8:74:7c:5d:e6:b8:f7:97:ff:d8:fd:
e8:af:dd:5f:12:8c:9f:00:bc:b3:78:a7:d5:e3:54:99:12:59:
a8:c6:49:7f:a5:63:66:ed:25:ef:8f:d1:1a:92:1e:a2:82:39:
df:89:00:ba:fd:1e:75:84:59:64:29:83:42:5c:74:52:d5:d8:
9f:09:cf:5d:82:21:00:e4:e3:ee:91:e5:16:e3:23:e9:be:70:
20:71:0f:60:2a:a3:5a:62:66:0c:2c:ed:86:a2:1d:4c:f5:08:
6d:4c:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 17:53:11 2026 by rpki-client