Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17AE9D786A3011F18AD0FD1ACF1D38B0.roa
File: 17AE9D786A3011F18AD0FD1ACF1D38B0.roa (raw, json)
Hash identifier: 2IYi52MnbuIXYXQAEmHH/utlHcm2+iO1sVDSk0w/rJo=
Subject key identifier: 0D:19:F3:3F:2E:D0:2E:57:D7:30:40:47:A2:B9:ED:87:4F:E8:12:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17AE9D786A3011F18AD0FD1ACF1D38B0.roa
Signing time: Wed 17 Jun 2026 09:37:02 +0000
ROA not before: Wed 17 Jun 2026 09:36:57 +0000
ROA not after: Mon 20 Jul 2026 09:36:57 +0000
asID: 153706
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Jul 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114314 (0x1be8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 09:36:57 2026 GMT
Not After : Jul 20 09:36:57 2026 GMT
Subject: CN=6a326abd-2c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:b0:0e:91:89:c5:cb:37:43:80:f5:b6:43:
ed:d1:ec:6f:88:64:0a:c6:87:f3:5e:0b:e7:a7:a8:
64:39:67:c6:38:d8:d5:e1:4b:af:d6:9d:6e:d9:6e:
ed:93:7a:57:68:28:91:5a:2b:78:32:94:37:00:c6:
02:df:42:a1:8e:79:c0:84:a1:dd:4e:ee:f0:a7:97:
e5:a8:78:fb:77:c2:dd:b6:55:47:45:b9:92:e5:f2:
60:ad:e4:7d:6c:c1:8a:4d:71:c7:66:52:93:ff:34:
5e:9b:ae:aa:d1:76:49:f1:08:c6:c1:f2:99:ed:0a:
e0:c4:9c:6b:ad:02:ef:d8:d6:09:e2:e5:c6:a7:ff:
03:36:23:36:c0:6f:9d:fb:32:e7:ad:94:db:f9:98:
e7:af:fb:3c:a5:b9:cb:a1:b7:6c:27:ab:32:35:53:
6a:a4:69:d0:e9:5a:91:5f:13:d9:2e:3f:05:5c:0d:
09:34:9f:69:48:4d:16:cc:f2:79:6f:b2:a7:8e:30:
a1:c8:d3:48:67:63:27:21:9a:da:f9:ce:df:46:0f:
45:c9:c7:b3:88:28:83:e7:ff:d3:88:93:e0:81:5b:
7a:ed:cd:d2:7e:08:f3:63:d8:1c:26:e5:ee:d0:e4:
51:f0:71:ce:be:9c:9d:41:44:59:0e:e9:5a:47:23:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:F3:3F:2E:D0:2E:57:D7:30:40:47:A2:B9:ED:87:4F:E8:12:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17AE9D786A3011F18AD0FD1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5f:2d:c6:d4:63:70:80:7f:cb:9b:cf:bf:b3:1e:f2:56:ac:
d3:73:22:ab:54:14:c4:ec:c6:71:d6:a6:43:83:6f:43:01:28:
1d:28:d6:f7:af:fa:3b:12:0c:62:6f:3e:bf:ba:dd:ae:81:80:
20:48:ce:04:b6:22:08:5e:57:dd:95:bf:8e:96:b4:a7:26:bd:
1b:53:9d:2b:95:64:06:3e:e5:48:f8:37:a6:16:40:bd:71:b4:
9e:c5:24:44:f1:32:e4:30:13:3a:ee:d1:f1:b2:4d:04:93:a7:
11:06:ec:14:fb:e7:40:5c:76:4b:af:68:51:43:c5:a8:a6:d0:
9a:7b:2a:ef:fa:36:93:bf:b6:e7:74:9b:b7:73:43:44:ff:ae:
39:8b:77:b8:32:15:32:75:bd:1d:5f:b1:de:ac:e1:f9:a7:73:
ef:d0:ac:46:0e:3c:c5:dc:03:3c:f9:62:e4:ef:c1:e5:06:96:
20:95:3d:d7:c1:fa:77:4a:bb:4a:98:db:2c:64:88:ad:fa:dc:
9b:4d:1c:16:6d:c9:68:65:0b:63:40:a0:6e:65:9c:ed:64:e4:
5f:4c:d3:47:ab:7a:c5:91:dd:ff:fc:23:79:b5:43:e8:06:65:
9f:a4:bd:a1:dc:6c:9d:62:81:89:66:f9:b5:ba:da:2c:24:f1:
2f:c9:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:48:25 2026 by rpki-client