Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AADD224934211F1AD5906C2CE1D38B0.roa
File: 1AADD224934211F1AD5906C2CE1D38B0.roa (raw, json)
Hash identifier: P4eX+L9wREtQwYGkjLiJaJ2YG2DdQRbYURWw66+N1rE=
Subject key identifier: AE:AB:F3:51:14:14:9D:C3:4A:5A:87:71:CC:F1:99:C9:70:9A:2C:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CA96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AADD224934211F1AD5906C2CE1D38B0.roa
Signing time: Sat 08 Aug 2026 15:59:15 +0000
ROA not before: Sat 08 Aug 2026 15:59:11 +0000
ROA not after: Sun 13 Sep 2026 15:59:11 +0000
asID: 142240
IP address blocks: 156.252.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 11 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117398 (0x1ca96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 8 15:59:11 2026 GMT
Not After : Sep 13 15:59:11 2026 GMT
Subject: CN=6a775253-2b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:76:9b:f4:f1:4f:ab:de:63:77:23:89:d7:7b:
d5:9a:09:d1:74:71:ca:3d:be:20:a1:06:33:4e:bb:
1d:4e:b7:2a:83:89:88:4a:d4:de:79:4f:29:3c:9d:
ac:b7:71:fd:99:1d:18:32:ba:18:67:f8:f4:36:40:
49:ed:59:7c:d9:99:9d:13:3b:c9:21:13:38:b8:97:
cb:3d:83:96:83:fe:26:b4:d0:6c:c8:22:c7:37:80:
47:98:c9:8f:46:af:f7:f6:97:46:6f:e4:e4:8c:c5:
bc:8c:f8:79:51:4f:5c:42:b0:28:00:07:8f:7b:7c:
b8:9f:00:52:6c:c1:ab:c5:df:db:5d:64:5e:a4:b6:
a5:8c:f9:88:f4:a2:db:fe:2c:65:64:f7:96:1c:7f:
72:e8:40:39:5e:be:91:81:9b:c1:df:4e:9b:d6:5c:
5a:de:10:cb:57:00:3d:47:4e:89:3b:8e:fe:e1:3f:
7e:11:5d:91:49:1c:10:4f:22:f9:30:7d:9b:de:0c:
b4:99:92:e3:c0:ef:90:86:f7:d7:be:3c:79:e9:a5:
64:79:1d:26:45:5a:9d:eb:38:df:cb:96:17:fb:ee:
d7:6d:20:08:13:84:07:33:e7:65:be:46:9d:2f:d0:
d8:32:21:8d:c3:2c:3b:d4:46:1f:65:35:9b:21:e7:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:F3:51:14:14:9D:C3:4A:5A:87:71:CC:F1:99:C9:70:9A:2C:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AADD224934211F1AD5906C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.20.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2a:ed:71:7a:f0:7c:b1:99:80:31:61:59:b4:0b:9b:4c:7c:
be:6e:90:de:87:ed:dd:40:f0:54:e4:2d:a6:6d:8f:3c:30:a5:
1f:cf:32:2a:09:97:87:eb:b1:1a:b9:da:f4:35:b9:8c:7e:cb:
85:f3:ab:b3:64:85:18:9a:52:c8:39:db:aa:0a:31:5b:08:37:
8a:8c:11:70:63:53:a3:eb:64:d1:8d:51:f6:bb:ba:86:43:41:
60:56:a2:24:64:25:4a:25:f2:1a:8f:fe:9e:80:f9:66:55:92:
83:7e:13:f2:3a:9e:ca:45:8f:73:0e:22:aa:a5:9c:1e:42:24:
3f:9d:93:9c:90:4b:0d:d6:35:98:5e:76:e7:e4:43:2b:76:98:
76:a1:fe:7d:ab:90:50:c5:c1:37:40:b3:ef:ab:5f:6c:4d:fa:
04:8f:33:76:75:a2:23:0c:25:69:a1:b8:a3:b3:ee:54:9e:7d:
7e:af:29:cc:a5:f6:fe:a3:ff:6f:46:bd:72:a6:69:69:93:41:
bb:23:20:ee:27:5d:d9:79:eb:20:df:fd:0b:8c:de:ad:95:8d:
46:83:ab:ae:44:93:0e:7d:48:bf:ad:c6:e3:59:c9:3a:51:5d:
c8:e6:5a:58:49:fc:b5:f0:f3:50:08:cf:46:16:e1:0b:84:ab:
de:eb:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 15:16:45 2026 by rpki-client