Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288287F6698E11F19D785ABCCE1D38B0.roa
File: 288287F6698E11F19D785ABCCE1D38B0.roa (raw, json)
Hash identifier: QljdlsHeCpM6eKGj6c6J4InoaEYxw8sjNzefQuPhybk=
Subject key identifier: 60:94:8B:71:C4:90:2D:EE:1B:29:A3:7E:8C:D8:79:1C:C0:3F:E0:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288287F6698E11F19D785ABCCE1D38B0.roa
Signing time: Tue 16 Jun 2026 14:17:51 +0000
ROA not before: Tue 16 Jun 2026 14:17:47 +0000
ROA not after: Wed 22 Jul 2026 14:17:47 +0000
asID: 401696
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114212 (0x1be24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 14:17:47 2026 GMT
Not After : Jul 22 14:17:47 2026 GMT
Subject: CN=6a315b0f-93eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:cb:5b:bb:f4:c4:3e:03:08:5d:55:cf:03:
e1:ce:17:c6:86:e5:6c:36:b1:21:3f:e7:42:48:93:
63:a1:02:89:7c:8e:b4:c5:f4:08:0f:13:d0:ee:53:
de:46:15:4b:61:fb:33:34:8e:aa:13:46:1e:88:6f:
0c:a1:79:b7:b0:ab:a9:45:53:da:96:06:09:cd:62:
d5:ec:7a:16:16:9c:ba:48:de:52:58:38:95:99:9f:
cc:22:e3:0f:d3:46:87:6d:39:59:74:cc:80:1c:e9:
6e:01:42:6c:67:a2:60:79:0c:35:48:09:8b:cd:75:
92:f1:00:e5:11:da:5a:b5:39:a7:17:6b:41:34:48:
2a:22:c8:97:4f:71:89:49:ee:8a:bb:48:65:67:20:
02:5e:50:6f:a4:fb:42:57:65:19:ff:0c:04:b7:4f:
f1:43:2c:e2:13:69:fc:21:dc:5f:04:60:90:8e:5b:
76:41:2f:ef:3f:50:b2:57:9f:7f:a6:43:ad:5d:47:
6c:bf:20:0c:f2:c8:4f:3d:28:ff:37:75:6f:ae:9f:
57:81:5f:50:c6:cd:46:5f:85:e1:5d:bf:fe:40:96:
57:d5:5e:1c:22:1c:55:3f:23:d9:5c:5d:13:1a:bf:
d1:bc:ae:eb:c8:05:56:05:ef:f1:1b:d7:63:f3:4e:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:94:8B:71:C4:90:2D:EE:1B:29:A3:7E:8C:D8:79:1C:C0:3F:E0:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/288287F6698E11F19D785ABCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
56:80:08:76:41:67:86:4a:ab:80:8e:77:90:6f:a2:44:8c:60:
8d:30:73:48:e4:ce:b2:6b:97:bc:bc:15:92:9d:7d:0e:8d:c1:
db:a1:68:ab:b0:91:27:0a:cc:d9:6d:88:9a:5c:11:3f:59:cb:
08:6f:8e:2a:dd:66:50:34:2b:3d:ba:e0:38:1b:57:d1:b5:20:
39:81:7e:cf:75:27:cc:8c:ef:da:95:2f:c4:0b:31:be:f6:1b:
d6:f2:c5:85:47:eb:54:ad:6a:3b:ef:ed:f9:6c:df:3c:a2:39:
72:0c:0e:6f:98:e8:ff:a3:c1:86:de:f8:19:af:85:47:b1:ae:
53:df:d3:4f:8e:89:66:fc:ec:8f:2a:be:c2:43:e9:9c:62:99:
16:58:b6:0e:7f:a6:98:48:bc:92:a3:95:41:c7:ec:95:18:05:
1c:b6:b2:b1:f6:e9:2a:f6:e4:ef:52:8e:ce:4d:fd:82:38:e7:
e3:b0:1a:2a:16:d3:37:7a:f1:b8:36:06:5b:bc:60:f3:f6:7d:
1e:c3:ef:bd:30:dd:fa:d5:8c:16:65:25:52:c4:8c:38:e4:67:
f3:26:83:a6:03:0c:ff:0a:d1:36:ed:64:11:e1:96:71:7f:91:
2f:e0:5b:bf:15:6a:56:f1:af:c5:5e:e7:a6:cc:29:da:61:32:
d7:11:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:38 2026 by rpki-client