Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E81011272F511F19CFCEFABCE1D38B0.roa
File: 2E81011272F511F19CFCEFABCE1D38B0.roa (raw, json)
Hash identifier: m3Rulr4w7uodSMp9scvD2Df0eI2L2B1zpzjioNQUYKk=
Subject key identifier: 44:4C:F6:FA:42:58:F7:A7:5E:B7:CF:29:AF:BE:CC:58:6D:6F:A5:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C149
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E81011272F511F19CFCEFABCE1D38B0.roa
Signing time: Sun 28 Jun 2026 13:28:00 +0000
ROA not before: Sun 28 Jun 2026 13:27:55 +0000
ROA not after: Mon 05 Jul 2027 13:27:55 +0000
asID: 9318
IP address blocks: 156.228.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115017 (0x1c149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:27:55 2026 GMT
Not After : Jul 5 13:27:55 2027 GMT
Subject: CN=6a412160-b4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:6a:81:a3:16:45:0e:a7:e9:e6:ba:06:ce:
3d:be:97:f5:8a:aa:34:ed:c8:a0:e1:e6:4d:ac:d2:
8a:1b:15:bb:c5:ba:8a:3f:25:a1:40:6e:e2:ae:59:
25:ef:fb:fd:63:c2:70:29:21:39:a3:0f:6e:cb:b7:
df:62:62:39:d3:8d:72:aa:79:72:59:bb:65:d4:01:
f1:05:89:32:4e:8d:29:92:ea:68:c7:12:81:0e:41:
af:5d:54:85:c0:a5:f6:c0:2e:56:26:08:14:35:c4:
c3:ed:06:1b:f4:69:b2:e1:5a:4d:c8:3a:21:1b:78:
c7:79:7c:7a:d8:0d:cb:5e:83:bf:d5:66:a9:39:82:
f0:5b:e2:0b:94:41:16:8b:64:40:14:4c:2b:86:c9:
d2:48:8c:23:a5:a5:7e:18:cc:a6:39:d2:50:ea:2d:
2d:7a:7c:ea:55:c2:61:a8:c6:87:2e:c8:01:cd:6a:
b2:10:d0:17:07:3a:9c:07:b5:bb:c3:2d:0a:89:f0:
53:40:f8:51:a0:33:fc:ec:d5:63:3e:f0:ad:07:24:
c1:8f:20:d5:9f:6d:f8:2a:22:fd:1f:c4:45:71:29:
10:e9:37:02:a6:13:25:11:fe:f3:54:ee:44:25:3f:
fc:bb:e2:b4:6f:b0:7b:16:df:c7:47:58:c6:c5:93:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:F6:FA:42:58:F7:A7:5E:B7:CF:29:AF:BE:CC:58:6D:6F:A5:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E81011272F511F19CFCEFABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c7:d2:99:58:c6:d3:c5:2f:bf:f6:97:bc:73:df:68:c8:e0:
a3:e2:eb:80:02:57:79:49:b5:ed:13:d2:1c:58:1b:63:d5:33:
d1:73:a2:50:fd:40:4b:06:eb:3f:1c:b2:25:a3:da:87:b7:85:
b6:52:11:e1:c3:aa:81:78:54:4c:04:dd:a3:66:32:41:83:6e:
b3:0d:11:dc:4a:59:1c:1f:0b:cb:18:88:80:75:23:18:d6:0e:
9d:12:cb:e4:95:4d:59:8d:63:e3:d9:1f:54:ba:e2:eb:94:37:
4b:34:4d:7e:f4:00:db:ed:87:9f:5a:e6:ed:ba:db:99:e7:43:
d9:be:a1:cf:e0:c8:09:dc:8b:c1:fc:90:0c:b5:c1:dd:8f:9e:
7f:89:25:e0:2e:4a:b5:e5:51:54:e2:99:9c:78:51:9d:55:98:
3b:a2:5a:d0:63:57:e8:0a:e7:ff:6c:1e:2c:36:30:1e:86:6f:
76:5a:a8:f2:9a:f2:b3:92:ca:ab:bd:cf:fc:42:59:3a:b9:8d:
63:3a:de:e2:ae:34:0e:2c:78:a8:c0:a6:f8:d8:f6:ec:a9:1a:
f8:0c:06:67:99:62:f6:d2:9e:53:ed:b2:c1:16:25:9e:4b:82:
c7:45:52:39:d9:91:8a:04:24:99:2a:2f:b0:7f:1f:af:94:b7:
a9:7f:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:47 2026 by rpki-client