Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/338C915C7C5611F198EC99EACE1D38B0.roa
File: 338C915C7C5611F198EC99EACE1D38B0.roa (raw, json)
Hash identifier: IyxwDbHp7WAudh7dlL/fu8RRhiDGQE/QOkUqiPwkutU=
Subject key identifier: A2:8D:5A:8F:E1:04:5E:40:37:5C:DF:0F:1D:20:43:0C:C4:C0:E7:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C46C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/338C915C7C5611F198EC99EACE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:55:10 +0000
ROA not before: Fri 10 Jul 2026 11:55:05 +0000
ROA not after: Mon 10 Aug 2026 11:55:05 +0000
asID: 139613
IP address blocks: 156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115820 (0x1c46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 11:55:05 2026 GMT
Not After : Aug 10 11:55:05 2026 GMT
Subject: CN=6a50dd9e-46b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:84:15:8f:80:2e:45:ba:a6:73:8f:fe:1e:
95:f7:dd:e0:d4:44:e5:71:a4:a0:46:e8:3a:f5:31:
ad:aa:22:1b:05:75:d8:22:36:23:46:93:78:e2:c6:
4a:3b:9e:f2:19:4f:72:20:a4:7c:cd:da:c7:ae:d2:
ba:59:e1:40:94:61:bc:f5:45:ef:46:10:1e:ed:62:
2b:9d:c4:26:65:f1:7f:be:ba:22:06:27:97:0d:ad:
0e:8e:9e:80:76:ed:13:20:d2:e1:91:ad:56:90:7a:
c5:48:b8:09:b2:fd:11:58:d7:f3:99:e7:36:d0:5e:
0d:60:eb:e6:f9:36:d1:75:f4:96:50:6c:57:b9:a5:
3e:88:09:00:68:c5:ae:57:23:8f:7b:0f:20:f3:b2:
66:da:72:20:00:aa:65:46:5e:a2:d4:73:c7:b5:7a:
90:3d:44:4a:3c:40:01:c4:c1:6c:a9:9b:72:10:af:
6b:ba:af:41:32:32:ce:b7:7e:d7:31:9f:6c:88:83:
43:24:83:e0:05:93:63:a0:d8:4e:ef:20:c1:ff:f9:
15:44:c9:44:49:80:3d:f5:8a:cd:19:55:9c:d3:5b:
c5:ea:74:00:d8:ac:09:d0:aa:93:7f:0a:48:67:20:
07:bd:37:aa:d5:ce:f5:84:98:5f:64:c9:52:70:68:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:5A:8F:E1:04:5E:40:37:5C:DF:0F:1D:20:43:0C:C4:C0:E7:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/338C915C7C5611F198EC99EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:34:98:98:78:6a:ce:1f:e9:48:ed:a6:f8:aa:5e:ca:95:c0:
c7:36:1f:ff:50:ff:d2:3d:dc:20:83:39:a0:c0:4e:d6:fd:aa:
5e:3f:7e:3d:3f:c0:46:68:2d:bc:5c:3c:c9:49:c1:aa:7f:cb:
97:b2:ca:81:48:74:5e:2d:e2:26:8f:1b:91:df:67:38:91:3d:
aa:76:54:c2:07:67:75:bd:ed:9d:0a:fd:1f:44:4b:a2:b0:26:
3c:10:a7:95:e4:de:37:fd:b2:e6:8d:80:8c:fb:b2:d8:9f:78:
4c:ed:a1:33:69:d3:6e:eb:b2:22:0e:b1:98:e7:c0:b7:fe:7e:
01:12:9b:b1:5a:a6:28:75:7c:91:6d:ba:ed:17:93:03:75:49:
61:68:e3:7b:51:b0:15:d6:64:55:ad:67:5b:67:d4:37:0c:d5:
3e:da:ef:48:22:0f:d7:0e:76:56:09:41:bc:f5:d3:5f:33:b8:
f0:52:2c:40:33:74:f7:3d:6e:71:82:6c:8d:4b:f6:58:a4:43:
bb:14:d1:16:5f:f0:76:3f:cd:0e:4e:62:a7:6c:11:de:ca:07:
ad:24:68:50:d7:7c:74:8e:13:5b:4c:a1:8d:0e:00:c8:62:be:
83:bb:ce:73:f6:1f:d2:47:bc:3e:98:68:72:e8:a4:3d:d9:82:
0e:07:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:12 2026 by rpki-client