Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33FD8AAE73FC11F19FE994E2CE1D38B0.roa
File: 33FD8AAE73FC11F19FE994E2CE1D38B0.roa (raw, json)
Hash identifier: yVJtGU0JyEPB+rvieyEngLocanApoo4WjG83TWQ1U0s=
Subject key identifier: 8F:72:32:F9:49:C5:B4:AE:C5:0A:0E:D1:1C:6A:F2:A1:20:6C:51:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33FD8AAE73FC11F19FE994E2CE1D38B0.roa
Signing time: Mon 29 Jun 2026 20:50:47 +0000
ROA not before: Mon 29 Jun 2026 20:50:41 +0000
ROA not after: Tue 04 Aug 2026 20:50:41 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115138 (0x1c1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 20:50:41 2026 GMT
Not After : Aug 4 20:50:41 2026 GMT
Subject: CN=6a42daa7-b4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:e4:24:ba:b9:b0:64:ae:e8:9c:75:87:ea:
73:0a:86:b2:3d:47:53:ea:14:2e:dd:d5:72:61:92:
c2:98:fb:f0:a5:3a:1f:42:e6:74:3e:7e:47:7c:51:
9c:d0:5e:06:6b:84:4a:ab:06:0b:0c:6a:75:ac:b7:
83:6c:66:f3:60:83:36:21:02:c0:d4:b7:b5:ee:f5:
5a:5f:81:28:0f:30:4f:99:f1:23:82:60:21:26:a5:
92:84:0d:e9:f5:a7:a2:c7:2a:e5:0f:1e:22:47:07:
1a:b5:6a:24:29:bf:51:ef:bd:67:e3:a0:78:25:16:
3f:99:63:b3:73:e4:74:05:4e:0a:e5:76:f0:e6:f9:
4f:d1:50:89:d8:52:9c:93:b9:a5:55:96:68:4a:ca:
ea:9b:00:4a:32:1f:0c:67:a4:b7:0c:bd:f6:74:54:
07:78:b5:f8:33:47:29:a1:c6:36:12:d1:6e:9e:de:
9b:e5:f3:0f:8e:34:91:9f:b4:4a:36:b9:cb:f0:69:
66:a5:be:49:5f:a7:93:65:47:ae:4a:1a:9e:c4:b2:
e3:20:7b:98:3d:83:18:7e:22:56:6a:72:68:45:91:
44:5d:eb:24:28:9d:f3:cf:79:64:2a:cc:c4:98:61:
34:0d:0b:96:3a:8e:9c:05:de:f9:a4:01:17:05:dd:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:32:F9:49:C5:B4:AE:C5:0A:0E:D1:1C:6A:F2:A1:20:6C:51:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33FD8AAE73FC11F19FE994E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:86:a1:6c:72:4e:b6:f3:f1:f9:1d:c9:17:23:59:34:35:0f:
7d:40:ea:bf:69:32:b1:70:be:5c:fd:1a:23:3f:af:71:34:28:
a1:cc:b6:78:bb:f3:c5:8a:3b:88:ac:cf:2d:97:0c:87:a9:9b:
21:d7:82:46:94:4b:65:a8:a3:a1:da:dd:da:b3:cb:4a:59:4b:
bc:13:66:3f:11:52:53:a9:55:6d:e0:66:22:cc:d0:91:40:f6:
17:3c:40:43:ba:38:10:36:55:2a:85:f6:19:2f:39:62:4e:59:
1a:96:db:e7:9c:c6:c6:36:67:5a:4d:cd:30:e7:fd:77:f6:2f:
c4:0b:b1:25:d7:42:64:f5:f8:7c:21:be:74:7c:6b:11:53:86:
83:14:ae:ae:b3:c0:30:57:b1:d6:7d:19:67:97:fc:eb:8b:b8:
21:43:ff:ea:73:f6:e7:f4:91:6a:4f:fc:1a:92:fe:5f:bc:e2:
1e:54:b5:16:dc:18:71:8c:81:0f:ca:4b:6e:ce:c9:55:dc:10:
96:14:af:0f:e6:15:ac:70:81:09:c4:45:bb:b0:a2:0f:4b:e2:
79:f5:4c:9f:8e:30:45:78:df:20:9e:40:e8:9a:f6:37:14:b3:
5c:c6:34:cb:b8:64:96:df:fa:09:97:a5:f9:0c:ae:b4:4e:be:
8b:ff:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:44 2026 by rpki-client