Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/356EC35481BB11F195F97409CF1D38B0.roa
File: 356EC35481BB11F195F97409CF1D38B0.roa (raw, json)
Hash identifier: eYargruV6a01e1yV/RvcYT2HtnhvjJLiA44Rvd2t7qc=
Subject key identifier: 61:1C:5B:DF:9A:DE:B9:83:D6:CD:69:2A:D8:5D:0C:CD:84:CD:77:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/356EC35481BB11F195F97409CF1D38B0.roa
Signing time: Fri 17 Jul 2026 08:40:48 +0000
ROA not before: Fri 17 Jul 2026 08:40:44 +0000
ROA not after: Mon 24 Aug 2026 08:40:44 +0000
asID: 202036
IP address blocks: 156.225.2.0/23 maxlen: 24
156.225.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116154 (0x1c5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:40:44 2026 GMT
Not After : Aug 24 08:40:44 2026 GMT
Subject: CN=6a59ea90-ef28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:37:4d:64:7f:16:c6:9f:54:80:fc:88:63:
76:d6:f8:83:f9:23:e4:b6:98:d2:25:aa:3b:6a:28:
e7:c1:8f:91:6a:d0:a9:65:52:e1:41:3c:21:ac:a9:
32:1d:dd:9e:90:bf:6a:9e:9c:c0:47:37:b9:72:8c:
54:b0:82:02:be:ea:f8:1e:6d:aa:95:19:7e:aa:9a:
f4:d4:d5:15:c4:0e:e1:c5:0b:67:b4:3e:d2:b1:df:
b5:ae:4a:6f:b0:d6:a9:59:e2:0d:5a:78:ec:2f:2a:
a0:20:1e:44:fb:78:d7:cf:34:10:5c:db:28:69:c0:
a6:c4:2d:8c:12:c1:8c:52:6a:fb:5e:e3:4c:04:17:
9f:9b:d3:4a:54:24:31:32:c0:24:51:bc:81:7e:30:
3c:2c:48:dc:7a:af:e5:8e:06:b7:98:b3:bb:bf:95:
3d:fb:76:59:25:60:e4:75:e3:49:9d:be:cc:12:8f:
84:d1:6c:8f:42:3f:6d:14:3a:d8:0f:42:c6:2d:25:
da:07:e0:94:85:ea:ed:54:59:48:fd:65:4c:79:3a:
15:b8:61:a9:64:60:5e:d7:b3:48:3e:b0:3d:44:02:
26:3a:57:16:d0:26:3d:c3:4a:8d:3f:26:32:f6:34:
d4:d0:d9:b9:77:84:35:4c:14:e4:d1:01:89:6c:b9:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1C:5B:DF:9A:DE:B9:83:D6:CD:69:2A:D8:5D:0C:CD:84:CD:77:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/356EC35481BB11F195F97409CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/23
156.225.50.0/23
Signature Algorithm: sha256WithRSAEncryption
96:cc:22:61:d4:c9:9c:9d:f9:0e:a9:c9:f6:52:da:51:4e:79:
40:13:d5:f3:e8:c2:e7:45:12:e3:e2:4b:05:0b:34:33:04:1a:
d0:19:f8:e1:f0:54:4c:c7:7f:0c:3a:0b:6b:be:b2:3b:86:71:
ba:1b:5e:10:39:21:ea:8d:1d:08:c7:0c:7d:73:4c:d0:ce:3b:
07:d2:7b:f0:ca:07:97:ad:a4:bf:0b:e4:b2:3c:4c:a1:9a:ec:
02:11:60:a2:24:d4:2b:40:31:cc:00:18:42:57:48:55:df:5d:
96:43:a8:b5:68:bc:f6:b6:52:b1:a2:1c:74:6a:d4:e1:58:47:
1e:5b:a1:d3:0c:40:11:eb:59:9f:1b:37:61:89:a3:f4:8e:a2:
fe:76:c1:07:ef:64:d7:87:e9:ab:d6:73:e9:a6:0a:cf:60:8a:
20:5d:3b:e7:94:24:df:e1:f7:5a:d0:e6:0d:2e:36:a4:0a:e2:
62:da:18:26:7e:86:c5:88:6d:40:56:7c:22:2b:24:2a:ff:03:
79:61:f9:e9:a3:88:6b:82:eb:6b:b0:63:f6:c5:f7:e5:8c:74:
51:36:f0:82:d8:a9:fc:73:e2:47:8b:3f:18:b1:a2:54:25:0c:
43:9e:ff:1c:ec:59:45:d5:cd:98:68:05:38:80:21:22:43:dc:
58:c8:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:14 2026 by rpki-client