Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373FE78A873811F1AC3BB5FCCE1D38B0.roa
File: 373FE78A873811F1AC3BB5FCCE1D38B0.roa (raw, json)
Hash identifier: Dug9PjJY4EN+0EYnCFzcaAB2eMu3Pub5cV9ysrXU5OQ=
Subject key identifier: 86:FB:B6:3A:27:5B:09:19:AD:48:22:32:C8:02:CF:55:4C:1E:70:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373FE78A873811F1AC3BB5FCCE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:18:14 +0000
ROA not before: Fri 24 Jul 2026 08:18:10 +0000
ROA not after: Mon 31 Aug 2026 08:18:10 +0000
asID: 153656
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Jul 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116702 (0x1c7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:18:10 2026 GMT
Not After : Aug 31 08:18:10 2026 GMT
Subject: CN=6a631fc6-485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:9f:30:f4:02:72:fa:09:f2:56:40:73:da:
d3:8d:a2:58:03:34:3b:7d:f6:af:79:82:f6:ab:1f:
29:e3:29:a7:25:83:be:0b:50:80:ce:51:4e:5e:d9:
aa:31:cf:cd:87:fa:45:a3:69:de:f2:1a:db:ea:31:
ce:8c:29:00:43:4f:7f:5f:d8:6d:bd:10:f1:51:bf:
bc:48:1d:b4:01:69:a3:66:5e:4e:96:56:44:70:0e:
6e:71:fd:78:2a:76:69:97:6c:18:b6:86:5e:fa:54:
8c:16:3e:84:7b:35:c9:a7:09:d9:21:aa:77:9d:cc:
4f:f5:32:e7:69:11:12:ff:c6:22:66:74:60:d4:09:
a0:ac:29:d4:2e:e2:bd:42:4e:81:b4:36:d7:07:7e:
58:bd:92:3a:a7:2c:8e:7f:07:cd:e9:96:97:b4:02:
98:06:16:1b:b3:9d:da:5a:dc:f2:94:66:2a:2f:79:
7d:e8:75:9a:7b:a3:1f:d1:96:60:87:f2:84:22:a1:
66:59:81:89:72:bb:5b:fa:eb:00:f6:4e:17:c4:68:
9f:5c:44:81:39:4e:cb:5a:58:3d:9c:58:62:c9:69:
42:41:f7:d3:9a:8b:b1:a1:d9:b9:d3:eb:d3:e1:b0:
d9:05:0f:84:70:d0:f6:4f:34:69:38:7a:c5:0d:0d:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:B6:3A:27:5B:09:19:AD:48:22:32:C8:02:CF:55:4C:1E:70:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373FE78A873811F1AC3BB5FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
b5:6a:c2:b4:30:cb:71:39:9e:05:d7:5e:02:dc:2d:dc:94:2a:
a6:b3:a8:27:cc:1b:86:c0:c8:f9:ca:77:ac:a9:20:98:1c:f9:
c0:0c:66:e2:b5:a9:1c:d9:42:c2:c1:6d:ac:05:5a:53:9b:63:
71:f0:33:e7:8c:4d:63:bf:74:8b:f9:14:fc:3a:95:08:4b:80:
b7:1f:28:20:d0:44:2d:4a:94:8b:13:6c:2d:31:83:82:15:b3:
17:47:c9:d8:f8:25:07:52:c5:46:aa:42:05:87:d9:59:e6:b4:
e2:0f:92:3f:33:29:0a:87:e4:f6:d7:37:49:86:8f:f3:92:33:
21:11:9f:6b:c1:3f:84:d0:2b:d0:24:3c:4b:ea:b0:69:93:70:
79:c3:3f:89:5f:43:e6:10:f9:5b:4d:ad:09:01:a6:b7:18:93:
fb:2f:eb:5e:fc:20:b1:4b:ed:95:a0:aa:ce:e7:b8:f9:68:47:
0f:b5:46:6a:5c:aa:7a:20:a5:3e:1a:d6:42:cb:73:27:82:2d:
b6:1a:71:58:59:d4:04:6e:a8:f8:f1:34:8f:41:1e:ad:9f:83:
6d:9f:b3:d2:c6:53:16:d1:02:f5:1c:66:71:a1:40:ed:cf:90:
17:bf:d0:d7:80:03:74:e6:1c:dc:24:09:63:f9:6c:21:47:94:
7e:3d:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:07:02 2026 by rpki-client