Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E7CDD47C4311F184C8E9F9CE1D38B0.roa
File: 40E7CDD47C4311F184C8E9F9CE1D38B0.roa (raw, json)
Hash identifier: dVPLb2WrLUB1ct7GooMh0A1Xald91hT5fRJ+4al3jIM=
Subject key identifier: 1C:7D:2C:0A:A2:6A:07:1A:0C:9C:D1:71:C7:F7:4E:A1:F9:CA:E5:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C45E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E7CDD47C4311F184C8E9F9CE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:39:32 +0000
ROA not before: Fri 10 Jul 2026 09:39:28 +0000
ROA not after: Tue 18 Aug 2026 09:39:28 +0000
asID: 400619
IP address blocks: 156.241.128.0/18 maxlen: 24
156.241.139.0/24 maxlen: 24
156.241.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115806 (0x1c45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:39:28 2026 GMT
Not After : Aug 18 09:39:28 2026 GMT
Subject: CN=6a50bdd4-c20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:07:93:e6:49:ac:48:c1:3f:e9:87:fa:f6:
c1:92:b6:dd:cf:0a:8a:6b:49:89:6b:06:b8:b8:b5:
f8:27:f8:0c:05:32:6b:99:37:55:24:10:09:00:9a:
42:52:02:fd:24:b3:d9:1e:8e:9a:ab:92:13:d0:18:
e4:81:ae:eb:1e:8f:42:bc:d3:99:b6:72:98:bb:64:
71:e7:a6:70:87:f2:13:e7:24:b7:4c:4e:c0:db:7f:
76:63:49:72:b3:e5:4c:90:b4:14:63:86:47:aa:c5:
a9:c6:ec:3d:35:29:b9:7e:ca:47:74:a5:04:ee:f1:
85:0a:2d:75:cd:fd:5b:95:c9:c0:06:a0:b1:f4:82:
98:1c:2e:f6:29:34:69:ef:fc:38:c6:e0:bc:87:f5:
e5:a9:45:4a:77:b0:73:20:76:4b:aa:c7:93:3b:9c:
f4:bd:ad:9e:db:d0:62:7f:8f:10:cd:9d:eb:c3:6b:
51:64:50:9e:02:ae:ad:40:76:cf:c1:9f:92:1b:f9:
54:f3:58:d2:be:d2:76:b8:cd:33:27:dc:95:29:e2:
d0:4b:93:b6:35:f7:26:dd:18:ca:87:ba:80:7c:53:
43:b3:9c:00:a2:37:3a:e6:07:bd:15:e8:80:a5:a7:
b9:6f:65:f8:c9:b4:e1:47:62:f2:dc:22:7e:f0:1f:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:2C:0A:A2:6A:07:1A:0C:9C:D1:71:C7:F7:4E:A1:F9:CA:E5:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E7CDD47C4311F184C8E9F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:a7:e7:b9:e4:db:da:f0:de:fa:cf:6d:1f:a8:df:6c:47:63:
d5:05:5c:9a:c9:cf:13:c4:66:05:68:52:54:01:66:fe:f4:a2:
80:16:1b:56:7e:55:cb:fb:36:3f:44:61:dd:2f:1e:5f:93:11:
b0:31:5a:b9:cc:39:a6:80:f9:18:45:a6:3c:49:3a:8a:c7:6e:
f7:89:7b:fb:c6:96:fa:7f:eb:06:fb:98:60:1b:d0:42:c9:ea:
20:17:a8:01:2b:37:53:7e:2e:9a:2d:f8:9d:f5:dd:eb:ee:ae:
a7:7d:03:80:f7:c6:0a:d1:36:d6:a4:2f:38:e4:0d:8c:5c:28:
c3:24:1e:3f:cb:18:79:b8:a0:6b:ca:ff:6c:3d:f8:31:6d:96:
80:9a:09:cc:d6:c4:93:6b:f0:92:f7:c9:48:7f:eb:65:38:b7:
ec:17:f8:59:91:0f:c8:58:7d:0f:ed:61:5a:46:2f:f9:5b:3a:
1d:09:7c:fc:2e:0c:e4:53:6d:d2:44:96:8a:32:62:c0:08:4e:
c8:84:a8:1b:92:d9:18:a5:3c:e2:05:0d:dc:12:21:01:6b:c0:
5b:95:b2:52:7e:d5:3e:66:21:7a:4a:4c:4b:b8:df:07:ab:2e:
f9:ef:f2:f3:83:63:dd:79:d7:4a:0b:a7:c5:d3:1d:a5:21:64:
68:13:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:40 2026 by rpki-client