Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/443F8E9E72FD11F1A21F7BDACE1D38B0.roa
File: 443F8E9E72FD11F1A21F7BDACE1D38B0.roa (raw, json)
Hash identifier: VwQqpnAFs+rDvDAOi1aTqXVvFgdPXIXWKJIXnUBkWtA=
Subject key identifier: 98:AB:27:A7:8A:05:99:F7:55:60:CC:02:67:1A:42:46:D9:FC:84:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C15D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/443F8E9E72FD11F1A21F7BDACE1D38B0.roa
Signing time: Sun 28 Jun 2026 14:25:53 +0000
ROA not before: Sun 28 Jun 2026 14:25:48 +0000
ROA not after: Wed 05 Aug 2026 14:25:48 +0000
asID: 40779
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115037 (0x1c15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 14:25:48 2026 GMT
Not After : Aug 5 14:25:48 2026 GMT
Subject: CN=6a412ef0-b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:3b:9b:f6:1e:b5:05:50:d1:ee:0b:ab:e9:
00:f8:be:f6:e4:23:5c:54:28:31:04:11:7d:7a:cc:
36:08:84:83:4c:94:aa:19:5f:27:84:f5:18:61:32:
23:d4:70:bd:5a:09:8a:9c:0d:ef:66:0f:b9:31:22:
55:1d:27:aa:58:fd:95:bb:1c:24:72:b7:96:33:49:
be:17:32:2e:f5:84:7d:b1:4c:86:01:0a:bb:a1:93:
60:12:25:48:f8:ef:78:d0:ba:96:2a:9d:41:6f:5f:
08:13:29:24:83:87:2d:0a:33:fa:e9:16:18:f7:82:
dd:46:2e:12:a3:42:25:0c:1a:06:51:61:a8:a7:87:
16:89:fb:30:fb:0d:33:3d:43:a2:2f:4a:78:17:d5:
d0:9b:57:f0:f5:c9:58:cb:6f:2e:99:55:24:69:5e:
de:c6:38:03:11:e6:6b:0c:f3:84:e9:7b:96:ce:7b:
c4:69:fd:f1:db:48:38:ca:6e:db:da:d6:b4:91:05:
e6:89:16:6c:b5:b8:12:03:67:cb:98:27:8c:3c:4c:
04:29:10:6b:57:10:88:76:4b:6e:6d:2b:e8:03:ec:
b1:98:dd:a2:0b:91:7c:7b:cd:7f:64:0c:70:10:59:
57:e1:3e:53:28:64:2e:da:5d:80:eb:a3:3b:cb:8d:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:27:A7:8A:05:99:F7:55:60:CC:02:67:1A:42:46:D9:FC:84:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/443F8E9E72FD11F1A21F7BDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
21:b1:9c:14:2b:d8:5f:16:db:78:14:cb:04:df:05:8c:96:ec:
eb:17:79:ae:61:3c:84:0d:ae:cc:cc:9a:4f:46:82:0c:30:29:
a9:61:f3:62:63:a6:35:ac:ff:61:9e:69:eb:a5:e8:14:0b:5d:
a0:a6:9e:e0:e7:2e:23:a9:3a:81:9d:17:65:11:03:de:bf:2d:
1f:f6:e9:53:37:41:d6:e8:32:76:20:6d:84:58:4e:b2:18:19:
25:d0:e5:87:ec:3f:fb:5d:41:d4:7b:89:9c:52:63:86:fb:e9:
be:ea:e8:9a:d9:d1:c0:13:9a:00:ed:00:da:c1:e7:31:c5:13:
e5:1b:1f:2e:c3:0c:3e:a9:ee:81:b6:2e:c9:69:18:9f:ed:a9:
65:b1:02:2c:57:8f:06:f9:cd:9b:8a:ad:1c:1b:b6:da:d2:ab:
8c:5e:d3:cf:f4:16:cd:36:1e:b8:51:d3:19:26:b1:d7:a5:4b:
49:bf:c8:cd:a3:b8:97:ef:5c:61:05:f7:84:cb:12:cc:79:c6:
44:5e:e3:57:a1:33:c3:5a:42:4b:c3:fd:3d:45:57:d5:a4:41:
ce:a1:bf:29:2f:b3:08:f1:da:ae:ec:81:ce:0c:5b:dd:29:2c:
73:6c:71:f8:7b:29:cf:f1:46:04:98:ec:15:3e:e2:d2:80:2a:
1a:3d:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:31 2026 by rpki-client