Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/498DF806917311F194B39BD3CE1D38B0.roa
File: 498DF806917311F194B39BD3CE1D38B0.roa (raw, json)
Hash identifier: PoPmGlQEhWzs2nNPCtsqi7HvzpPTXnEt5GzJufQGlbw=
Subject key identifier: 14:D7:87:6E:8A:23:D3:BF:EE:49:D1:7B:E1:54:F1:6E:37:71:69:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C9E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/498DF806917311F194B39BD3CE1D38B0.roa
Signing time: Thu 06 Aug 2026 08:46:17 +0000
ROA not before: Thu 06 Aug 2026 08:46:13 +0000
ROA not after: Tue 18 Aug 2026 08:46:13 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117219 (0x1c9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 08:46:13 2026 GMT
Not After : Aug 18 08:46:13 2026 GMT
Subject: CN=6a7449d9-468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:3d:bd:71:53:18:ac:8d:3a:c9:9c:2b:b2:
30:0f:bb:95:43:88:4d:87:f4:9d:75:bc:00:17:81:
49:d2:a9:f8:15:cf:01:bd:2a:57:28:d4:37:6a:8a:
ec:f1:9b:51:bd:07:64:27:f8:17:ca:75:ba:d0:cd:
72:7b:6b:e5:e6:31:b2:f6:d3:1b:6f:3a:b2:50:fa:
6f:73:6c:af:55:38:62:27:27:8a:47:68:f5:dd:91:
ec:de:a6:bf:6b:15:4d:ff:ce:99:06:60:59:06:39:
ec:06:8d:02:06:f0:7c:47:f4:67:28:17:fd:aa:05:
7a:37:69:a6:52:13:ef:04:55:1d:5d:04:34:d7:d4:
22:98:0f:38:8c:9d:69:8a:a2:71:33:2e:7d:7e:31:
02:c5:aa:05:79:d7:cf:80:e2:9f:77:fd:2b:e0:82:
3c:e7:ed:7c:ba:d6:11:d7:97:1b:49:62:fb:b8:15:
dd:fa:73:be:9c:d0:ee:b2:43:b2:9b:64:ee:d3:09:
76:32:8f:43:fd:6c:9e:67:41:18:62:25:37:f3:25:
45:ff:28:cc:31:83:c8:09:04:d6:89:16:09:4d:33:
19:c7:72:6d:f1:07:7c:eb:a5:ce:f9:69:d5:7d:5b:
0c:b6:dd:41:fd:e9:2c:fc:44:87:65:05:0d:3d:6d:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:87:6E:8A:23:D3:BF:EE:49:D1:7B:E1:54:F1:6E:37:71:69:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/498DF806917311F194B39BD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:f4:01:0d:8e:d2:bf:8d:6c:04:fd:93:70:4c:d8:82:ee:f7:
e7:65:8c:b2:e8:dd:e8:61:35:3b:06:4e:42:66:8a:e7:68:45:
6c:56:7a:58:50:6d:ed:34:51:f3:fe:97:55:69:e9:a4:54:8b:
bd:09:f0:af:f5:f4:b8:47:b4:7f:13:0e:a0:c9:87:57:a5:76:
93:92:a8:45:97:a3:41:e1:65:a8:bc:49:82:b5:c8:08:aa:69:
c4:30:5f:35:df:e2:fd:1c:1f:e9:66:96:20:f4:1f:66:0e:20:
9d:05:9a:5c:a7:9a:74:b8:55:2c:b5:86:8a:0f:91:ae:ef:32:
c5:a8:d5:6c:87:a2:63:f0:7a:df:a0:0d:22:c7:43:41:fa:12:
c4:f9:e9:57:e0:a1:3e:f9:d5:8a:75:01:bd:15:3b:e7:ba:21:
14:10:b5:5e:dd:e3:59:3c:d3:94:9f:76:4c:37:1f:7f:fd:fb:
ec:29:fd:da:96:41:24:78:5b:d0:04:d5:a4:3e:19:2d:7c:46:
e1:56:d3:aa:33:5a:4a:0f:72:da:9f:90:49:a2:7e:03:3a:1e:
d0:67:fc:96:0d:54:9b:ec:26:8c:97:ff:4d:8f:02:53:d3:15:
13:10:3e:b6:3d:0c:6f:0d:d0:01:6e:0e:32:f4:02:34:d7:87:
bc:a4:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 19:39:38 2026 by rpki-client