Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CCB4E626AF211F188F2D8BACE1D38B0.roa
File: 4CCB4E626AF211F188F2D8BACE1D38B0.roa (raw, json)
Hash identifier: pLCSE7Cyx6YpsXeGQ8A2FiWPZF/TpbXJipTfUEz/77Y=
Subject key identifier: F1:47:71:38:0C:AD:04:DC:0A:41:4C:C8:69:87:33:1B:12:3F:2C:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CCB4E626AF211F188F2D8BACE1D38B0.roa
Signing time: Thu 18 Jun 2026 08:47:13 +0000
ROA not before: Thu 18 Jun 2026 08:47:08 +0000
ROA not after: Sat 22 May 2027 08:47:08 +0000
asID: 154701
IP address blocks: 156.242.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114434 (0x1bf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 08:47:08 2026 GMT
Not After : May 22 08:47:08 2027 GMT
Subject: CN=6a33b091-cafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:68:e5:fb:37:d2:b6:d9:f9:33:83:2d:fe:
91:25:30:48:7e:44:7a:93:33:7e:80:d3:b4:51:d1:
8a:d6:5e:81:82:79:84:9e:95:fc:a6:af:8a:75:60:
82:16:bd:e8:97:63:74:30:de:ac:6d:e3:76:f2:80:
52:6d:49:6b:f3:16:e7:b3:cd:a9:b6:4a:23:58:fb:
d5:53:f6:68:e6:36:0f:35:e9:e8:03:11:8f:b5:30:
42:81:d7:d8:f0:4c:8e:0b:37:fc:c8:f2:4d:4e:5f:
7b:19:8f:dc:b0:a5:54:d6:33:5d:49:ed:d6:63:92:
cf:e3:0e:e8:e0:f4:29:7b:cd:0b:c8:86:05:08:70:
ec:b0:ae:7a:72:68:e2:ef:8c:7f:1f:28:9d:97:c0:
83:ef:a9:90:a9:29:c6:19:f9:f9:f8:19:ab:bc:ed:
15:9e:dd:4e:b7:06:fb:75:91:f0:95:07:7e:81:49:
42:24:23:4c:fa:d6:df:61:ef:36:d8:32:db:eb:94:
b4:2a:0e:09:37:0c:c3:27:19:51:ef:31:77:f3:ba:
7d:d9:98:d5:30:cc:1c:54:55:8c:7a:cb:20:a5:78:
cc:31:7b:7a:d0:f4:30:03:50:ab:d0:f2:91:8c:06:
0a:09:54:9a:13:e5:f1:22:ff:21:af:78:e0:d9:38:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:71:38:0C:AD:04:DC:0A:41:4C:C8:69:87:33:1B:12:3F:2C:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CCB4E626AF211F188F2D8BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:77:8a:12:e6:44:5b:a8:86:b4:bb:f6:84:1f:27:0c:ce:c3:
38:ea:fe:c4:80:e5:14:41:e8:47:ae:dd:24:01:9f:1e:8e:93:
c2:7b:e5:e4:56:53:fe:9c:69:92:15:80:3f:e5:a1:e9:56:e3:
42:37:18:a3:4f:c6:f7:f8:0f:53:40:26:a6:f4:95:1e:d7:e0:
a0:31:a9:2f:0b:29:44:39:42:21:e2:f0:f6:6a:e3:f7:e2:8a:
1c:12:a0:54:53:9d:09:8e:7d:30:1a:87:9e:89:e7:a8:e7:3f:
18:3a:c4:98:53:7e:7a:df:8b:b3:36:f9:e8:80:ec:4c:2f:c9:
9d:0a:ac:a2:a8:49:58:06:07:0e:31:c1:f9:3b:04:f9:b3:94:
a6:c8:d1:38:cc:f3:f5:f9:48:68:08:39:4b:82:c3:d3:f6:94:
a7:88:54:15:4f:d6:77:9a:11:44:91:da:76:69:78:96:15:4c:
35:eb:27:f0:db:24:e1:3e:e9:a8:e7:ad:7f:52:bb:7c:c5:3a:
37:92:ca:86:92:5d:d4:7c:a9:bd:d4:3a:e3:bd:05:9c:80:13:
6a:88:96:f7:d4:a8:44:ea:13:25:e1:ee:eb:a9:47:0a:b9:53:
ad:e5:06:27:56:24:e7:37:28:6d:c9:b1:8a:76:71:1d:87:61:
6a:45:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:46 2026 by rpki-client