Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D40D9F67F7511F1A11770E7CE1D38B0.roa
File: 4D40D9F67F7511F1A11770E7CE1D38B0.roa (raw, json)
Hash identifier: HNDXrVRLJN4bf6+j7nm6iz4OuqSEn/K8g77ol4ypyV4=
Subject key identifier: 77:73:B8:49:25:E9:4B:45:9A:51:82:A5:F7:6C:DE:3A:56:75:92:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C515
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D40D9F67F7511F1A11770E7CE1D38B0.roa
Signing time: Tue 14 Jul 2026 11:15:21 +0000
ROA not before: Tue 14 Jul 2026 11:15:17 +0000
ROA not after: Fri 21 Aug 2026 11:15:17 +0000
asID: 395793
IP address blocks: 156.255.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115989 (0x1c515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:15:17 2026 GMT
Not After : Aug 21 11:15:17 2026 GMT
Subject: CN=6a561a49-e25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:2c:d0:6d:94:1d:57:49:64:17:59:d2:a8:
de:66:70:0a:95:bb:d7:82:9c:d9:a9:56:8c:d4:bb:
0d:bc:4d:1b:24:57:6a:13:b9:18:6b:57:7d:87:d6:
5c:cf:e4:52:40:66:07:6b:49:28:d6:c2:e6:2d:fc:
a1:98:34:3d:25:3b:43:50:ec:4b:66:12:23:b6:06:
c7:b6:2c:0b:ad:83:ef:10:2f:26:5b:6e:ab:b1:84:
b6:c2:24:59:ae:78:76:d5:e1:ae:d8:e6:f3:2c:7b:
a9:82:ed:24:11:66:22:00:ce:fd:46:ea:d9:4a:ac:
99:b4:86:26:55:e3:ae:7c:dd:92:3d:5b:54:29:39:
eb:ea:b5:7f:90:24:d8:8a:fc:6e:df:6b:d2:9d:8e:
45:93:8a:7c:3c:c9:25:29:2c:a4:9f:b6:11:96:79:
e0:75:24:3b:f5:56:ea:04:e6:aa:a0:d0:a4:68:5d:
1b:31:c8:ec:0d:aa:eb:aa:97:2a:44:df:b1:9c:9e:
ff:ca:b9:14:76:46:ef:fe:5e:19:91:2a:74:45:f5:
3b:85:4b:33:66:1e:66:8c:ee:b9:bb:7d:68:d5:e1:
61:83:a2:a0:d1:d8:47:56:22:f9:68:8f:7c:b7:7c:
e2:bc:68:3d:8b:95:4d:e2:8e:12:3d:77:91:c1:4a:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:73:B8:49:25:E9:4B:45:9A:51:82:A5:F7:6C:DE:3A:56:75:92:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D40D9F67F7511F1A11770E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8e:92:b1:d5:70:d6:51:7c:c7:f6:7f:df:56:85:fe:3c:82:
43:33:65:d1:5f:43:71:eb:b2:1b:66:50:58:be:95:c4:fc:0a:
cb:b6:28:55:ce:cd:8e:6f:ba:74:7f:f6:b9:33:c2:6d:8d:13:
1b:ff:59:88:dc:91:84:27:99:1a:84:ea:3a:0b:ae:9b:ae:cc:
04:c4:6e:af:a7:0e:d0:b6:3b:cb:3d:24:b6:b2:f7:cd:78:cc:
37:3a:f3:76:3d:97:4f:a6:48:c7:ea:b0:1c:ad:55:02:61:34:
e0:99:f0:28:1c:7a:72:05:5c:91:4b:13:68:86:f4:8c:ca:ee:
f2:8a:d5:66:c2:2e:a1:e5:2f:22:2b:5e:6f:1a:17:ab:32:70:
4c:42:28:42:43:cb:46:8a:47:a2:20:2e:8e:dd:1d:a0:38:af:
e6:97:b6:04:7c:4d:db:18:55:cf:ba:fc:a0:e3:e3:b1:29:e4:
0d:cc:10:cd:fb:ff:0d:75:4e:cc:df:ec:48:9f:1f:d9:12:8e:
9f:51:8c:1d:81:de:bf:bd:e9:4a:9a:5c:01:31:46:f5:51:28:
9e:f4:7b:54:7b:8b:30:42:23:5a:27:69:47:3e:c9:08:f4:77:
d4:f8:62:87:d0:cd:6d:03:2b:76:ef:48:19:39:3c:a2:67:3d:
ff:8c:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:34 2026 by rpki-client