Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0044F0690C11F1AC67CD1ACF1D38B0.roa
File: 4E0044F0690C11F1AC67CD1ACF1D38B0.roa (raw, json)
Hash identifier: SNGhj9ppUjhR/vpDqyLCxqIDuQIUb7CaZRsFsIH88hE=
Subject key identifier: 5C:69:01:5E:B9:78:C1:ED:39:E5:91:DE:E6:FF:B1:0E:FE:06:2B:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0044F0690C11F1AC67CD1ACF1D38B0.roa
Signing time: Mon 15 Jun 2026 22:48:20 +0000
ROA not before: Mon 15 Jun 2026 22:48:15 +0000
ROA not after: Mon 20 Jul 2026 22:48:15 +0000
asID: 211265
IP address blocks: 156.231.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114085 (0x1bda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 22:48:15 2026 GMT
Not After : Jul 20 22:48:15 2026 GMT
Subject: CN=6a308134-bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:11:c5:4e:4c:cd:29:60:0a:da:4d:ff:e2:
18:e8:2c:3c:2a:81:83:3a:61:07:d8:dd:c1:00:a4:
f8:30:a7:05:1b:25:1a:aa:2b:2a:a0:f7:9f:ea:cf:
2b:6e:47:3f:8b:19:b9:93:9a:2d:cb:77:16:94:c6:
a5:b5:e7:ff:5c:ae:6d:19:44:4f:55:98:bb:b2:c9:
58:d0:45:96:25:06:6a:ac:e5:42:20:53:a6:e6:b4:
51:16:4f:e1:9a:1b:2b:09:99:7d:c6:66:05:22:6c:
88:bc:1f:4c:91:4e:38:6d:1a:e9:8c:2c:7a:e3:0c:
51:2e:1a:7a:f8:a8:0c:70:38:48:6a:6e:fb:da:a6:
22:0e:98:06:c3:39:a0:fe:97:a7:c8:8f:da:03:9d:
54:77:d5:05:37:15:4a:c7:04:19:63:48:ad:c9:f9:
16:a7:45:51:1a:6f:42:41:44:8e:d7:08:70:a7:8c:
75:6b:ce:1b:31:95:e0:c8:f1:45:88:4d:d8:dc:1c:
fd:55:50:24:c2:12:76:0f:fd:30:86:3b:2d:3c:96:
03:21:ee:14:92:98:bc:17:3d:ff:55:e9:d5:4a:8e:
6f:9e:3d:05:c2:d7:85:f2:aa:ac:8b:28:e1:e8:4f:
87:7a:0f:a8:5a:7c:15:b8:1d:e4:51:05:73:a3:8d:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:01:5E:B9:78:C1:ED:39:E5:91:DE:E6:FF:B1:0E:FE:06:2B:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0044F0690C11F1AC67CD1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e7:a1:e9:64:c1:8a:3c:da:29:63:43:02:9b:16:ce:ea:84:
30:4b:ee:a8:56:f0:e9:f2:f1:28:47:58:f1:79:c4:f0:c5:2b:
e1:d9:00:e6:c1:98:69:c0:33:69:33:39:44:3b:aa:8e:5b:fe:
14:7e:b8:69:c1:31:a3:af:f9:84:45:af:ca:0f:3b:1d:8d:ca:
ac:d6:63:83:c6:63:71:2a:d5:ff:45:87:e2:b0:2a:15:d1:f5:
6c:60:20:66:75:3e:53:05:24:88:43:4c:a8:51:7f:31:85:fa:
11:40:5a:15:c6:92:a5:eb:94:eb:2c:38:c9:a8:85:b8:fd:bd:
d2:65:f2:f5:b3:2c:58:06:e9:49:56:1b:2e:ea:5d:29:ad:16:
52:7a:59:03:10:81:96:c2:0e:f3:e7:f1:f8:4b:ea:f5:ab:3b:
a7:61:df:cb:05:0d:24:34:20:c3:15:76:ac:23:f3:11:c0:56:
0e:5c:8a:1a:11:2d:39:bc:92:6e:1c:43:6b:99:7a:0d:c0:10:
86:3f:8b:03:4d:4e:83:9c:f6:1b:dd:1a:cb:1f:17:44:e3:30:
db:95:1f:18:77:5e:21:35:e2:bf:2c:ab:cc:32:0c:24:30:dd:
63:96:5e:ad:18:b5:46:75:69:57:97:7b:22:61:14:b5:66:a9:
70:b6:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:46 2026 by rpki-client