Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66ADD2C4817111F1A036DEB6CE1D38B0.roa
File: 66ADD2C4817111F1A036DEB6CE1D38B0.roa (raw, json)
Hash identifier: nuKyPS5lHAOpkhToPnKGE4mwxD0QTT8wM7HTtqCjkwM=
Subject key identifier: DD:72:C8:DA:69:9B:71:94:17:98:ED:59:97:61:67:61:27:A0:59:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C598
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66ADD2C4817111F1A036DEB6CE1D38B0.roa
Signing time: Thu 16 Jul 2026 23:52:28 +0000
ROA not before: Thu 16 Jul 2026 23:52:24 +0000
ROA not after: Thu 20 Aug 2026 23:52:24 +0000
asID: 400619
IP address blocks: 156.254.0.0/19 maxlen: 24
156.254.0.0/24 maxlen: 24
156.254.1.0/24 maxlen: 24
156.254.2.0/24 maxlen: 24
156.254.3.0/24 maxlen: 24
156.254.4.0/24 maxlen: 24
156.254.5.0/24 maxlen: 24
156.254.6.0/24 maxlen: 24
156.254.7.0/24 maxlen: 24
156.254.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116120 (0x1c598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 23:52:24 2026 GMT
Not After : Aug 20 23:52:24 2026 GMT
Subject: CN=6a596ebc-8080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:77:0c:77:98:67:9e:f1:5c:5f:19:be:6c:
b1:d8:52:1c:56:94:d6:58:8c:42:06:79:a7:90:1c:
85:6f:0b:5d:78:31:29:1c:60:07:ce:da:ed:7d:e6:
95:0b:f8:6a:65:9e:31:35:eb:ad:ad:03:95:b4:80:
43:6b:cc:11:d1:3d:cf:bf:1a:d7:c8:30:b3:8b:6b:
78:f6:f9:18:76:2e:10:fd:22:17:42:7e:c6:bb:b0:
50:c0:b1:29:39:49:25:f2:2a:c8:75:d8:93:34:3d:
3d:26:d3:df:0a:57:f1:30:0f:8c:73:7c:47:39:ba:
df:e2:7a:96:04:8f:49:48:1f:46:5e:fc:3a:a3:5a:
6d:ec:61:d1:95:05:c9:17:fe:15:85:5f:7a:f6:f1:
77:10:73:25:14:e8:7a:73:42:c2:d6:44:f5:fd:bc:
df:89:f9:d7:d0:d1:bb:8c:74:5b:aa:36:f5:f9:14:
a0:a7:9e:d3:51:1e:48:4e:f5:37:3c:e0:83:93:f1:
fe:87:c3:fe:4b:92:0a:e2:0c:20:80:02:62:be:12:
98:4d:24:41:d1:87:7b:22:e4:5e:33:1c:31:d8:9b:
15:39:8b:dd:f4:4e:07:27:c6:ce:10:19:e2:78:89:
8a:c2:66:05:58:e8:b9:3b:61:cc:67:bc:79:5d:fe:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:72:C8:DA:69:9B:71:94:17:98:ED:59:97:61:67:61:27:A0:59:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66ADD2C4817111F1A036DEB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b5:89:cc:3e:62:52:1e:b4:43:ba:47:24:ef:76:9a:e2:28:b3:
9d:48:ff:46:b6:13:a8:ab:7b:04:32:90:0a:55:81:b4:c2:6d:
75:8e:02:54:d2:3c:3e:f2:41:01:47:0a:92:05:40:98:cc:46:
7e:25:c5:ee:54:25:90:b8:c6:9f:e4:ad:72:9f:0f:04:a8:68:
95:ba:1c:25:44:a8:29:90:5f:d5:82:fb:54:1b:3a:77:88:d8:
26:3b:a4:70:6e:2b:3d:d9:c7:67:35:63:16:4d:62:41:02:05:
71:84:f1:cb:08:ae:6e:5e:d4:96:8a:c3:ae:8a:ef:14:98:8f:
72:38:7b:02:74:82:f7:f6:48:18:0e:9e:6c:a3:7a:0a:78:5d:
eb:e0:63:ce:93:4b:1a:29:c9:d7:09:84:bc:6c:51:b6:a2:26:
9f:a5:d9:5b:c0:9c:38:d5:98:b1:d9:f5:7b:f7:04:99:b0:9c:
fd:34:ed:17:bf:b9:53:6d:ac:4e:05:c8:bd:6c:75:bc:e4:b4:
b0:ca:ca:b9:80:c7:c9:0a:2f:69:fa:86:47:a2:07:8e:e1:c0:
ce:fe:ab:2d:5d:68:5f:35:41:66:2c:0a:09:05:f0:63:36:7c:
fd:ac:4d:ce:a6:b2:ae:2b:d0:4d:f0:02:47:e6:28:03:43:19:
fc:f5:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:53 2026 by rpki-client