Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C7E1A8679DA11F1B003A718CF1D38B0.roa
File: 6C7E1A8679DA11F1B003A718CF1D38B0.roa (raw, json)
Hash identifier: B20daJRjQTWy+EgEcyd9V9OEbWkhx7XPcq7cnNLwiqM=
Subject key identifier: 51:35:E9:E9:4B:1C:C0:EE:D3:B9:BC:78:53:12:5C:29:00:4B:38:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C35F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C7E1A8679DA11F1B003A718CF1D38B0.roa
Signing time: Tue 07 Jul 2026 08:04:06 +0000
ROA not before: Tue 07 Jul 2026 08:04:01 +0000
ROA not after: Wed 05 Aug 2026 08:04:01 +0000
asID: 269816
IP address blocks: 156.248.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115551 (0x1c35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 08:04:01 2026 GMT
Not After : Aug 5 08:04:01 2026 GMT
Subject: CN=6a4cb2f6-5fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:f4:14:65:af:bc:ff:b5:1f:d1:9b:6c:6e:
42:20:17:bb:0b:95:9e:3b:9b:df:55:86:7e:c8:77:
eb:31:2f:66:d7:cf:9f:13:e4:aa:b6:8d:4b:17:3b:
4b:7e:04:18:1c:e0:08:b3:25:0a:0b:6c:e2:c7:c8:
d7:1c:a2:bc:e5:f0:f4:0d:42:6a:85:4d:c8:bd:89:
a2:59:e9:66:55:50:5b:6a:b7:89:d8:18:08:f7:28:
eb:51:d2:65:c6:3e:32:58:b1:29:fb:9b:10:f3:98:
f2:3d:40:a1:c4:60:23:6e:2f:80:58:41:fb:c5:cc:
04:74:70:f6:61:16:49:61:d9:26:05:6e:3f:ff:c5:
8f:d5:f6:33:81:8b:0e:0c:2f:60:9d:6d:a5:26:24:
7a:c7:00:46:b6:41:43:9e:86:17:f1:b0:7f:f4:1f:
34:8a:75:60:50:0f:20:26:44:fa:59:5c:51:0e:81:
93:be:70:03:55:4d:ca:99:d5:ab:32:58:dc:03:1d:
60:63:af:28:e5:a1:cb:3a:c7:fd:c5:8e:7e:a4:e6:
0c:d3:6a:6f:98:e0:2d:a0:2f:e1:93:22:d6:38:3d:
fb:91:fc:b1:c6:33:52:ea:f8:d4:25:af:97:1b:16:
3c:6c:12:ac:26:84:f4:34:b6:9e:f0:1b:64:fd:74:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:E9:E9:4B:1C:C0:EE:D3:B9:BC:78:53:12:5C:29:00:4B:38:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C7E1A8679DA11F1B003A718CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:0b:79:35:af:2b:9c:29:39:f7:35:fc:7e:89:38:35:9d:26:
81:c9:31:3d:d1:ab:17:17:67:ca:44:b7:46:22:8b:37:48:35:
49:24:72:06:50:51:ea:f7:19:bd:d0:c9:44:94:49:53:c0:9b:
9e:1c:dc:3a:7e:bf:49:d9:ee:aa:4f:0d:b9:6b:26:bd:a7:d5:
1e:b2:ee:4a:de:c9:f0:e5:72:35:e7:ee:ed:49:8a:fb:8f:76:
d4:49:33:94:f3:82:49:9c:bf:01:88:07:76:9f:14:f1:05:61:
16:fe:18:a0:cd:18:eb:00:92:45:4a:78:8b:fa:c5:8b:47:0f:
08:bf:30:c1:5a:d8:52:b7:d9:4d:f7:02:b8:7f:1c:6a:ba:f0:
70:37:d9:a3:97:06:97:62:5a:ff:88:ea:4a:a2:08:c5:6a:32:
81:c9:d2:e1:91:62:65:4d:fd:f4:d1:c2:14:41:65:1b:3a:cb:
6c:d2:d2:a5:f7:a7:7b:bc:0d:91:eb:f1:16:f7:8e:4a:40:df:
32:f4:f4:00:61:51:be:c4:4b:1d:2d:0b:76:aa:61:5a:c2:ed:
1d:29:76:98:3a:93:c4:a0:6d:82:97:f0:74:be:c6:7b:34:56:
0f:34:23:73:85:ce:2b:e8:ca:7b:e2:95:f1:0c:97:e7:c1:d7:
8f:10:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:31 2026 by rpki-client