Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDCACBA8CAE11F1B391FADECE1D38B0.roa
File: 6FDCACBA8CAE11F1B391FADECE1D38B0.roa (raw, json)
Hash identifier: WfkYKhDl6AHsM6QNbgb0zzeHvRAnf4s3j6+XeTU9Hu0=
Subject key identifier: A3:77:3B:A4:DC:E1:5E:A1:05:40:D1:37:40:33:BE:5E:04:42:EB:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C8E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDCACBA8CAE11F1B391FADECE1D38B0.roa
Signing time: Fri 31 Jul 2026 07:07:06 +0000
ROA not before: Fri 31 Jul 2026 07:07:02 +0000
ROA not after: Mon 24 Aug 2026 07:07:02 +0000
asID: 14618
IP address blocks: 156.229.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 22 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116967 (0x1c8e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 31 07:07:02 2026 GMT
Not After : Aug 24 07:07:02 2026 GMT
Subject: CN=6a6c499a-415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:0b:28:9b:26:97:80:f4:d1:15:f3:b9:6f:
16:1d:03:8c:fa:77:d7:9a:28:ae:6d:40:b0:cc:e7:
e7:80:71:c5:9a:2d:17:a8:94:32:63:53:4e:9d:18:
a8:ff:7d:24:b0:eb:88:d3:23:3f:71:8e:0c:88:b3:
e8:45:75:6d:5b:22:7d:f9:b2:39:09:15:33:96:ae:
2d:d7:28:ea:ae:26:13:09:f3:39:1d:82:c5:1d:b3:
89:c8:5d:02:25:cc:cc:5f:c6:80:a5:e2:81:89:7a:
f0:b7:55:25:2b:6f:ba:6e:a6:8f:f2:ef:a1:82:74:
7c:83:5a:0a:70:f1:68:db:cb:d9:51:fc:01:26:83:
31:28:20:81:17:18:2e:78:70:7d:fe:cf:3b:24:ae:
d0:f5:9d:a5:dd:8f:00:76:c4:64:af:5e:06:f9:14:
57:8d:e6:e2:dd:59:49:47:10:d4:1e:7c:b6:7f:64:
3a:a7:6b:17:01:22:2f:56:80:80:1d:d4:fb:bd:f9:
eb:be:5e:2f:53:3c:e0:d4:49:e4:96:26:28:b7:0f:
a1:0f:71:e7:6d:84:2c:01:b6:21:dc:b4:57:96:6e:
35:ee:0b:6b:a7:b1:d7:cc:27:b8:61:bb:dd:63:d5:
62:3b:ca:3f:a7:0f:5b:d8:37:4b:e5:48:cc:e2:c5:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:3B:A4:DC:E1:5E:A1:05:40:D1:37:40:33:BE:5E:04:42:EB:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDCACBA8CAE11F1B391FADECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f5:ff:ed:30:4c:8e:83:51:a7:d6:e4:c5:98:a8:03:ee:1d:
58:67:35:01:59:0a:3c:0e:e3:a4:b8:ba:f7:5e:7c:ce:7c:77:
df:83:bd:5e:d7:c0:52:5b:54:95:a5:9f:90:cf:ce:37:4b:fd:
36:96:2a:ab:9a:79:09:27:bc:86:34:81:04:eb:24:4a:9d:9d:
78:08:8b:81:f5:f2:78:97:26:f8:ca:43:d7:cc:35:c8:b4:34:
81:c0:8a:a2:71:90:bd:96:85:80:72:0d:4a:6c:61:e5:b5:e7:
64:a8:f1:6d:fa:16:e9:8a:ba:b2:b3:32:99:6d:6a:7e:a4:6c:
cb:7f:f7:26:15:5b:f2:fb:c2:e4:3e:11:95:83:82:26:f5:99:
61:8d:03:03:e7:cb:11:91:84:3c:f1:38:5c:8b:6a:7c:49:eb:
99:f4:36:70:38:cb:b6:90:0a:0b:10:dd:89:50:e1:90:95:12:
69:2f:cc:ea:b3:95:a2:a7:c0:8d:fe:b7:48:c3:78:f6:c6:57:
ff:1a:85:33:52:25:d9:5a:a2:e3:b8:37:04:a0:d9:4f:af:5e:
1e:7a:c3:8f:a5:03:8c:73:0b:c1:36:e4:c1:73:31:14:2e:c1:
f8:f9:a6:7a:d4:48:92:e6:3b:8e:92:6d:9d:6b:cf:00:94:ab:
ab:26:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:04 2026 by rpki-client