Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D7F406720211F1BADAADEBCE1D38B0.roa
File: 70D7F406720211F1BADAADEBCE1D38B0.roa (raw, json)
Hash identifier: MndlqngPdlrUq/YxnsInO16xSvu14mYWrNahtC0yXkE=
Subject key identifier: E2:0A:C4:97:CD:29:EE:4E:7D:A7:22:DA:C6:F1:1C:27:23:B9:BF:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D7F406720211F1BADAADEBCE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:30:24 +0000
ROA not before: Sat 27 Jun 2026 08:30:19 +0000
ROA not after: Thu 30 Jul 2026 08:30:19 +0000
asID: 61461
IP address blocks: 156.231.192.0/18 maxlen: 24
156.236.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114902 (0x1c0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:30:19 2026 GMT
Not After : Jul 30 08:30:19 2026 GMT
Subject: CN=6a3f8a20-a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:02:30:34:6b:13:87:dc:18:18:6a:39:29:
7d:d6:3d:d0:4d:3e:27:a2:1d:77:da:78:22:e2:96:
71:7d:f7:1d:ab:20:ec:e1:db:9e:e9:08:1f:53:c7:
db:0a:47:9a:63:f5:cd:b6:32:5e:f7:44:61:b3:94:
aa:bc:42:65:d5:26:a4:96:c9:df:07:5e:d8:f3:3f:
29:82:ca:7d:9c:fb:03:72:75:35:72:68:b1:5f:76:
71:e7:09:93:62:fa:1c:98:84:53:a5:b4:b0:31:90:
bc:35:ba:99:bc:31:b4:6e:e3:5f:b8:57:27:69:6d:
68:e1:1f:09:21:03:71:64:85:ae:23:87:e0:cf:2f:
87:33:27:7f:1e:bd:bd:04:45:32:9e:30:47:b6:29:
9a:d6:28:06:33:e7:55:7f:ef:a8:0e:34:f5:7a:2e:
3c:85:56:2c:24:9b:3c:bf:31:b8:3c:14:3c:e4:13:
a1:de:1b:9d:e7:d4:3d:cf:db:20:0d:81:a7:50:37:
2e:49:d3:df:e2:d9:b9:59:4a:ef:67:91:11:c7:6e:
46:52:2b:ac:80:21:b0:26:40:f0:fa:1f:b7:4c:f4:
a8:61:fe:4f:d6:77:f5:23:cf:91:29:c4:ec:7e:72:
9c:a0:14:1c:fa:da:3d:31:cb:e8:1e:41:48:e4:b7:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0A:C4:97:CD:29:EE:4E:7D:A7:22:DA:C6:F1:1C:27:23:B9:BF:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D7F406720211F1BADAADEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.192.0/18
156.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:f8:aa:0a:a0:90:df:6a:1c:bb:3e:4e:96:b2:40:af:4a:69:
eb:ce:4c:54:bc:4b:9c:39:08:ee:56:a0:ef:5b:d6:90:f6:1b:
7f:15:a3:05:d5:02:f8:a3:d6:6e:09:2f:e7:22:09:44:fe:59:
5f:e3:97:c2:2e:de:17:7e:3d:ad:c9:48:90:c1:ce:b1:95:9d:
92:f3:b1:80:10:a8:38:2b:b8:2b:78:8b:9b:d8:06:c0:78:b4:
c5:43:41:c8:b4:89:d6:6c:11:8f:89:da:1c:17:95:1f:65:5d:
db:d0:75:e8:d6:34:82:b2:45:23:7a:18:82:99:00:5b:dd:35:
4d:2e:1d:b7:61:7a:66:b9:52:a8:9a:0b:6b:2c:ee:37:2f:18:
6b:48:d2:54:91:c6:1d:b0:56:ed:98:64:32:ae:0b:18:40:09:
08:11:6e:08:d7:ab:6d:c4:98:5e:80:f4:79:2b:d6:23:e9:d6:
28:e8:3f:d7:02:04:07:85:86:3d:b6:f2:84:85:c7:cc:71:00:
78:4c:6e:fb:02:1d:5b:e6:30:a1:0f:8f:f6:b9:06:c8:e0:a1:
5d:fb:73:9c:af:bf:ca:7d:79:a5:1e:52:a8:00:62:01:ae:43:
e7:1f:c6:f1:7d:bb:19:8c:ab:19:52:5b:13:35:9d:48:c0:f9:
14:6b:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:46 2026 by rpki-client