Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73B41CBC7C5811F19151DBF6CE1D38B0.roa
File: 73B41CBC7C5811F19151DBF6CE1D38B0.roa (raw, json)
Hash identifier: WMJ+NlZyce2lSdgXF8ZgwyvoBs0F/JIgvnFuxuLGehk=
Subject key identifier: E0:2A:DF:01:B0:B1:AD:DE:7A:3D:C7:6D:04:63:7F:AD:0F:A9:79:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C470
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73B41CBC7C5811F19151DBF6CE1D38B0.roa
Signing time: Fri 10 Jul 2026 12:11:17 +0000
ROA not before: Fri 10 Jul 2026 12:11:10 +0000
ROA not after: Mon 10 Aug 2026 12:11:10 +0000
asID: 137983
IP address blocks: 156.225.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115824 (0x1c470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 12:11:10 2026 GMT
Not After : Aug 10 12:11:10 2026 GMT
Subject: CN=6a50e165-4900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:a8:61:7a:a4:95:fd:3b:ad:c6:b2:34:bc:
f0:51:7d:b4:dc:0c:99:95:43:77:73:2e:a2:32:5a:
32:7f:0c:15:22:6e:30:19:00:31:1b:01:75:b5:9d:
a3:93:91:9e:a5:b5:42:20:2b:be:ac:5b:50:b5:cf:
a8:2c:8d:f8:68:ad:94:c6:89:4f:a2:dd:0b:52:b7:
3e:23:9d:94:2b:42:7d:78:40:5f:24:37:5a:a7:b1:
ea:bf:6c:04:39:d4:97:8a:7b:bc:27:74:02:15:ed:
6d:ee:09:bb:86:a3:cb:f0:00:63:6d:35:15:6e:3f:
03:01:6d:28:16:15:c9:d2:f5:79:fb:6a:23:63:87:
36:70:13:80:11:3d:c8:c4:68:22:9e:da:1b:c5:64:
b8:73:c3:3b:3f:73:5b:cb:f1:e8:79:76:d8:82:b5:
58:81:18:9a:6d:c7:39:19:63:5b:c4:52:df:b0:86:
db:bd:8f:b3:cd:83:c3:07:75:ee:62:e8:0f:39:00:
36:36:0b:4f:f7:80:85:b5:b7:d9:32:f0:84:46:98:
4f:22:19:66:71:15:18:be:4d:0f:d6:f0:70:76:08:
5c:e1:f2:c4:c0:6d:2c:2d:e1:82:69:e6:8f:6c:64:
29:0b:04:29:06:da:4d:ae:b5:4a:b1:6e:de:fa:b8:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:DF:01:B0:B1:AD:DE:7A:3D:C7:6D:04:63:7F:AD:0F:A9:79:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73B41CBC7C5811F19151DBF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.79.0/24
Signature Algorithm: sha256WithRSAEncryption
44:48:db:96:b6:b0:dc:55:a4:ed:3e:91:1d:50:34:ab:da:65:
d0:26:45:ce:c1:fc:39:67:bd:10:de:3e:7f:75:53:a8:02:7b:
eb:18:60:6c:18:d0:12:1f:40:eb:7e:f7:6e:46:b6:7d:84:bd:
b6:00:c9:23:66:a7:d6:b6:80:86:9a:47:88:f6:81:96:d6:dc:
4f:94:4b:c6:9b:83:6f:41:81:e7:45:16:24:5b:4e:83:a4:9d:
53:1e:5d:d3:99:93:77:54:89:b8:8f:38:4f:0b:e5:36:42:a1:
db:f1:09:da:e3:4e:c4:f9:d9:c6:42:56:dc:77:0d:17:4c:6c:
29:03:81:61:fd:8f:6c:9d:16:0d:2c:81:5e:2d:49:44:0f:46:
ab:47:b3:1b:4d:36:13:56:03:03:e8:e2:f3:e8:54:97:4c:c3:
24:02:d3:2e:6d:7c:4a:eb:28:90:c6:e8:02:65:41:1f:86:5c:
1b:ae:45:2c:bf:84:18:cd:49:ce:5f:45:33:61:20:a9:58:5c:
8b:0b:03:7d:4e:da:e6:08:90:ba:01:38:1c:5d:6c:b8:3d:58:
a3:00:b4:2a:ec:a2:11:8d:c2:6d:b8:1c:5b:28:f2:cd:e2:82:
e6:88:f8:1c:6e:6f:2a:66:9a:c7:5b:5f:4d:fd:9e:0b:86:6e:
e7:c8:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:46 2026 by rpki-client