Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78EB6DD0779311F18EFAD6C5CE1D38B0.roa
File: 78EB6DD0779311F18EFAD6C5CE1D38B0.roa (raw, json)
Hash identifier: 8SMl7fY5IZ2fDuupInLBPm/nfsiPCZhhQv/BqE7U/Gw=
Subject key identifier: 82:11:BF:62:93:C4:BC:C0:7C:B3:45:A1:63:1E:9E:3A:53:6F:FF:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78EB6DD0779311F18EFAD6C5CE1D38B0.roa
Signing time: Sat 04 Jul 2026 10:31:10 +0000
ROA not before: Sat 04 Jul 2026 10:31:05 +0000
ROA not after: Mon 10 Aug 2026 10:31:05 +0000
asID: 32167
IP address blocks: 156.226.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115427 (0x1c2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 10:31:05 2026 GMT
Not After : Aug 10 10:31:05 2026 GMT
Subject: CN=6a48e0ee-e68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:d5:4e:d6:89:9c:4f:16:84:f8:40:13:93:
71:c7:f7:b0:18:0e:a5:27:b2:9e:ef:09:be:82:2c:
fe:6c:d0:af:54:55:df:8f:d1:c3:59:e1:72:df:80:
ec:6d:e1:8b:ab:5c:1d:07:c8:dc:ec:94:aa:1d:a5:
58:4c:71:51:dd:e8:f0:62:d6:56:5a:6a:c6:29:ba:
2a:89:9d:31:96:31:bb:f8:80:06:c2:2d:1d:69:d6:
cb:e1:df:e4:38:94:a8:70:90:7c:11:2c:6e:c3:1e:
3c:59:17:11:c9:73:7a:ee:15:db:b5:ff:05:1b:c6:
5d:67:21:47:5f:5a:c6:eb:85:9b:d7:4f:3a:0d:dd:
bd:24:e0:f0:fe:38:61:ff:59:ee:1e:f2:46:63:e2:
18:fa:2f:f1:b1:24:7c:bd:b4:fd:b2:0d:29:de:e0:
f1:15:94:2d:ba:00:51:be:86:cf:dd:49:59:4c:cd:
af:cf:3b:f5:48:83:85:e0:ae:00:9a:0d:bd:32:e4:
db:1e:e9:c1:e5:60:1b:88:d5:a7:24:30:3a:ab:96:
50:df:15:ba:bb:37:f2:27:51:17:45:1e:04:27:61:
d3:91:75:2b:1a:ef:be:74:ab:0f:61:cf:c4:69:86:
45:96:09:88:86:eb:de:03:b8:77:52:08:05:d4:db:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:BF:62:93:C4:BC:C0:7C:B3:45:A1:63:1E:9E:3A:53:6F:FF:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78EB6DD0779311F18EFAD6C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.170.0/23
Signature Algorithm: sha256WithRSAEncryption
30:54:73:57:bc:72:a1:24:db:95:f3:0e:5a:55:58:f5:ca:28:
b1:48:51:0d:78:19:18:92:97:77:92:2e:9e:19:e9:2b:c2:1a:
be:2c:a5:8b:88:a2:79:b9:02:04:84:f1:00:ad:1b:10:5b:ef:
7e:b6:d2:be:9f:a2:06:4a:86:ab:58:b7:1f:b3:0c:c6:d3:ea:
96:f2:17:40:50:90:23:f9:e3:cb:b9:79:f7:4b:0f:0c:69:ea:
c7:43:69:7d:23:36:a7:bb:a7:cd:45:40:24:bd:0a:2d:e5:07:
ed:e0:4f:c5:a4:cd:57:36:97:e4:20:7d:cc:cf:a6:61:a6:37:
95:04:be:1b:51:66:a4:26:86:d5:f1:73:be:b7:02:cd:06:b9:
c3:a0:b3:f2:9c:8d:58:47:58:8a:19:92:f6:20:dc:61:8e:c7:
04:01:ce:26:7a:2c:50:71:d7:35:29:47:ef:08:78:5b:de:2a:
29:df:87:3f:77:07:c6:23:28:ca:35:4f:e8:a2:45:54:53:8e:
33:ed:33:be:b6:e8:d5:65:92:d6:cd:7c:ca:ec:32:b4:e6:5a:
f4:28:3f:78:f7:6f:7d:1b:a6:b6:14:78:36:d2:24:bd:89:ec:
05:67:9b:a2:12:81:87:3b:34:d0:85:17:19:9b:cf:59:65:99:
6a:37:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:58 2026 by rpki-client