Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A62B072828511F183E4D5D8CE1D38B0.roa
File: 7A62B072828511F183E4D5D8CE1D38B0.roa (raw, json)
Hash identifier: tbc0PkEgiOUt1Zk8rBVOSJ2CDVzqzoM39n83QuFuKAw=
Subject key identifier: 4B:3F:CA:A8:2A:02:D7:63:D0:BD:C7:49:57:1E:9B:A6:B8:8C:2F:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A62B072828511F183E4D5D8CE1D38B0.roa
Signing time: Sat 18 Jul 2026 08:48:42 +0000
ROA not before: Sat 18 Jul 2026 08:48:38 +0000
ROA not after: Sun 16 Aug 2026 08:48:38 +0000
asID: 150706
IP address blocks: 156.255.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116222 (0x1c5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 08:48:38 2026 GMT
Not After : Aug 16 08:48:38 2026 GMT
Subject: CN=6a5b3dea-e97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:29:e7:18:31:18:8b:28:9d:27:98:ea:c9:
32:aa:b6:e3:ff:c1:57:8a:1b:24:f1:e2:35:b8:1e:
b3:72:bc:fa:72:83:a1:b1:2c:35:a9:51:e9:05:ca:
99:8d:52:fc:9b:0b:54:91:4b:22:e9:09:3a:7c:df:
5c:45:95:18:7f:75:91:7f:d7:e1:a0:54:24:5a:24:
8c:3e:ec:6b:32:c6:43:90:2f:2e:8d:fd:01:49:95:
3b:c5:4c:00:31:23:a1:84:87:8b:12:75:2e:15:66:
c5:e7:80:84:39:a3:2e:41:cb:68:29:b7:e0:5a:8c:
7f:fe:02:2c:5b:01:30:e7:5a:1e:1d:3e:71:7a:34:
97:35:f7:c3:52:32:1f:90:cf:18:f9:f5:12:33:6f:
25:1f:11:46:7d:02:49:77:e2:32:4a:78:d8:56:76:
af:2c:29:2b:6d:2e:9e:ff:2c:93:91:ec:9c:ad:ae:
f9:b4:2c:40:c3:ec:a9:38:2c:e2:d9:3e:2e:a9:27:
3a:00:02:31:f0:c3:59:d6:09:a4:50:d4:52:fd:1c:
87:83:b0:12:09:9f:f2:fb:e4:96:a6:36:41:50:4f:
24:0f:67:b3:80:6e:aa:80:ca:f1:a3:fc:d3:c8:93:
af:48:3d:91:cf:e1:10:ec:4b:f6:5e:e0:5d:37:e1:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:CA:A8:2A:02:D7:63:D0:BD:C7:49:57:1E:9B:A6:B8:8C:2F:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A62B072828511F183E4D5D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:53:ad:0c:cd:fd:d3:92:8f:39:0f:2a:d3:38:1a:20:82:b9:
fe:b1:97:53:7e:4c:75:ff:5e:6c:63:20:e6:3c:6f:8b:a4:c7:
79:ae:49:2e:ca:53:71:29:24:dc:87:29:11:d0:e1:4e:45:5b:
23:4f:6d:1b:fc:ee:d1:55:d5:14:c5:f8:aa:16:26:7d:c1:e3:
5b:77:49:d4:11:b4:93:8c:2c:62:d2:58:36:fc:02:dd:17:bc:
56:51:25:d5:2b:8f:ae:54:6e:f7:48:83:2c:4f:e4:10:67:a6:
88:4f:30:2f:ce:38:21:0c:c4:79:b8:2f:27:f4:5d:97:95:05:
19:d0:15:30:c7:f8:27:0d:89:1a:dc:7e:7d:0b:6d:e6:14:d9:
1e:bb:ef:81:6d:2d:50:f9:b2:3e:8b:e5:43:88:7e:fa:4d:39:
5a:6c:79:8d:a0:06:71:c7:96:c4:81:46:0e:87:e6:28:c7:44:
27:de:58:82:64:b3:c7:20:3f:dc:32:e7:c6:f1:3e:44:b6:e6:
6a:e0:10:27:c6:1b:3b:20:65:96:1b:53:39:8a:1c:34:20:70:
c0:65:e9:0f:34:31:4e:26:4b:08:3f:67:24:c6:82:35:05:0f:
85:9f:14:45:fa:15:ba:3b:fb:71:39:0c:33:5d:c3:b8:57:14:
3f:5e:cd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:15 2026 by rpki-client