Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C46301E6EF111F1B6FAC6C5CE1D38B0.roa
File: 7C46301E6EF111F1B6FAC6C5CE1D38B0.roa (raw, json)
Hash identifier: /iRzRANhe6q1B6tfgSORIaqW66f4w4p0Do2weKRRsZU=
Subject key identifier: AC:61:DE:12:BC:ED:46:A9:79:E5:A8:74:9D:9E:14:33:15:77:13:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C46301E6EF111F1B6FAC6C5CE1D38B0.roa
Signing time: Tue 23 Jun 2026 10:51:28 +0000
ROA not before: Tue 23 Jun 2026 10:51:23 +0000
ROA not after: Sun 09 Aug 2026 10:51:23 +0000
asID: 395793
IP address blocks: 156.243.245.0/24 maxlen: 24
156.243.250.0/24 maxlen: 24
156.243.251.0/24 maxlen: 24
156.243.252.0/24 maxlen: 24
156.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114647 (0x1bfd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 10:51:23 2026 GMT
Not After : Aug 9 10:51:23 2026 GMT
Subject: CN=6a3a6530-1756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:86:ca:50:b4:ef:b9:c0:2e:df:47:37:56:
cf:e0:bd:f5:45:66:0e:65:04:6e:ee:41:72:15:b9:
f1:49:2a:4c:2e:b7:4a:c5:70:e8:42:60:ae:0f:11:
cc:7a:47:50:c6:dd:f4:a5:04:ae:cb:82:a7:8d:d4:
1b:8f:43:c2:39:40:63:b8:73:7b:08:83:40:0b:43:
98:26:72:98:f2:2b:76:74:3a:eb:dd:b9:54:37:a5:
dc:e8:0a:71:e0:19:a0:be:25:c3:45:da:30:ee:ac:
d4:7e:44:8f:7f:4b:6e:8f:e6:06:b7:ec:51:44:1b:
b1:8f:6f:4c:5c:87:1d:6a:4b:20:78:de:3f:38:22:
04:0e:de:a8:61:76:4e:ca:d8:ba:1e:38:71:cc:95:
aa:29:fb:74:2f:7b:c1:87:8a:b5:11:61:4e:08:98:
c3:1c:7b:97:24:92:a9:17:43:a6:31:ec:8e:35:cd:
a0:43:1a:b7:37:78:39:9d:4c:3e:91:ab:c7:0e:83:
4e:4d:b2:30:aa:cb:d8:2b:a1:99:5a:0c:9d:f9:60:
6c:fd:5b:d5:dc:25:9d:54:40:da:04:0d:17:f6:21:
0a:6f:10:c5:c9:1b:85:bb:ed:10:20:99:91:52:71:
4a:bf:4b:16:d9:1d:9c:37:39:8b:64:39:1d:cb:e4:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:61:DE:12:BC:ED:46:A9:79:E5:A8:74:9D:9E:14:33:15:77:13:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C46301E6EF111F1B6FAC6C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.245.0/24
156.243.250.0-156.243.253.255
Signature Algorithm: sha256WithRSAEncryption
0f:2b:a3:cd:f6:ae:20:7d:79:d5:2d:79:23:32:bc:86:a3:16:
8e:85:33:92:fb:19:97:8e:a5:c6:cf:cd:a9:95:03:d4:b3:aa:
20:3f:4e:5f:d0:e1:85:e5:06:59:8d:1a:64:e3:31:91:27:08:
12:75:93:5d:68:c5:48:71:fc:1b:5f:d3:d1:9f:cb:b8:de:b2:
ac:8a:26:e0:ae:0d:71:b5:72:77:a4:26:7f:44:5f:6a:1e:d7:
2c:bd:3e:04:75:af:e3:e2:e4:b0:cf:db:fc:bf:96:e2:f4:4d:
83:9d:c0:13:17:d8:ba:b1:35:03:a8:b8:36:08:59:99:db:a9:
1b:ea:1c:06:94:08:77:02:35:e5:02:31:91:3b:18:fb:de:22:
e6:76:37:9b:51:1f:50:4e:14:6b:95:e7:3d:c0:62:56:cb:d7:
64:1c:f9:92:20:27:80:ae:f1:8b:b9:25:a9:f3:85:07:9d:e7:
40:b6:5d:f1:01:c3:c1:b2:38:d4:d9:cc:6b:b8:e6:7d:f6:00:
5a:fe:6d:4d:12:36:e2:ee:ee:b6:2b:05:95:85:78:f1:a9:87:
19:c0:b5:e2:5e:8c:f2:0a:f5:41:9b:c5:c2:fa:e3:89:d2:a3:
ff:cf:d5:f0:72:11:ac:cf:9f:93:06:21:70:92:7c:a3:de:0d:
58:00:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:47 2026 by rpki-client