Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7FED4E7F5711F185ED55B8CE1D38B0.roa
File: 7F7FED4E7F5711F185ED55B8CE1D38B0.roa (raw, json)
Hash identifier: uv2S/Z5XgFBmxxetaOVdrZlOmhzGjVOyqhocqme8NLA=
Subject key identifier: 97:A8:0D:5A:9F:C7:2E:3C:43:0C:5C:42:2B:71:48:10:17:01:00:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7FED4E7F5711F185ED55B8CE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:42:01 +0000
ROA not before: Tue 14 Jul 2026 07:41:56 +0000
ROA not after: Mon 17 Aug 2026 07:41:56 +0000
asID: 22773
IP address blocks: 156.242.20.0/23 maxlen: 24
156.242.22.0/24 maxlen: 24
156.242.24.0/23 maxlen: 24
156.243.35.0/24 maxlen: 24
156.243.36.0/23 maxlen: 24
156.243.82.0/24 maxlen: 24
156.243.84.0/24 maxlen: 24
156.243.96.0/22 maxlen: 24
156.243.130.0/24 maxlen: 24
156.244.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115939 (0x1c4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 07:41:56 2026 GMT
Not After : Aug 17 07:41:56 2026 GMT
Subject: CN=6a55e849-4e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:db:52:ef:5c:9a:e7:8d:5c:e8:cf:28:8e:
b8:8e:f0:29:51:41:3e:e4:41:98:58:3b:ba:42:f6:
bc:e7:8c:a0:f4:34:15:70:ba:96:b5:52:0e:b5:57:
0b:e9:6e:60:4a:7e:88:fa:3a:f2:ad:a4:8d:16:f8:
58:3f:8e:4b:b8:56:fd:e2:cb:49:1b:3b:5a:32:10:
cf:19:f0:58:69:07:3b:bc:e3:5d:59:1d:1d:3f:a4:
c4:00:e3:1a:e7:69:6d:ce:00:0a:a0:3d:92:1a:0b:
35:e4:8f:92:79:1b:2f:3a:b4:79:de:7e:08:02:a7:
c4:1c:d9:e0:76:50:ef:26:df:5a:1e:bf:9e:ea:e8:
b3:64:47:a3:99:9c:9e:f3:74:37:46:bb:59:d4:26:
33:ad:5d:a0:90:7f:04:76:79:16:f9:04:df:cb:53:
a2:91:5b:9a:4a:86:48:04:99:bc:fa:8b:07:0d:13:
4e:40:83:85:a9:c4:d2:9e:4b:1d:ba:4d:89:04:f1:
42:b1:82:c7:fd:c2:49:8b:f5:af:36:48:16:2a:bf:
77:07:01:39:0b:03:96:07:7c:98:b9:67:16:60:61:
5f:c9:5e:bf:e3:08:d1:b7:cc:98:3f:5a:4a:8e:03:
e3:6f:59:27:0f:7f:1e:00:14:ef:fd:95:a7:87:cb:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:0D:5A:9F:C7:2E:3C:43:0C:5C:42:2B:71:48:10:17:01:00:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7FED4E7F5711F185ED55B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.20.0-156.242.22.255
156.242.24.0/23
156.243.35.0-156.243.37.255
156.243.82.0/24
156.243.84.0/24
156.243.96.0/22
156.243.130.0/24
156.244.144.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:e1:2e:9a:5c:da:20:44:90:cc:ea:12:8f:f5:09:15:71:3d:
d9:bb:d5:69:cd:94:22:eb:5a:95:8c:58:dc:70:79:06:19:66:
6d:88:1f:49:1a:81:33:06:79:14:e4:97:b6:f0:ce:91:81:e0:
d9:02:8c:7c:63:80:82:de:a5:6e:fa:3d:3d:1f:97:4a:7e:ce:
3d:1e:62:ef:3a:ca:ce:eb:d4:ff:e0:30:e0:3e:11:34:24:22:
52:8e:73:a2:bb:dd:9e:6d:c7:95:8e:dd:ba:9e:ae:69:9b:b9:
c9:53:ad:6f:1c:b2:94:90:91:fa:c5:20:aa:75:56:38:1b:57:
5d:8d:a2:40:c4:f8:60:bd:2d:90:a3:61:9e:a8:7f:4e:18:cd:
a5:f3:b2:fa:41:0b:e9:c5:35:e8:d0:bc:12:21:96:53:b9:57:
b1:14:63:5c:dc:e9:12:cf:43:95:6d:f2:92:2e:21:b3:73:05:
30:e5:85:8f:de:0c:22:7c:08:ca:14:6d:46:de:39:1a:5d:c5:
7c:6c:7e:3e:ab:35:d4:e4:da:27:6d:64:df:fb:4d:03:bf:1d:
67:95:a9:c1:4f:27:96:9a:c6:10:b8:f5:dc:01:a4:39:ee:8f:
98:c0:5f:14:a7:60:90:9d:d1:97:8c:c0:bb:4e:e6:42:41:9c:
6a:48:88:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:41 2026 by rpki-client