Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/815C183C72E511F1919C00CDCE1D38B0.roa
File: 815C183C72E511F1919C00CDCE1D38B0.roa (raw, json)
Hash identifier: HCCnNBgGeg8L29+DCTTEWUioxmBQv+q6oYH+gTyAg+k=
Subject key identifier: 39:35:7A:56:53:31:5E:7C:4C:16:1F:43:81:6C:B8:FE:BA:D2:D3:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C121
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/815C183C72E511F1919C00CDCE1D38B0.roa
Signing time: Sun 28 Jun 2026 11:35:47 +0000
ROA not before: Sun 28 Jun 2026 11:35:43 +0000
ROA not after: Thu 30 Jul 2026 11:35:43 +0000
asID: 61461
IP address blocks: 156.231.192.0/18 maxlen: 24
156.236.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114977 (0x1c121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 11:35:43 2026 GMT
Not After : Jul 30 11:35:43 2026 GMT
Subject: CN=6a410713-7735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:ee:dd:c9:89:8c:5d:f0:f9:cb:1d:ff:66:
c7:66:2f:d5:cd:1f:96:45:8c:ea:14:03:58:55:d0:
ea:60:de:91:7f:d0:67:c0:10:fb:38:b6:65:a6:1b:
49:13:8a:06:a6:6e:3f:4b:30:6b:18:f5:f4:aa:e4:
c5:82:b1:09:fd:88:a3:df:89:b8:3d:02:62:6f:b1:
6d:d4:c8:b3:ce:05:3f:d9:6e:4f:5c:52:21:63:24:
9d:07:e5:75:79:56:4e:75:2e:55:6b:13:a1:56:a0:
80:41:4f:d7:3f:da:f7:5c:d3:86:a4:b1:1d:6d:05:
5f:0a:2e:65:18:75:78:04:a2:8f:a5:56:1e:3d:7b:
84:27:4d:e1:92:f8:95:a9:03:55:11:a6:aa:3c:3a:
bc:d4:bb:89:03:e6:29:67:30:11:e1:12:b1:db:64:
e1:bc:2a:d2:32:e2:3e:cb:19:b1:4e:44:9d:d2:df:
da:33:26:5a:ea:35:ee:2c:d9:2e:5d:e5:50:0c:44:
82:e2:db:2a:24:05:b0:33:87:74:98:c6:96:e7:b4:
c4:72:e3:d7:b0:eb:7d:d6:3b:bb:b3:22:4c:9f:c7:
00:cd:cb:3f:70:a1:f5:b5:39:b3:16:ef:95:75:a0:
aa:31:7d:31:3b:ea:aa:42:d6:dc:71:89:34:05:50:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:7A:56:53:31:5E:7C:4C:16:1F:43:81:6C:B8:FE:BA:D2:D3:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/815C183C72E511F1919C00CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.192.0/18
156.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
19:65:c9:d5:b7:6b:2f:ae:fc:47:dc:be:c3:29:6b:7c:05:02:
f7:f2:7b:31:45:fa:0c:5a:e8:93:03:ca:ac:f9:61:fd:c4:f5:
09:73:9c:11:fd:ea:32:cf:8c:3d:ff:7e:d8:4d:7e:86:42:98:
9f:d4:31:7c:29:d2:0d:01:5b:e4:eb:c3:bd:d2:3a:c9:0e:92:
98:c5:3f:44:83:cc:86:56:a2:5a:e7:86:63:70:52:bc:92:dc:
41:02:17:db:61:e1:ea:2e:68:ac:60:bf:4a:40:9d:11:26:55:
66:42:f0:ae:a5:a5:df:fc:7f:14:ea:5c:02:24:3c:c8:23:7e:
75:d6:89:97:3f:b5:6e:eb:a6:bd:6f:14:cd:c1:bf:ad:2d:d7:
f4:a0:0f:eb:60:ba:e3:34:b6:6f:02:b7:94:77:4e:8e:ae:ce:
96:e3:17:75:ee:ec:70:81:85:4b:0f:d4:13:18:ae:5e:9e:6b:
bd:16:40:83:f7:c4:6f:d1:71:08:67:55:ba:85:3c:ec:56:61:
f4:41:15:f3:b8:45:f6:02:bb:3b:c7:58:44:aa:c6:06:c2:e0:
79:d9:38:c8:6f:5a:8e:cd:34:18:fe:f3:16:b2:36:41:3b:6d:
dd:47:6d:89:cc:ec:73:be:ba:8c:a8:5b:34:22:50:37:1c:18:
d5:4a:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:41 2026 by rpki-client