Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83148F70755F11F1839B11D9CE1D38B0.roa
File: 83148F70755F11F1839B11D9CE1D38B0.roa (raw, json)
Hash identifier: JKJGHtd5WLBYr1TCJWsO++iddDp2uDhsFS9GtT0mpuo=
Subject key identifier: 19:A1:20:BE:B5:CC:CF:C9:E6:21:F8:6F:EF:1D:E6:CA:50:B4:DD:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C204
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83148F70755F11F1839B11D9CE1D38B0.roa
Signing time: Wed 01 Jul 2026 15:14:11 +0000
ROA not before: Wed 01 Jul 2026 15:14:06 +0000
ROA not after: Sun 09 Aug 2026 15:14:06 +0000
asID: 48031
IP address blocks: 156.238.38.0/24 maxlen: 24
156.238.39.0/24 maxlen: 24
156.254.97.0/24 maxlen: 24
156.254.98.0/24 maxlen: 24
156.254.99.0/24 maxlen: 24
156.254.100.0/24 maxlen: 24
156.254.101.0/24 maxlen: 24
156.254.102.0/24 maxlen: 24
156.254.103.0/24 maxlen: 24
156.254.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115204 (0x1c204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 15:14:06 2026 GMT
Not After : Aug 9 15:14:06 2026 GMT
Subject: CN=6a452ec3-0c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:5b:34:f9:1b:86:08:64:4e:c1:5c:32:9b:
89:c9:d9:4c:ad:66:62:8e:75:6b:fa:16:bf:70:11:
3b:87:e3:90:64:b9:6c:be:93:01:c2:2b:5b:56:fb:
d5:dd:97:1f:2d:31:8a:da:71:7c:f8:78:3c:cd:72:
59:91:32:3c:e9:bb:8b:69:f7:4b:be:ff:0c:b9:ca:
4b:5b:f4:c8:d8:db:b4:86:d2:54:78:68:f2:58:35:
29:a2:48:ea:20:44:9c:d7:32:e7:68:8d:c3:99:65:
8c:ae:69:75:e4:a4:76:17:b5:8c:46:0b:fe:a8:e4:
87:d4:2f:3c:7c:75:ba:6c:e5:37:61:56:9c:32:71:
07:d0:cd:38:e7:4d:25:6c:03:c1:b0:78:c7:fd:ec:
f4:23:6d:bb:2d:9f:e5:e2:02:40:79:60:96:16:32:
96:ce:c5:3b:96:aa:e8:06:be:56:f9:7e:cd:00:74:
fc:14:6e:06:a9:bb:b0:bf:51:97:34:a9:ac:21:e6:
af:77:23:47:6c:ab:9e:13:f1:fc:14:85:76:1e:b5:
77:74:55:e2:22:1e:e9:79:8f:04:1b:73:8b:1f:4d:
1b:6e:5d:15:74:cf:ea:80:32:7c:2b:e6:43:0f:47:
e7:17:05:a2:91:32:fc:84:aa:3b:fa:19:be:17:52:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A1:20:BE:B5:CC:CF:C9:E6:21:F8:6F:EF:1D:E6:CA:50:B4:DD:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83148F70755F11F1839B11D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.38.0/23
156.254.97.0-156.254.104.255
Signature Algorithm: sha256WithRSAEncryption
0c:9c:ed:d7:e1:ce:c9:59:b4:8e:15:af:92:23:99:f5:8e:67:
21:22:e5:ca:a3:74:0b:2a:6d:44:a5:62:cd:25:84:f2:9b:7b:
28:21:6f:99:0d:40:f5:5b:61:6e:fb:db:0c:84:cd:15:c4:ad:
e0:a4:63:1d:81:39:28:eb:f5:04:5a:a6:85:91:09:24:ff:c0:
de:1e:b0:e5:85:1d:eb:d6:d6:68:dc:a6:6d:6e:95:ba:82:1a:
9c:04:2b:12:94:7b:10:74:fc:e4:f9:97:2e:1d:13:c6:15:15:
03:40:a5:0f:aa:90:63:e4:1a:c1:61:17:41:54:5e:fd:0c:f5:
0d:07:12:68:a3:fe:86:31:03:38:c1:79:8b:4a:61:90:ba:dd:
00:ca:38:f3:72:f5:22:da:2c:52:c1:73:ee:df:78:19:95:d0:
63:1f:36:e1:bf:fe:be:7a:84:c2:aa:46:58:92:42:c5:6e:c5:
7c:e6:56:e5:c5:8b:d9:63:7b:23:65:2b:78:d8:44:26:a4:d2:
99:57:17:ba:60:e5:5f:82:29:4d:90:e7:7f:e5:ec:6e:0a:2e:
ef:4d:25:29:5c:67:23:73:c9:b7:c0:0d:92:f6:8c:a1:1c:9c:
9a:40:6a:ca:06:53:ab:1d:a4:92:84:f8:e3:9c:53:30:dd:14:
2e:b0:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:13 2026 by rpki-client