Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A4B502740411F189C95713CF1D38B0.roa
File: 88A4B502740411F189C95713CF1D38B0.roa (raw, json)
Hash identifier: 1a+TckV3RzaT3nTg1zE+xwPM0R2wgaNSNzpCcZYWkec=
Subject key identifier: 5F:6F:C4:D2:41:57:95:BB:21:54:22:A5:BA:B1:2D:8D:1F:A1:F1:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A4B502740411F189C95713CF1D38B0.roa
Signing time: Mon 29 Jun 2026 21:50:25 +0000
ROA not before: Mon 29 Jun 2026 21:50:20 +0000
ROA not after: Wed 05 Aug 2026 21:50:20 +0000
asID: 395886
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115158 (0x1c1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 21:50:20 2026 GMT
Not After : Aug 5 21:50:20 2026 GMT
Subject: CN=6a42e8a1-e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:a2:3b:e3:26:a6:64:1d:94:f8:b3:45:e5:
56:b8:a7:c3:f0:de:2e:e0:75:91:19:8e:c6:96:c7:
b0:7a:c7:b5:32:64:03:b9:66:2a:df:3e:71:04:54:
8e:28:ba:35:b2:27:56:f6:9e:80:32:b0:ce:45:c1:
4f:d7:39:69:50:a9:10:5c:2a:82:cb:41:f2:8b:b2:
81:d6:81:60:c6:bb:07:59:45:4a:69:5a:e7:b2:92:
7a:88:50:c5:42:47:a6:6d:66:ba:37:f6:60:14:48:
94:47:74:64:ff:ea:67:90:7d:81:07:6a:2a:95:82:
c1:5e:45:99:f4:20:c6:ed:4e:01:1e:aa:22:cd:bf:
ef:d4:78:6b:5a:c7:f2:26:1a:55:e9:21:fe:bd:60:
ee:77:81:02:13:d8:20:10:1b:f0:79:2a:a1:b2:1a:
ae:45:f9:f3:59:ab:1c:54:a0:be:67:1a:4d:eb:bf:
1e:9a:fb:5d:c8:7a:13:f7:d4:07:55:d1:9c:d0:3e:
2d:2e:62:ee:68:a3:62:5d:71:fc:ec:0f:5a:0a:86:
eb:3b:7c:cc:f8:e8:85:c5:50:7d:fb:e9:e3:69:c0:
21:89:fa:6b:cc:55:85:3f:ee:90:84:a7:88:8f:67:
40:19:93:0c:fe:cd:5d:d3:7e:fc:b7:b4:eb:25:cf:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:C4:D2:41:57:95:BB:21:54:22:A5:BA:B1:2D:8D:1F:A1:F1:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A4B502740411F189C95713CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:65:ed:dd:e9:25:de:1e:45:d2:35:b7:42:dc:e3:1f:7a:24:
92:03:90:13:0f:bc:23:3c:8b:37:ef:9c:1c:80:93:97:49:a5:
ee:6b:12:f2:c2:64:5d:b8:dc:04:b9:80:40:05:01:af:6c:3f:
4e:8a:6c:11:66:b0:3c:0f:90:94:a9:13:4f:17:7d:f5:f0:f7:
27:3c:99:75:a1:8b:35:30:d5:e4:6d:e1:e1:82:f8:ea:94:9d:
03:cc:6f:4a:2f:55:d4:69:7c:96:ef:d2:3e:ab:eb:e5:f3:19:
74:82:93:33:06:9e:a3:2a:6c:f2:09:c6:1c:b0:bb:8c:e5:dd:
68:a9:50:99:2c:17:18:ce:78:15:c8:98:b9:39:48:c7:58:d3:
56:61:90:fc:ee:b1:4b:38:3f:26:9f:1f:13:58:e2:fe:6d:c0:
3e:13:07:25:ee:d7:23:02:d9:93:9b:af:7c:74:e0:b7:14:7c:
d8:92:fe:83:f8:18:75:75:88:ad:53:18:d4:86:b5:8e:0e:ad:
f9:38:c8:5a:5a:5d:01:dd:ba:ad:78:24:86:8f:06:9e:19:22:
26:8e:cc:7a:1c:91:c4:b5:c0:54:77:ad:7b:6d:ca:84:47:f7:
91:1c:08:41:df:29:77:57:6b:57:4e:95:7d:99:e7:25:f5:cc:
b8:f0:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:22 2026 by rpki-client