Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C8A639E80EB11F182A7EB18CF1D38B0.roa
File: 8C8A639E80EB11F182A7EB18CF1D38B0.roa (raw, json)
Hash identifier: uHA1uvpZCWSqcDGweMe5OQsXkpaFFcJtbr7VO5kdAik=
Subject key identifier: A6:70:84:7A:6F:19:32:57:75:49:CE:1E:EF:C4:C9:CF:2B:66:B1:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C547
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C8A639E80EB11F182A7EB18CF1D38B0.roa
Signing time: Thu 16 Jul 2026 07:54:19 +0000
ROA not before: Thu 16 Jul 2026 07:54:15 +0000
ROA not after: Thu 20 Aug 2026 07:54:15 +0000
asID: 214432
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116039 (0x1c547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 07:54:15 2026 GMT
Not After : Aug 20 07:54:15 2026 GMT
Subject: CN=6a588e2b-5271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:d0:2d:07:f5:1b:b2:4a:58:0b:38:f8:8c:
06:84:a0:24:56:8a:27:96:01:f1:80:53:66:ce:7e:
8b:36:c3:6f:1d:31:11:4d:38:c5:53:14:14:1e:72:
05:d0:ad:7d:fc:ef:ad:87:a2:ac:d2:61:0c:e1:9e:
82:9b:83:a4:e5:29:e8:9a:6f:73:d3:cd:b6:42:fa:
8b:c0:3a:d1:a1:b0:c8:e5:b3:f1:af:e0:46:b5:41:
0a:90:c7:a3:8c:70:a9:46:ba:21:9c:77:90:6a:e3:
0d:70:62:e8:27:b5:b9:8d:30:af:f9:87:82:7a:f7:
6e:7f:74:a7:ee:ce:3e:f1:65:a1:d1:2a:04:33:0a:
47:b3:66:2c:23:3d:03:7e:7e:ed:1c:47:f9:fa:ab:
75:60:a5:7a:99:92:27:c5:ff:52:37:58:4b:8a:bf:
aa:d0:34:2f:ac:c7:f3:e9:30:13:14:86:66:f5:1e:
34:52:5c:59:b2:a3:df:f7:68:28:a7:d7:20:6a:55:
22:8e:3d:15:24:d0:09:2e:2c:86:22:e8:ba:0e:45:
08:ef:7d:55:73:8a:7a:c1:83:d6:61:21:33:3f:fa:
f8:11:42:24:f9:59:dd:04:1e:90:cd:94:7b:8f:9e:
8a:cf:b7:d2:fb:41:b3:a5:cd:19:13:7f:c4:d7:92:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:84:7A:6F:19:32:57:75:49:CE:1E:EF:C4:C9:CF:2B:66:B1:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C8A639E80EB11F182A7EB18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
25:3c:fe:35:3e:48:a8:d7:d6:e1:55:fb:61:05:9a:c0:2d:d2:
3c:00:22:09:a5:5d:92:32:73:d0:d2:3f:df:b6:7a:8f:10:f9:
3f:63:01:6f:97:77:37:75:1d:2c:62:e7:e0:e5:d8:8a:28:0b:
3a:91:f6:da:b9:c4:5c:99:93:9e:9c:7c:ee:e9:e0:3b:78:52:
fd:08:81:0e:56:02:94:30:c5:40:88:ce:b9:b0:58:6a:a5:9d:
3d:1f:fc:ac:50:01:b3:c6:49:30:36:14:a7:70:87:78:2c:72:
90:4b:7a:73:14:97:0b:34:5a:4a:05:17:d1:f0:99:43:77:ee:
fd:b9:08:46:da:dc:4a:3e:27:b7:49:de:07:6b:e6:fa:c7:c6:
af:42:9d:e2:30:c6:c8:56:2b:da:48:57:24:80:d3:58:f8:55:
12:f6:8f:d4:1c:00:5e:d6:60:a3:9b:c1:c5:a4:fc:80:ad:0b:
3e:2b:80:d2:62:c9:af:f7:1d:79:79:23:95:62:a0:e1:12:32:
fd:29:fc:a6:9a:b8:8e:8f:d9:3b:5b:a0:b5:e8:11:03:c5:1e:
a8:d6:72:f5:55:89:f7:7e:de:63:41:d9:a1:f4:43:e0:aa:a7:
bc:c7:32:96:75:be:bf:f2:c5:91:10:f5:85:a1:c2:8b:26:1f:
49:15:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:55 2026 by rpki-client