Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/927E390A6EE011F1B9088BE0CE1D38B0.roa
File: 927E390A6EE011F1B9088BE0CE1D38B0.roa (raw, json)
Hash identifier: s63nc4DqvEYx7WeF3qwGA5dOrUPg7Q7Qpic61cZku+g=
Subject key identifier: 6E:A7:28:4A:7E:31:07:41:1C:DA:E5:7D:68:DF:99:10:5A:4D:43:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/927E390A6EE011F1B9088BE0CE1D38B0.roa
Signing time: Tue 23 Jun 2026 08:50:24 +0000
ROA not before: Tue 23 Jun 2026 08:50:18 +0000
ROA not after: Sun 09 Aug 2026 08:50:18 +0000
asID: 214143
IP address blocks: 156.231.108.0/23 maxlen: 24
156.243.245.0/24 maxlen: 24
156.243.250.0/23 maxlen: 24
156.243.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114621 (0x1bfbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 08:50:18 2026 GMT
Not After : Aug 9 08:50:18 2026 GMT
Subject: CN=6a3a48d0-024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:03:a1:bf:4a:a6:5f:b8:d9:9f:94:b0:c1:
54:cd:99:fa:51:2e:24:61:65:71:3e:bf:16:3f:8a:
81:7f:60:c4:72:b8:5c:8c:0e:45:29:b5:bb:16:67:
d7:c0:f3:f0:f1:bb:b4:43:39:94:e1:b6:84:a6:43:
66:a8:74:5b:76:38:ad:85:c8:4f:22:98:3b:bd:b5:
14:49:be:1c:f2:56:eb:dc:ed:d0:02:14:50:6c:19:
ca:b3:a6:0a:7c:d5:5c:6a:bc:b2:a0:9f:d0:14:d9:
05:a9:5d:83:69:b0:fb:6c:13:17:d0:d2:af:97:57:
3b:6d:dd:5e:ac:69:89:9a:16:e9:7a:fb:a6:e5:33:
9d:59:17:59:b0:d7:ba:99:bb:8c:26:a7:ca:c1:8a:
45:66:57:17:b2:9b:06:1d:13:e0:bf:fd:fb:21:e9:
f1:a3:68:90:83:2f:de:fb:de:31:29:1f:76:b0:cd:
8b:55:a3:03:8e:78:80:60:d5:db:f5:40:9a:fc:e2:
95:84:f8:3f:46:d1:78:01:0f:00:46:84:ab:52:61:
7f:41:ae:97:d0:ae:42:6b:2b:b9:d1:ca:3c:c3:48:
c5:eb:ae:c5:c5:cd:08:f3:be:44:cc:ca:b6:b0:7c:
ec:9d:47:e5:fe:bd:62:8b:6e:8b:d2:b3:85:d0:26:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A7:28:4A:7E:31:07:41:1C:DA:E5:7D:68:DF:99:10:5A:4D:43:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/927E390A6EE011F1B9088BE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.108.0/23
156.243.245.0/24
156.243.250.0-156.243.253.255
Signature Algorithm: sha256WithRSAEncryption
1a:6d:78:a8:d7:f4:c4:0b:fb:c8:7f:5b:27:eb:1d:86:86:1b:
11:39:27:9c:a8:f2:21:8c:6b:21:71:84:a8:51:10:b1:ff:2c:
6b:b9:0d:49:24:b5:5f:ae:ed:f0:e5:6c:b0:46:25:b4:99:d2:
f5:fe:57:f4:ed:de:ab:96:b1:bd:c5:ae:8b:aa:e0:3c:40:cb:
85:38:e7:98:7b:20:aa:19:7f:fc:46:86:d6:3d:a2:21:67:02:
23:5a:ea:49:6c:14:70:80:c5:e6:f1:cf:59:1c:f2:b4:cc:5f:
52:02:42:7a:b7:cc:93:34:ec:6b:16:dc:96:59:47:05:b8:37:
19:93:6e:45:55:40:9c:c9:ff:1c:d1:f8:d1:05:02:46:3e:42:
48:04:f9:cb:40:ed:90:6f:ca:6b:63:f5:8d:22:0b:2e:c8:9f:
69:c0:45:3c:32:ab:13:74:fd:b8:65:47:94:df:eb:46:4c:27:
31:a7:f4:76:29:fe:d0:07:a1:f9:56:e6:84:54:bf:a0:0f:06:
42:92:d9:26:3e:08:b2:80:b9:24:75:06:6e:c5:54:df:7e:de:
4f:9a:d5:9a:c6:1c:ff:f4:54:48:41:13:89:60:d5:f7:8f:0a:
ec:1c:44:0f:4f:71:d8:c3:69:00:35:ca:05:a3:33:ef:b9:ed:
fc:5f:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:05 2026 by rpki-client