Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/938DFA1C8BC611F1B8A1A0CACE1D38B0.roa
File: 938DFA1C8BC611F1B8A1A0CACE1D38B0.roa (raw, json)
Hash identifier: ry8YIpA5fl53STeWEamI4qP3+ZdUkxdtnsMT88GhNX0=
Subject key identifier: 96:F0:27:3C:A8:B7:1F:FF:33:63:D4:14:60:10:46:48:A2:6F:42:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C8A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/938DFA1C8BC611F1B8A1A0CACE1D38B0.roa
Signing time: Thu 30 Jul 2026 03:27:22 +0000
ROA not before: Thu 30 Jul 2026 03:27:18 +0000
ROA not after: Fri 28 Aug 2026 03:27:18 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116904 (0x1c8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 03:27:18 2026 GMT
Not After : Aug 28 03:27:18 2026 GMT
Subject: CN=6a6ac49a-2e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:7f:4a:7b:5f:98:75:86:f1:85:b7:4e:b1:
35:45:c1:21:55:d1:6c:55:1b:f0:cc:ac:0b:b2:57:
64:2c:14:ec:c4:d7:a2:cc:26:20:08:b6:2b:b0:7d:
36:f6:d8:d0:e4:24:87:51:6f:ba:9a:c6:57:87:94:
64:a5:86:49:54:2d:8a:5b:6e:7d:c8:8a:e4:47:26:
10:0c:3c:6f:d5:52:39:1c:41:26:e5:26:bf:f6:4e:
b6:21:d7:42:6c:42:84:cc:6f:15:87:31:e2:63:9b:
0d:5a:e1:41:ee:b6:4a:bb:d9:1c:76:ed:f4:94:49:
de:4c:45:c4:20:5c:3a:30:35:74:00:4f:cb:e7:df:
50:34:7f:92:f7:06:8d:67:d0:ee:32:f4:d5:2a:9c:
9c:9c:c8:af:09:d4:6d:a4:b2:71:df:fe:57:6b:1b:
51:72:57:4d:f3:5a:fb:de:41:0e:74:1d:a9:97:68:
d7:a8:ac:be:a4:bd:00:c2:bc:c7:e7:83:e6:6c:d1:
7b:77:e8:95:3f:e6:9d:80:3c:8f:bd:26:81:2f:a4:
20:79:55:2f:ed:3d:f0:13:56:43:72:02:2e:18:27:
4e:ea:57:01:43:43:bb:ac:88:ec:8a:de:d4:a3:9f:
fc:5b:df:f6:38:bc:70:61:bb:96:df:20:c3:75:41:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:27:3C:A8:B7:1F:FF:33:63:D4:14:60:10:46:48:A2:6F:42:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/938DFA1C8BC611F1B8A1A0CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3d:e0:e8:ff:34:95:4d:4a:54:2a:66:1c:46:a0:eb:ea:e0:
91:96:2b:7f:c4:a9:56:04:c8:b5:e1:c9:ad:4a:02:88:a8:ba:
ef:1f:7e:26:36:e9:04:81:0e:0c:db:7e:42:56:11:03:cb:8d:
6a:d0:41:2b:d9:f5:1a:21:e6:18:2c:b0:53:a8:53:a7:4e:fc:
39:91:f7:1a:a7:61:fc:d0:b4:01:5a:99:c4:e0:c9:f2:39:27:
78:dc:d2:2b:f3:22:d3:d0:59:fa:00:6b:bc:b2:e3:9b:bc:b4:
a0:bf:43:e5:df:44:ad:63:99:a4:8c:df:46:a5:59:cb:0c:a1:
4f:18:24:40:d9:3f:77:d8:5b:76:d9:6a:a8:3f:a6:b9:60:a4:
1c:d2:19:b5:3d:38:72:76:27:fa:1e:e1:cd:d5:42:4f:28:c1:
1b:a6:eb:1c:bd:bc:6c:cf:79:a0:e5:1b:6a:ef:3b:86:ff:6f:
05:1f:e7:26:2e:7f:ad:3e:9d:b6:b8:17:18:a6:c0:23:9d:16:
13:56:ed:ad:f3:b0:4c:32:ff:21:fd:89:4c:e5:33:57:ef:9a:
97:f9:cb:33:90:0a:b0:a2:7d:76:ec:d1:53:bb:67:db:8b:a2:
c5:81:89:4a:fb:08:70:a4:35:2f:a7:68:05:53:13:42:eb:ac:
75:c9:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:06:29 2026 by rpki-client