Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9547D07E81C811F1B5F747DCCE1D38B0.roa
File: 9547D07E81C811F1B5F747DCCE1D38B0.roa (raw, json)
Hash identifier: VTxpr8M7xSG2LqPSZjU6QlzmaDe6FP9APK24WyDaaE0=
Subject key identifier: 6F:D8:9C:15:E1:16:F6:D9:FC:2E:5D:E3:43:69:03:36:89:46:E2:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9547D07E81C811F1B5F747DCCE1D38B0.roa
Signing time: Fri 17 Jul 2026 10:16:33 +0000
ROA not before: Fri 17 Jul 2026 10:16:28 +0000
ROA not after: Mon 24 Aug 2026 10:16:28 +0000
asID: 395886
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116190 (0x1c5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 10:16:28 2026 GMT
Not After : Aug 24 10:16:28 2026 GMT
Subject: CN=6a5a0100-a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:48:94:44:58:60:4b:6f:ae:14:56:4e:50:
7e:58:fe:a0:c0:1e:f6:52:3b:b1:6a:2a:31:a9:2e:
95:a0:fa:3b:5e:18:00:60:11:0f:e9:24:75:6b:8b:
cd:16:db:58:ec:dd:bc:4f:e4:19:32:a2:ea:7c:c7:
14:34:14:09:50:eb:6e:89:ab:46:49:6d:38:ff:fa:
36:da:ce:80:d5:c6:f4:87:9d:d2:4f:38:94:80:36:
21:9a:db:27:64:27:f3:a9:c9:7d:cf:6a:75:47:ec:
61:96:9b:c0:1b:50:f1:c7:3f:ef:6b:8d:50:c6:7d:
68:c8:ad:b4:c8:41:b6:cb:df:cd:3f:70:17:3f:39:
f6:60:44:69:13:35:7a:49:bb:98:24:54:2c:7b:82:
95:ec:9f:62:16:06:8c:38:4e:99:55:8b:41:1f:78:
6e:20:b6:b4:aa:65:78:30:4d:bd:4e:4a:0a:33:84:
c1:a8:8a:ad:b2:d4:fb:5c:70:02:3b:a6:f0:23:55:
3e:52:3d:94:14:56:02:d2:c2:82:65:7b:9e:d7:39:
75:5e:f4:70:1f:4e:b0:0b:25:26:41:0b:97:5d:6a:
70:9b:c2:3d:fb:e2:5d:d7:ea:42:6d:ed:59:51:72:
c5:ad:93:23:74:48:28:4d:6e:43:2b:d4:d9:75:5b:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:9C:15:E1:16:F6:D9:FC:2E:5D:E3:43:69:03:36:89:46:E2:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9547D07E81C811F1B5F747DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.51.255
Signature Algorithm: sha256WithRSAEncryption
3e:67:65:9a:a6:ef:bb:ff:6c:c4:bc:37:01:0d:74:90:f4:d0:
2b:43:bd:2e:d5:bc:f3:de:9b:44:32:f2:9d:7a:42:f1:79:72:
6c:35:8a:89:57:c9:57:cb:53:46:c5:3a:ec:ce:42:d1:c9:e2:
c8:e7:4f:1c:ed:d7:fc:e5:1c:ef:70:7d:88:8b:a4:68:1f:20:
f2:a5:22:9c:3a:11:ca:24:fc:6c:4f:67:1d:6e:4b:0d:88:3c:
ad:5a:ad:63:cc:a9:77:5b:8f:24:c6:20:fa:3f:7a:4f:f9:66:
92:ac:1b:f6:2e:13:5e:12:c5:e3:4d:92:6f:73:1f:e0:9b:46:
06:28:47:00:85:0d:56:4f:13:cf:94:e1:61:f0:4c:8f:32:b1:
4c:4e:78:04:fc:90:dd:d1:e2:54:9d:0f:31:d7:99:60:85:a6:
bb:16:af:1b:f5:29:36:3c:cf:57:3f:17:f9:e8:ac:9b:df:fa:
cb:b1:f0:4a:4a:7c:66:4a:5e:d8:8d:66:00:51:a7:89:0c:f9:
25:72:92:07:28:50:9e:2a:82:1f:c8:55:2f:52:36:27:b9:50:
7b:ea:c5:0e:07:37:08:a3:41:28:d1:a1:6f:b1:ed:0d:31:fe:
5b:71:4b:59:ba:de:73:19:9f:39:b8:99:58:e2:ce:3a:27:a1:
99:cf:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:06 2026 by rpki-client