Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A9728A6EF811F1BA0CE6F1CE1D38B0.roa
File: 95A9728A6EF811F1BA0CE6F1CE1D38B0.roa (raw, json)
Hash identifier: 5Av4yMTsQPTzW45ESELizIhFoZJPEneGhAxgj3CHEjw=
Subject key identifier: 04:17:18:46:34:52:DD:3C:07:DD:89:D3:E7:1A:6F:50:65:96:94:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A9728A6EF811F1BA0CE6F1CE1D38B0.roa
Signing time: Tue 23 Jun 2026 11:42:17 +0000
ROA not before: Tue 23 Jun 2026 11:42:12 +0000
ROA not after: Sun 09 Aug 2026 11:42:12 +0000
asID: 32043
IP address blocks: 156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
156.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114667 (0x1bfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 11:42:12 2026 GMT
Not After : Aug 9 11:42:12 2026 GMT
Subject: CN=6a3a7119-0665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:ed:7a:83:ff:77:2e:11:dd:bf:72:62:56:
e0:10:65:c0:74:e4:97:42:f4:18:8f:62:68:56:ca:
c3:60:fa:6c:15:71:03:8e:26:a8:cb:31:f5:35:c7:
9d:77:9d:0d:b7:2e:b3:08:aa:d9:1f:cc:e9:85:f5:
bc:e2:07:c5:bd:6a:dc:55:3f:85:f7:0d:a4:0d:f1:
f0:f7:3e:1c:41:01:60:db:4a:06:20:d7:56:54:83:
9b:41:d0:83:30:df:30:03:06:25:94:00:28:77:52:
a6:36:d8:eb:a8:35:08:74:a6:f4:9d:ab:f1:60:15:
83:26:a3:55:d4:43:51:aa:a1:4d:8f:85:4d:39:9a:
3b:cf:97:8f:5e:fa:df:a6:32:b8:31:ca:8e:ea:97:
cf:a0:33:8e:9a:9b:5a:ff:5c:c6:cd:c6:43:75:29:
60:2b:1f:f5:69:89:f2:70:cf:9d:80:6c:e4:fa:26:
e4:69:83:b1:f3:46:e2:41:d6:b9:2e:ef:8e:ea:ea:
d9:05:50:c6:6b:1e:a0:7d:2b:1f:c1:e6:b3:6e:9e:
ca:3c:bd:80:0e:80:08:54:80:ae:cd:51:b1:89:93:
5f:8b:b1:f9:ff:5f:b9:80:4e:f1:4b:ec:73:67:96:
b5:13:07:6b:aa:46:fb:6e:9b:fb:9b:2b:0e:0e:aa:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:18:46:34:52:DD:3C:07:DD:89:D3:E7:1A:6F:50:65:96:94:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A9728A6EF811F1BA0CE6F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.48.0/21
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a7:fd:08:d8:d3:aa:a6:5e:b2:2e:e4:15:19:23:d1:00:cd:
f3:c5:c2:55:47:ba:dc:2e:5d:6f:83:4f:73:b7:a3:58:da:0d:
6e:bd:69:1d:b3:78:e0:a6:f5:51:d6:07:96:df:f0:a2:b1:04:
e1:ac:12:0d:10:6e:51:0d:1d:2f:8e:81:95:51:8c:f2:a7:d6:
78:c1:e9:16:98:6e:6e:fe:c1:54:7d:a2:3f:3d:02:77:21:6b:
0f:07:c2:1a:93:4d:0a:c3:f0:a6:0e:9e:95:b2:a9:65:0b:5b:
4c:7b:24:85:e6:c6:59:39:23:7b:9e:90:de:02:47:23:3a:61:
56:9d:98:12:09:44:b4:f0:d3:3a:01:5c:50:68:36:df:c2:64:
fb:a8:b3:4b:26:c0:08:cb:d9:1b:7c:e6:2b:3c:8c:14:f2:3d:
86:8d:c3:20:f3:be:08:71:8f:de:f8:f8:ca:41:04:7e:e6:14:
42:40:22:18:cd:cf:87:1f:3a:2a:23:95:a0:84:a4:8a:f3:d6:
53:6d:71:5c:b8:14:e4:32:51:f2:91:f9:c8:11:b7:69:b0:f4:
d5:c8:5f:6c:23:d1:8e:97:61:79:6c:0b:d3:ba:eb:e8:9b:7a:
f2:48:2e:2f:80:d9:81:39:fd:66:c5:7b:fc:fe:c6:d4:64:28:
6b:60:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:18 2026 by rpki-client