Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97DBE8B076F211F1AB3ABBECCE1D38B0.roa
File: 97DBE8B076F211F1AB3ABBECCE1D38B0.roa (raw, json)
Hash identifier: r2FpuyvJJAim+Duw9tAsjHbk+W1GR5BjEcfWeQIQnk8=
Subject key identifier: ED:F5:82:D3:C9:F9:1F:FC:36:45:46:89:FB:8D:19:59:73:27:5E:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97DBE8B076F211F1AB3ABBECCE1D38B0.roa
Signing time: Fri 03 Jul 2026 15:19:33 +0000
ROA not before: Fri 03 Jul 2026 15:19:28 +0000
ROA not after: Mon 10 Aug 2026 15:19:28 +0000
asID: 138915
IP address blocks: 156.244.19.0/24 maxlen: 24
156.244.20.0/24 maxlen: 24
156.244.21.0/24 maxlen: 24
156.244.22.0/24 maxlen: 24
156.244.25.0/24 maxlen: 24
156.244.26.0/24 maxlen: 24
156.244.27.0/24 maxlen: 24
156.244.28.0/24 maxlen: 24
156.244.29.0/24 maxlen: 24
156.244.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115366 (0x1c2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 15:19:28 2026 GMT
Not After : Aug 10 15:19:28 2026 GMT
Subject: CN=6a47d305-3cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:2c:8b:ea:f5:ac:9c:73:f6:9f:8c:a8:1e:
e7:32:20:55:c2:78:36:b2:dd:8b:8e:6d:1a:81:7e:
e6:77:26:d6:cc:8d:4d:81:dd:f0:40:10:ed:e8:b5:
f5:5f:0d:0d:4b:3b:39:d6:d1:be:4d:98:4d:5f:7c:
5f:0c:24:d7:c0:c5:76:06:91:28:aa:41:2a:89:23:
b5:0a:46:64:27:10:d5:3c:f3:3d:6a:7e:27:54:dc:
da:c5:2e:01:1d:55:68:1d:a2:48:21:a2:c0:00:93:
68:76:eb:97:a1:c1:da:b6:93:70:82:e4:2e:af:20:
3a:2c:49:1f:68:52:31:83:49:25:56:36:1d:92:26:
81:d7:22:c0:a2:8a:59:29:26:bc:e9:d6:2b:09:76:
de:1b:25:36:3a:41:be:ac:4e:da:c2:4e:02:45:cc:
0d:03:4d:04:4b:d9:ad:b2:04:b2:90:ae:70:69:83:
e8:60:f7:6f:5c:4f:f0:88:ae:26:ed:39:56:cb:8d:
4a:25:bf:de:eb:fc:e5:81:4b:8f:e6:6a:a4:d7:01:
02:a3:45:f2:10:7b:d8:5b:7c:e3:71:bc:14:81:f7:
98:9e:ab:56:2e:34:63:14:3d:3e:94:58:3c:85:37:
05:1b:f1:6e:16:f4:ce:4e:79:6d:c2:b5:a3:be:d8:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:82:D3:C9:F9:1F:FC:36:45:46:89:FB:8D:19:59:73:27:5E:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97DBE8B076F211F1AB3ABBECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.19.0-156.244.22.255
156.244.25.0-156.244.29.255
156.244.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:1f:29:5c:c8:90:19:0d:97:0c:ea:a0:10:91:d5:ec:63:
5a:99:9f:0c:6a:b2:0a:48:a5:07:be:df:d1:98:3c:d4:58:c6:
b4:ae:4c:3c:36:dd:19:54:25:95:7e:f8:67:39:70:e0:75:8b:
e3:7e:e9:2a:8b:63:3d:56:e6:99:b6:b9:ef:45:cd:f6:69:8e:
14:99:27:ce:9d:9e:ff:ca:20:a1:3d:2d:14:53:55:a2:15:d2:
5e:05:b5:37:03:4d:9c:c2:ef:c5:5c:42:58:5f:d5:d9:e5:ec:
24:26:6d:0c:36:21:d4:c3:3b:6b:1a:cb:86:7a:96:5b:70:c8:
d0:f9:0f:e3:93:68:b1:dc:eb:2d:28:02:0e:45:42:78:0e:d6:
a8:3a:7a:8f:e4:6c:4a:ea:f9:04:16:94:13:58:67:52:a4:81:
47:19:a9:b6:f8:45:94:60:3a:87:35:3d:55:8c:46:62:19:41:
36:c4:3c:5a:d7:4f:0c:b1:dc:19:27:22:15:89:cc:9a:bc:bf:
e7:48:10:1c:df:be:4e:72:12:fd:f8:9d:00:0d:7c:e3:47:90:
1e:03:8a:e4:f1:ad:13:38:50:cf:ef:5c:31:9d:12:c7:18:dc:
5d:98:3a:7a:12:d4:dc:7b:fd:82:9a:09:bb:82:d3:09:3f:4d:
4a:c9:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:47 2026 by rpki-client