Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A401B33A700E11F197D180FECE1D38B0.roa
File: A401B33A700E11F197D180FECE1D38B0.roa (raw, json)
Hash identifier: AR4P9d6vokGRh45ycV0Jevw4hn1EEKzvbCmJ39M5aLM=
Subject key identifier: 69:ED:3D:49:74:74:59:20:FD:DB:FE:8F:8C:46:D7:D2:18:DA:EE:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C05B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A401B33A700E11F197D180FECE1D38B0.roa
Signing time: Wed 24 Jun 2026 20:52:41 +0000
ROA not before: Wed 24 Jun 2026 20:52:37 +0000
ROA not after: Tue 04 Aug 2026 20:52:37 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114779 (0x1c05b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 20:52:37 2026 GMT
Not After : Aug 4 20:52:37 2026 GMT
Subject: CN=6a3c4399-82b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:9d:c4:1c:1e:e7:8b:4c:0c:73:29:d6:01:
f5:85:5a:0e:01:6c:b0:12:ba:53:91:35:fd:1e:80:
6d:1b:4d:1d:32:7a:e4:45:e6:79:0a:ed:14:ed:d6:
40:e2:e1:f6:5a:b7:b6:8f:2c:46:54:78:1b:6c:2c:
4f:43:f2:a0:a4:b1:f3:96:e7:d5:80:d0:db:c3:ce:
2a:12:42:15:dd:a2:47:12:f1:f9:13:29:6e:e0:9c:
02:28:42:32:2b:28:00:5b:51:9f:90:5a:c1:36:6b:
35:4e:14:d2:1f:83:75:74:3b:5e:09:76:00:af:bc:
f9:69:13:5e:2a:da:53:f1:0a:8a:af:83:f3:c2:60:
b7:d5:88:9c:01:e0:f5:e6:3d:ca:f3:6a:78:29:24:
50:1c:fe:82:ba:81:0c:8a:0e:cf:56:b0:b7:ac:1a:
ed:21:c1:0f:4d:47:5f:9a:f9:37:7b:8c:d8:a2:a9:
ee:79:a0:23:ed:df:3b:15:b8:9a:31:44:c3:94:a8:
e3:cb:d7:c0:c0:92:01:ee:ea:3f:0f:ee:65:e0:95:
0f:ce:be:3e:55:16:7e:fb:d8:23:7e:c0:dd:b0:97:
9a:0b:40:c9:01:90:f6:89:63:1f:53:04:ef:66:f6:
8e:83:49:66:3f:0d:5c:06:35:40:dc:07:26:ad:3b:
db:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:3D:49:74:74:59:20:FD:DB:FE:8F:8C:46:D7:D2:18:DA:EE:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A401B33A700E11F197D180FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1e:df:4d:06:07:ed:34:c2:64:22:7c:7c:17:56:4e:ef:5a:
31:06:9e:df:c6:6d:65:d6:b9:a0:55:7f:1c:10:bd:e2:59:39:
b4:5f:40:1b:bd:90:c4:4d:51:6a:14:0b:9a:6f:b6:db:4a:4d:
32:36:8c:4b:c8:0a:b2:ac:22:33:56:ff:13:92:9f:4b:68:51:
9b:3a:df:99:ca:d2:26:f5:99:09:d3:6c:a3:44:74:b8:3d:39:
c4:fb:bd:e0:db:73:19:12:fe:af:0d:1b:8b:9e:41:fa:ee:b8:
1e:73:b2:7f:8f:bc:1f:5a:f5:1e:04:6e:d2:b5:31:c7:46:59:
7e:bf:26:55:b5:29:9e:fe:34:5f:fb:e5:b0:d6:05:73:3e:27:
e8:6c:34:81:02:7c:f7:4f:bb:c6:57:9c:62:a0:5d:f7:d6:f7:
68:d5:f2:4b:af:bb:dd:0d:af:c6:aa:3e:cc:5c:1e:08:50:ba:
82:22:ad:f1:1f:ff:41:87:de:82:dd:a7:b2:38:e0:4e:a1:25:
7e:22:c6:57:47:fd:db:e4:4e:d9:12:10:ba:a8:bc:36:21:18:
68:0c:3f:ca:c2:f7:eb:9d:1b:fe:be:26:e5:28:72:70:3c:82:
43:95:26:58:91:93:96:ee:85:7f:b2:2f:cd:3e:ce:74:53:2c:
b4:f9:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:53 2026 by rpki-client