Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC2B8716690611F1948A7CF7CE1D38B0.roa
File: AC2B8716690611F1948A7CF7CE1D38B0.roa (raw, json)
Hash identifier: c+iGTjRZA8vxreZjsP34zS6JdyWWRRKf3gJ+vBHZTAs=
Subject key identifier: 8E:7B:75:EC:86:6C:37:73:5D:E7:A7:D1:57:7F:CD:A2:0C:57:A3:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BD9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC2B8716690611F1948A7CF7CE1D38B0.roa
Signing time: Mon 15 Jun 2026 22:08:01 +0000
ROA not before: Mon 15 Jun 2026 22:07:54 +0000
ROA not after: Sat 22 May 2027 22:07:54 +0000
asID: 154701
IP address blocks: 156.242.82.0/24 maxlen: 24
156.255.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114074 (0x1bd9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 22:07:54 2026 GMT
Not After : May 22 22:07:54 2027 GMT
Subject: CN=6a3077c1-0a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:b4:d3:3d:8c:4b:20:73:ec:b0:76:3c:2d:
63:0c:14:89:30:56:0b:57:60:85:9b:a0:5c:fd:34:
af:f1:7c:f2:ca:ee:33:06:dd:fb:a5:da:42:aa:9e:
44:6d:a5:96:33:36:88:82:20:7e:65:c4:b1:25:c8:
37:8e:7d:63:4f:bc:14:cf:97:47:de:8b:25:9a:6d:
f8:3a:08:76:93:a9:40:92:33:21:17:7c:c5:b7:ed:
86:5c:b4:cc:dc:d4:6b:9f:e0:ea:2e:e6:5a:e7:42:
8d:4d:bb:eb:f6:3e:30:53:9e:30:ec:f7:65:d3:fb:
9e:2a:c2:c6:90:9b:77:0c:b7:af:75:4b:60:1f:8b:
b4:d8:5b:ee:e4:75:f1:36:66:80:42:f5:63:5e:d5:
8d:5f:e6:21:b6:7b:e5:80:13:16:23:46:08:cc:55:
30:3a:cd:d5:68:6e:c6:f0:c1:9c:62:3a:12:68:d3:
c9:08:d9:d4:d9:d3:34:e9:bc:12:e6:fd:a5:51:68:
29:23:35:26:09:b6:d3:01:ff:3c:d4:b8:a8:8d:16:
9f:12:b9:0c:f0:42:c8:5c:f3:73:c2:d4:c2:38:26:
50:18:77:e4:46:2c:28:05:26:2a:57:a0:ab:1d:c5:
83:50:c2:e9:b2:10:a0:93:f8:05:d1:0f:46:6f:e9:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:75:EC:86:6C:37:73:5D:E7:A7:D1:57:7F:CD:A2:0C:57:A3:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC2B8716690611F1948A7CF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.82.0/24
156.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c2:ae:35:1d:a1:1f:a2:04:65:09:e2:70:8b:9f:2a:61:4c:
3c:4b:1a:ed:1a:95:0f:59:42:24:8f:4d:22:c6:91:d0:74:11:
7e:79:70:b4:43:10:08:3c:c2:0c:4f:3b:67:0e:ec:88:ee:b0:
82:9f:dc:a8:45:66:0f:96:25:2a:33:82:13:84:62:0c:e6:a6:
03:27:2b:59:5b:e3:cb:61:f1:08:ac:58:b2:ca:69:4d:76:a9:
3b:82:32:fb:ea:29:a2:c2:c8:ea:d4:34:3d:eb:e4:e1:bd:d6:
b4:93:38:d5:75:8b:80:73:cc:7a:6b:26:06:39:b0:53:0c:34:
1c:ae:a1:91:17:97:44:31:c7:ed:68:bf:47:f9:cf:6f:fa:36:
ec:f3:01:ba:1b:90:3e:00:27:d3:4e:d5:cb:69:18:3e:22:52:
be:89:99:41:9e:06:11:99:a8:46:ba:e9:f7:74:d5:af:72:87:
5b:6a:9d:f9:92:3e:95:cb:96:a1:02:74:4d:5a:b1:ad:91:ba:
a5:ef:aa:2c:bc:87:61:35:cb:a6:4a:f3:69:cd:b3:ab:d6:40:
ea:65:8b:8e:ae:ed:1a:99:1c:b8:21:98:c1:75:f4:2f:3f:d1:
d0:3e:e3:96:e7:dd:e8:fa:1d:92:66:74:97:f3:43:e0:d0:c7:
ce:74:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:18 2026 by rpki-client