Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BADCB4667C3D11F1AA1755D9CE1D38B0.roa
File: BADCB4667C3D11F1AA1755D9CE1D38B0.roa (raw, json)
Hash identifier: yuyi74SSDm3kAAS/6RhHRxPA+f8BHv2ZQBVxUqa0PMg=
Subject key identifier: BA:6F:DD:9C:76:FF:73:82:79:76:D1:13:9C:5C:6A:95:62:9A:6B:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C44A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BADCB4667C3D11F1AA1755D9CE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:00:00 +0000
ROA not before: Fri 10 Jul 2026 08:59:55 +0000
ROA not after: Mon 17 Aug 2026 08:59:55 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
156.239.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115786 (0x1c44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:59:55 2026 GMT
Not After : Aug 17 08:59:55 2026 GMT
Subject: CN=6a50b490-db5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:c1:87:8b:fb:8b:3d:d3:28:ec:8d:41:9d:
76:69:5b:20:81:f1:7e:1d:97:94:9f:c6:54:aa:f1:
58:73:9e:f4:66:70:36:f2:14:74:0b:4c:ff:18:df:
8e:04:fe:58:97:76:b9:9a:df:75:00:43:fc:7d:86:
39:c6:51:9c:87:44:26:c5:54:0d:e4:25:82:fb:bc:
51:8c:b7:f3:bb:7b:73:5f:59:2e:d3:09:a4:5f:cb:
4c:0f:ac:ca:44:41:5f:d3:d4:a9:fc:dd:7f:8b:08:
92:98:36:a9:f6:29:d8:eb:69:4f:66:84:b7:44:96:
d3:70:04:97:f2:14:8c:ae:b1:ee:73:1a:42:e6:ff:
36:32:6a:30:96:1b:9e:5d:bc:a3:96:db:bb:15:28:
61:3a:70:a9:29:8d:38:5c:24:5c:b9:87:9b:1f:cb:
45:6e:1a:89:c4:55:91:2a:9d:eb:51:6b:c3:d7:3d:
22:6a:6f:dd:3d:36:12:f3:05:88:6b:f7:32:44:d8:
80:00:93:95:52:1b:db:c6:a2:58:3a:78:c7:6f:fb:
be:d6:0b:66:b2:cf:e0:e8:42:72:f5:71:aa:9e:88:
50:f9:ab:a9:39:ec:a8:d0:f9:92:2e:d5:b5:b3:70:
15:30:bf:8e:a9:07:9e:df:e6:9c:78:9a:59:cb:f8:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:DD:9C:76:FF:73:82:79:76:D1:13:9C:5C:6A:95:62:9A:6B:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BADCB4667C3D11F1AA1755D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
156.239.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:27:75:2b:ce:a0:cd:64:d0:4c:de:bb:02:f1:68:1f:d0:73:
c0:6f:6d:b5:25:dc:30:2f:2e:30:44:ff:86:40:fc:2f:a8:bd:
33:6a:01:12:4d:14:69:e6:1e:26:11:65:c1:0d:73:de:bd:6e:
9a:ab:57:b2:bc:71:a6:f9:c0:8d:75:7f:b8:57:4b:d8:0e:39:
ec:76:87:3d:4c:53:41:92:58:d6:b1:58:2b:13:17:b9:4e:fa:
c0:26:60:33:27:75:6e:88:ee:28:a4:34:96:b6:90:cb:ac:95:
e3:5b:17:8f:fb:88:fb:74:06:b0:30:c4:1b:c2:e9:59:6b:b5:
c5:08:5e:8f:7d:15:88:06:44:96:b0:19:d7:aa:14:8f:51:df:
a1:23:2a:6a:c5:1e:04:36:f0:b1:d2:97:ea:81:f6:75:d4:bf:
df:49:fb:f7:d8:b8:4e:40:ae:23:33:9f:aa:d7:3e:98:61:63:
10:69:5e:fc:ac:35:31:e2:31:0f:f8:bc:16:0d:9e:d7:0e:fd:
45:c7:8c:b7:0f:fd:d8:35:55:fe:f8:9c:66:40:5b:f4:38:bc:
49:3a:bf:cb:67:b5:a9:5d:9a:2d:f0:b9:82:25:52:9f:0c:d2:
43:5c:bb:f4:8a:e9:7f:31:62:1a:75:15:05:1b:29:a9:9e:0d:
0f:b9:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:31 2026 by rpki-client