Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1B5FA6C695111F181B9E1D4CE1D38B0.roa
File: C1B5FA6C695111F181B9E1D4CE1D38B0.roa (raw, json)
Hash identifier: CaOzwiZamgdyLeUdEpeVbu1GOIS8jqYlgK2k58g1SA4=
Subject key identifier: 21:65:ED:40:EF:8A:74:57:C6:2A:A0:48:E9:73:41:70:7A:95:C4:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1B5FA6C695111F181B9E1D4CE1D38B0.roa
Signing time: Tue 16 Jun 2026 07:05:29 +0000
ROA not before: Tue 16 Jun 2026 07:05:24 +0000
ROA not after: Tue 21 Jul 2026 07:05:24 +0000
asID: 395793
IP address blocks: 156.255.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114138 (0x1bdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 07:05:24 2026 GMT
Not After : Jul 21 07:05:24 2026 GMT
Subject: CN=6a30f5b9-bd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:bc:93:69:da:45:42:d0:6e:d5:1a:ce:d5:
74:49:17:87:c6:4d:ea:59:d7:e7:18:db:a8:8d:9b:
08:24:97:51:2d:90:8f:a6:93:b6:42:cb:86:5b:59:
36:49:4a:30:4d:22:df:3a:5f:7a:fb:f1:7b:43:ac:
e0:ed:ca:ed:76:f0:20:85:58:89:07:59:0c:6a:8c:
96:8b:1c:f7:b5:bb:50:07:1c:28:28:47:b1:98:a2:
87:f9:de:d1:a7:1e:a1:19:c2:59:40:15:85:e8:6f:
af:a2:1d:b9:74:da:08:f3:04:03:cf:f9:e2:6c:43:
7d:ee:6b:c7:c6:1b:45:70:ef:5c:31:d3:bc:52:9d:
eb:89:7d:15:50:d0:9c:c1:ea:f9:2f:25:d6:4a:94:
c1:cf:3c:23:05:e0:e5:15:2a:d5:e2:1d:f9:05:77:
d4:1c:c4:ff:21:bc:e9:e4:5b:c3:e2:bf:12:cb:86:
70:57:a3:6b:ac:7a:cb:58:ab:bf:02:95:20:16:93:
22:ef:03:8f:2d:5c:3b:3b:5c:be:a5:ce:c6:e1:e2:
72:21:00:83:71:0f:ee:e8:76:a2:24:1c:ab:37:97:
66:aa:ca:df:a9:0a:8a:f1:4d:96:9d:bb:0d:d8:97:
14:88:7e:3d:4e:76:21:10:45:76:b9:3a:0e:28:b6:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:ED:40:EF:8A:74:57:C6:2A:A0:48:E9:73:41:70:7A:95:C4:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1B5FA6C695111F181B9E1D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.85.0/24
Signature Algorithm: sha256WithRSAEncryption
12:71:dc:79:42:02:3d:49:71:14:59:05:27:79:39:0b:8f:0e:
4b:dc:6e:7f:ad:6b:8f:c7:e0:0b:36:e5:af:ce:dd:ed:cb:8c:
8d:51:ae:e0:77:71:00:f8:fe:85:f7:62:49:fb:65:39:d8:7a:
a4:f4:56:2c:f8:fa:24:56:9e:84:ca:35:4a:0a:70:06:4c:bf:
6c:12:73:5f:e1:cb:2c:6c:58:58:5a:11:09:53:0c:76:74:8d:
f7:00:47:a8:b8:ae:70:d1:9b:f2:a6:f0:1f:54:44:0f:2d:ab:
f0:3b:0c:3c:00:ad:c6:84:bb:48:39:b2:7d:b4:a0:5f:b5:29:
30:70:e2:84:bf:05:e5:f6:34:62:04:06:6c:2d:62:23:b3:68:
a2:db:5b:fc:4b:27:af:4b:cf:50:cb:16:e9:90:a4:52:45:81:
86:74:c7:d7:a7:ea:ed:03:f3:a6:21:97:4f:f5:c9:44:cb:88:
20:44:9d:c2:7a:74:96:e3:6a:40:a6:64:23:96:81:07:20:58:
2d:e0:fc:19:f2:ee:16:5b:48:85:79:98:31:05:72:53:a7:fa:
23:86:72:6e:c9:bc:4f:a6:e3:ed:db:55:8d:94:f9:e8:26:eb:
0c:8f:23:f3:6f:72:d7:79:b0:0c:3c:e2:a7:48:16:44:dc:85:
c0:5d:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:09 2026 by rpki-client