Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D01131BE757011F1800CB4BFCE1D38B0.roa
File: D01131BE757011F1800CB4BFCE1D38B0.roa (raw, json)
Hash identifier: 609w+PYPbOcAEhRMj3hAfk7U0pXmSWnYGwzbYgb5pXU=
Subject key identifier: BD:8F:28:7F:C9:B8:E7:8E:F4:46:C8:D1:43:E6:4A:28:AE:6B:5C:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C226
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D01131BE757011F1800CB4BFCE1D38B0.roa
Signing time: Wed 01 Jul 2026 17:18:02 +0000
ROA not before: Wed 01 Jul 2026 17:17:57 +0000
ROA not after: Fri 04 Sep 2026 17:17:57 +0000
asID: 21859
IP address blocks: 156.252.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115238 (0x1c226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 17:17:57 2026 GMT
Not After : Sep 4 17:17:57 2026 GMT
Subject: CN=6a454bc9-9f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:91:09:b7:f0:6e:cb:af:5e:c9:bd:d2:d7:a8:
b2:1c:07:ee:b1:a8:b1:19:fb:af:af:b8:20:54:0e:
0a:61:75:0c:4b:6e:3d:59:93:66:11:4e:20:1b:f8:
67:18:6b:7c:04:bb:3f:14:a9:aa:7d:05:26:89:0f:
11:88:d9:fb:f9:13:0c:e0:c5:99:6b:62:77:ff:8a:
84:44:ac:bd:4d:a0:98:21:13:75:ae:e9:a9:05:06:
68:dd:4e:59:eb:a6:de:3e:51:6c:2d:3c:2b:61:e4:
01:f5:d5:6e:45:8d:23:d2:ea:38:3b:df:90:b9:6e:
21:00:58:a2:e8:12:fd:fe:bd:a4:f4:0b:f7:bc:3e:
02:3b:4d:08:08:cd:c4:97:a1:4c:53:5a:29:df:62:
51:28:af:72:a6:23:19:41:74:cb:8b:35:f7:1b:4f:
b4:c2:fa:83:69:85:de:f1:2a:98:06:2f:cc:52:95:
cf:02:4a:16:60:51:f8:32:3b:96:72:bc:35:1d:de:
11:af:94:e9:e6:76:3c:1b:ed:29:c4:09:35:cf:c2:
29:3b:55:00:ba:a5:97:c5:74:9b:61:13:34:75:d2:
4d:5f:82:b3:7e:61:d1:10:64:1c:54:56:26:3d:2c:
e2:09:99:ee:bf:f0:37:a7:6e:b9:56:26:54:d1:79:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:28:7F:C9:B8:E7:8E:F4:46:C8:D1:43:E6:4A:28:AE:6B:5C:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D01131BE757011F1800CB4BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:14:67:62:3d:3a:e8:6f:1d:06:30:2a:2e:ee:10:a7:8b:d3:
6c:17:ba:f8:d9:3c:56:f5:2b:ea:49:cc:73:f2:a9:4d:a1:cb:
c1:45:13:ee:ee:09:b9:66:40:ad:0b:9c:99:b3:36:53:34:f9:
77:54:e1:1f:f8:6c:90:2a:77:1c:ef:e4:be:81:f1:17:a2:67:
42:d2:b2:bc:ea:29:04:57:af:2e:8f:06:58:99:4c:93:36:44:
36:da:5f:bf:ae:b1:f9:3a:2d:2b:1f:18:6a:2e:ba:34:23:e2:
1a:f1:7a:95:5a:35:db:4c:a4:0f:f1:07:d9:15:ba:20:11:40:
37:bb:c8:93:6c:d5:b4:83:a2:50:77:a2:71:38:f9:59:53:0a:
9c:d1:79:46:b6:f5:89:2f:d5:e8:1a:d9:c5:2d:b8:01:a3:fe:
53:37:af:13:12:78:f3:2d:25:59:dc:b8:e0:2e:1d:d7:ef:63:
69:16:20:88:5f:40:97:b1:fd:28:99:fc:17:fb:16:d2:f9:0a:
74:06:4f:81:67:a2:b3:e5:58:87:57:8c:14:22:34:e9:89:8c:
0a:fd:48:e6:e1:92:7f:fa:65:76:17:34:01:b4:8d:d3:14:c9:
4f:bc:b6:f6:b2:28:50:45:db:a1:c5:28:42:14:2f:01:c1:9b:
a7:b4:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:36 2026 by rpki-client