Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1A09A92740311F1A7CE4A0FCF1D38B0.roa
File: D1A09A92740311F1A7CE4A0FCF1D38B0.roa (raw, json)
Hash identifier: nIn/U4RkzwzbtebhZzSaQZk24xua6EVlK+1QeXJ4dK0=
Subject key identifier: 2F:DA:00:6E:75:B9:DA:7C:F6:04:5C:3E:92:43:2D:B1:B4:99:F4:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1A09A92740311F1A7CE4A0FCF1D38B0.roa
Signing time: Mon 29 Jun 2026 21:45:18 +0000
ROA not before: Mon 29 Jun 2026 21:45:13 +0000
ROA not after: Wed 05 Aug 2026 21:45:13 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115156 (0x1c1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 21:45:13 2026 GMT
Not After : Aug 5 21:45:13 2026 GMT
Subject: CN=6a42e76e-0883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:36:2d:f1:d7:48:12:dd:2c:22:e0:df:a6:
db:45:2d:26:10:a0:1d:64:29:28:1f:b2:77:35:2b:
5c:f9:b4:9d:92:43:72:0b:6a:cd:1d:22:6a:ba:61:
9c:3a:8e:ed:8c:0f:7b:f7:0c:ce:43:52:4e:28:94:
31:72:58:62:fe:f6:1a:17:41:f2:75:76:50:0b:cf:
44:c3:dd:ba:ce:8c:3f:89:ad:96:b2:1d:6d:66:8f:
2b:dd:48:a3:23:ac:37:db:a3:d4:ff:f9:09:9f:46:
c0:14:b7:47:79:8e:1e:13:25:1f:41:97:28:bb:14:
1a:f6:8e:10:fc:e7:e9:dc:ee:d4:3b:14:a8:7a:c8:
4d:5a:ca:1c:57:47:a6:65:79:60:fe:96:ee:b9:ad:
a6:0c:d2:e3:36:f5:e9:75:29:4d:9b:19:48:68:c2:
7f:aa:44:75:b4:b1:0e:a8:50:f1:0a:c4:b8:2f:4e:
10:e1:ae:3f:35:d3:78:3c:fb:6d:22:ec:9e:e8:73:
55:83:57:8c:a9:62:60:b0:cc:3c:07:95:7b:16:4d:
dd:f1:49:d0:73:66:97:67:dd:96:40:8b:02:b2:60:
eb:ad:e8:bd:0b:80:78:9e:a5:85:c7:85:0f:02:0e:
25:bf:1c:9f:c3:b9:86:9a:3a:96:7f:f4:13:75:f6:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:00:6E:75:B9:DA:7C:F6:04:5C:3E:92:43:2D:B1:B4:99:F4:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1A09A92740311F1A7CE4A0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
73:03:aa:08:8d:a4:38:91:06:e5:f1:ca:95:5d:48:5b:84:9f:
55:00:7d:3b:d8:d6:df:48:33:8e:5b:7c:d6:20:8d:63:58:1d:
c5:53:bd:95:e2:e8:04:6b:08:77:cf:81:b2:e2:a5:5c:ae:83:
c1:1c:92:f8:a0:48:23:7c:5c:9e:e5:d6:8d:7c:bf:87:3d:a9:
ab:9b:da:7b:3e:f8:c9:11:71:65:37:9f:7e:ab:1f:85:89:fe:
47:72:fc:e6:bf:0a:48:ef:d6:2d:d2:df:6c:e9:42:88:fb:67:
55:68:78:3b:8e:3e:79:af:e2:f6:a8:dd:39:2f:66:98:bc:54:
72:9a:3a:eb:7c:1f:e4:19:26:51:1d:9a:0e:4b:6a:8b:67:41:
29:f5:45:13:de:a8:b8:89:ff:13:5d:9d:24:85:75:b4:c3:56:
ed:3f:17:e9:41:28:b2:77:6b:af:9a:ea:12:13:06:20:d4:ca:
1c:b4:37:6a:ec:2c:28:17:b8:a0:9e:3e:0b:d1:98:6b:1b:a5:
b1:fd:ca:63:35:90:aa:4e:dd:0c:16:51:f6:13:1f:c2:af:de:
7a:ad:69:a8:6f:b5:86:de:6a:e4:e4:25:e9:3e:f2:f3:d3:40:
d3:2f:34:a6:f0:0e:e8:2e:30:25:60:ae:2f:86:9c:63:d1:8f:
fa:43:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:57 2026 by rpki-client