Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4B58FD0707A11F1AE4F921ECF1D38B0.roa
File: D4B58FD0707A11F1AE4F921ECF1D38B0.roa (raw, json)
Hash identifier: M+ANZ8HFBRjvz2dgmMb6lkLtKRNUmkwpcR/Ro66myDU=
Subject key identifier: B6:A4:6C:46:5B:91:CD:1D:85:4E:95:30:67:54:2E:A3:4C:9F:FA:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C078
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4B58FD0707A11F1AE4F921ECF1D38B0.roa
Signing time: Thu 25 Jun 2026 09:47:08 +0000
ROA not before: Thu 25 Jun 2026 09:47:04 +0000
ROA not after: Thu 30 Jul 2026 09:47:04 +0000
asID: 63023
IP address blocks: 156.229.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114808 (0x1c078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 09:47:04 2026 GMT
Not After : Jul 30 09:47:04 2026 GMT
Subject: CN=6a3cf91c-37a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:ed:a5:4c:cf:f6:6d:e9:c7:7f:45:ad:3e:
04:02:82:6a:34:9b:cf:2d:52:ee:0d:ca:bc:b6:e0:
10:3d:07:b7:fc:c2:fb:77:27:ce:6b:1d:f9:c4:51:
7a:51:4b:7f:e2:95:c1:bb:fd:75:30:1d:eb:d6:9b:
70:33:d8:4c:31:b7:0c:ef:ef:46:1f:b1:08:bc:5d:
42:b3:47:e8:a9:d0:65:00:d9:ce:d0:93:9e:d7:da:
b3:f3:c9:91:90:fd:38:61:46:5a:e5:7d:e9:54:72:
f9:e0:57:ab:26:67:bd:b0:8a:80:05:8f:84:f5:50:
d5:4a:2b:17:35:cc:7b:6e:13:c7:f6:3e:e8:6c:d2:
c9:30:b9:75:c7:4b:0c:73:9e:70:b1:83:36:2b:93:
d9:19:29:45:27:bc:18:aa:25:3a:19:b5:da:2a:2d:
fb:5c:fb:6a:01:cd:85:cf:f7:b0:6d:01:68:ed:88:
b5:97:cf:73:26:11:87:eb:3f:41:31:a7:b1:9f:32:
44:29:c9:8a:cf:b5:ea:2e:44:da:ed:e3:6f:19:e4:
39:76:e2:2e:a0:51:11:41:47:dd:c2:55:35:cf:6d:
f6:68:36:a2:75:53:7d:38:8e:bf:16:19:b1:92:52:
dc:4e:cd:47:20:cf:34:40:b3:4d:10:ed:41:26:0e:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:6C:46:5B:91:CD:1D:85:4E:95:30:67:54:2E:A3:4C:9F:FA:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4B58FD0707A11F1AE4F921ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:dd:bb:2a:03:4b:02:ff:16:91:db:30:6f:c9:05:fd:f0:25:
24:09:af:3c:df:dc:61:0f:b9:d8:ab:f5:d8:ae:15:36:e6:ca:
cd:7b:f6:a2:d6:b6:4a:e3:fd:5a:25:f0:a2:c5:b7:78:eb:4d:
42:e6:90:29:20:0b:87:f1:db:50:e3:75:50:e9:27:25:94:4c:
8f:e8:c8:2e:47:be:d2:c0:18:fb:8d:ae:be:bf:c5:0a:70:67:
ef:e6:df:ea:89:18:8b:f8:f7:c1:fa:54:38:bd:24:23:07:72:
a2:b1:00:c7:c1:d2:4a:69:6d:9d:f4:e2:8c:ce:38:29:98:3e:
ff:44:b2:2c:4a:c6:dc:02:df:51:e3:8e:4f:ad:93:41:fb:85:
98:bf:18:08:94:d3:c8:c0:e7:cc:09:90:92:1a:f8:86:bc:85:
91:b4:9e:7d:50:0d:66:ef:d9:21:eb:ad:fb:2e:3a:ad:4d:79:
e6:11:0f:d7:e6:e4:27:e7:db:72:f0:5e:1b:ea:5d:45:69:ad:
7d:4f:02:34:7e:9b:04:a9:70:b6:b4:21:3a:f1:98:8e:27:45:
20:1f:f1:53:f2:68:ca:8d:a8:ec:da:6c:41:76:21:64:89:4f:
d1:b1:49:04:fc:24:ab:b5:ac:67:9d:26:a8:1b:c9:a4:b1:1b:
28:ee:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:43 2026 by rpki-client