Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2C55E4810311F192477EABCE1D38B0.roa
File: EA2C55E4810311F192477EABCE1D38B0.roa (raw, json)
Hash identifier: 8YLYBHLkG8ep4qWt8DTMNmQtSjIlXxyEim1LDeWeWqs=
Subject key identifier: 21:CE:64:C1:96:07:26:3A:58:27:CC:47:8D:F8:74:88:90:A2:7B:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C56A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2C55E4810311F192477EABCE1D38B0.roa
Signing time: Thu 16 Jul 2026 10:48:44 +0000
ROA not before: Thu 16 Jul 2026 10:48:40 +0000
ROA not after: Wed 26 Aug 2026 10:48:40 +0000
asID: 274728
IP address blocks: 156.235.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116074 (0x1c56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:48:40 2026 GMT
Not After : Aug 26 10:48:40 2026 GMT
Subject: CN=6a58b70c-8a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:f6:f3:f8:9d:cf:9d:6a:29:4f:cd:b2:42:
1c:9f:39:65:25:29:e8:ed:ab:ff:15:00:27:15:13:
ba:9e:a1:45:d2:f6:19:cd:3c:7a:87:56:67:fe:91:
65:7b:19:c6:22:7e:06:d9:29:06:95:2f:25:59:12:
a7:36:8c:8f:fc:ce:d5:93:56:df:ba:bc:91:87:53:
2f:5d:00:84:8d:9b:d1:74:76:49:c2:15:57:2c:5b:
d2:71:12:95:6b:62:2c:5c:01:a3:7d:75:77:a8:2e:
a4:11:51:df:39:ae:1b:6d:f9:0c:cc:18:56:d1:ce:
7f:0d:be:04:76:19:f9:95:14:84:fe:ee:f0:1f:0c:
8b:f2:c1:8a:33:45:b7:44:15:9a:16:3f:eb:f2:9f:
cd:1f:9f:d2:df:94:4c:ff:fe:98:ed:e6:5b:ff:2d:
dd:43:e4:d4:a0:aa:9c:a0:68:d2:93:8c:62:ce:46:
98:ce:6b:52:15:c3:91:4c:52:8a:3f:eb:7d:98:b1:
c1:ec:17:9a:25:72:32:ed:77:85:05:07:34:b1:86:
e6:9c:be:5e:76:6c:5e:12:18:b6:7f:8b:9d:61:93:
34:99:41:77:bf:29:fe:62:9e:57:09:53:f9:cc:99:
5b:34:de:cf:39:9a:22:7e:5f:66:c6:f2:e0:61:d6:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:64:C1:96:07:26:3A:58:27:CC:47:8D:F8:74:88:90:A2:7B:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2C55E4810311F192477EABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:df:47:18:f1:a4:36:36:13:90:ed:95:19:ee:bb:a6:6a:b7:
c9:d4:62:89:ae:ae:d7:b9:4a:71:bf:ce:16:9e:18:23:a4:ae:
80:5b:36:ae:e7:13:95:d8:0c:e7:e4:f4:8a:06:fd:03:cd:01:
a9:01:43:10:b0:d4:31:c5:8b:00:59:92:2c:86:cc:06:58:1e:
02:00:ac:74:72:c3:21:e7:12:41:ea:d8:76:f1:ea:92:05:c4:
79:51:1e:24:37:2c:6a:0f:fb:1f:0b:73:91:5a:8a:9d:15:89:
3f:22:c3:9d:57:a1:ef:36:d0:f8:13:9f:e3:a2:6f:0b:f2:b1:
f7:ca:26:c6:3b:e1:88:89:52:12:b6:94:0f:55:28:1b:17:b2:
dd:ee:e2:b9:ee:f4:89:4f:26:39:5a:58:5b:de:4a:2f:ad:dc:
f3:83:59:74:fb:90:15:ab:28:5b:a9:8f:ca:b0:76:af:d4:3d:
fc:c9:84:a9:8b:2d:dd:4c:b2:1b:d2:1a:60:60:27:be:49:2e:
9a:66:d7:e8:3b:7e:f4:e8:d2:24:19:8a:d0:f0:cc:16:9c:a7:
fe:e5:0f:6c:f4:d9:05:cc:5f:e5:ab:d8:a8:c9:7c:45:e1:e3:
3e:c1:c8:de:d3:7f:8d:83:7f:1f:79:69:12:62:37:68:c6:66:
5d:2d:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:19 2026 by rpki-client