Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3BC07872F011F19831A011CF1D38B0.roa
File: EE3BC07872F011F19831A011CF1D38B0.roa (raw, json)
Hash identifier: +FuE3V0NVsYm2jHtiVHX2snyz+hZGXpZMqv5VVAQQbk=
Subject key identifier: 01:F7:62:68:87:5E:03:9B:FD:19:2A:54:12:C0:BD:2F:56:63:BD:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C13D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3BC07872F011F19831A011CF1D38B0.roa
Signing time: Sun 28 Jun 2026 12:57:34 +0000
ROA not before: Sun 28 Jun 2026 12:57:30 +0000
ROA not after: Tue 04 Aug 2026 12:57:30 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 24
156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115005 (0x1c13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 12:57:30 2026 GMT
Not After : Aug 4 12:57:30 2026 GMT
Subject: CN=6a411a3e-fc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:4f:d2:58:79:c9:d9:47:4b:89:92:4a:62:
41:a3:8d:1e:f5:2f:b3:8c:ea:36:b6:78:1f:fe:ce:
3b:62:2e:a2:0e:07:8e:5d:6d:c5:cf:d4:9c:b3:f6:
86:f3:23:14:b9:47:d5:67:df:76:f4:5f:68:b0:f0:
ea:c5:ad:6f:0b:f6:d8:50:db:11:31:2a:c6:79:cc:
33:2d:6b:79:6e:cb:f3:d2:b3:ed:03:70:77:a8:dd:
f9:d0:05:c7:1c:d4:9c:06:9b:43:53:cf:6d:e8:0f:
bf:b2:7e:fd:03:a5:89:e4:d4:30:1f:d6:9c:4e:9e:
ae:b2:65:76:38:6f:ca:46:c2:02:1f:8a:4d:e4:fc:
33:12:b9:b3:87:31:58:a8:c4:99:f8:88:9e:d7:bf:
e9:08:33:72:fd:fd:cb:63:ea:91:5b:c5:9b:34:c4:
6c:45:03:e3:83:95:e0:4f:1f:8f:ce:6e:b8:ca:f4:
68:6c:87:c8:c6:a2:a4:59:8c:7d:a6:f3:52:24:f2:
20:ec:6c:95:06:23:bb:5e:6b:ba:e2:97:ba:36:f5:
3a:6a:39:a1:bd:a9:7d:e3:d7:71:5f:1d:48:0f:0c:
60:4d:15:6b:c6:f0:28:d8:2a:47:fc:7d:2d:22:1d:
b4:e9:a1:d0:46:75:76:8d:57:d7:1e:1e:2a:a2:9d:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:62:68:87:5E:03:9B:FD:19:2A:54:12:C0:BD:2F:56:63:BD:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3BC07872F011F19831A011CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c0:90:94:95:37:cc:67:4e:33:a4:40:e5:03:20:65:7d:9b:
d2:eb:59:30:94:2f:db:d2:86:14:24:57:eb:80:04:4d:f7:55:
05:62:61:d1:b0:95:61:df:d3:24:f3:63:4d:57:13:d4:05:c7:
93:b8:98:f0:62:a7:3b:56:1d:23:16:8b:88:af:ed:6c:4d:45:
b2:32:7d:1e:ea:33:7c:55:80:83:d7:8d:d1:d8:83:56:e1:08:
17:18:35:5c:3a:4e:e3:8c:60:44:0d:ee:73:30:66:c2:0c:e1:
fd:d3:3c:76:a7:6b:62:eb:ce:cc:5b:b9:2c:70:90:07:a4:8d:
f9:1e:f5:dc:32:da:1e:52:5b:8b:d1:a1:09:22:aa:ac:5a:67:
5c:4d:48:c1:cc:9b:a2:04:b8:0b:e3:f9:91:4e:28:74:d9:8d:
68:12:71:ef:bf:90:86:08:4b:3f:16:2e:28:91:26:9b:b1:ec:
74:7e:87:3e:44:7c:84:38:31:3a:4a:b9:e5:28:6b:24:4f:18:
c8:d1:d8:29:79:72:30:65:6b:9e:69:9b:5b:73:c2:21:e2:c9:
96:58:63:7f:3d:55:22:3c:5c:cb:6e:39:21:ab:f9:88:9b:48:
41:07:60:d2:65:4e:05:59:4f:88:9e:fe:7a:57:84:ce:3e:93:
37:ef:f0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:51 2026 by rpki-client