Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F29CFFCE706B11F194BE86C4CE1D38B0.roa
File: F29CFFCE706B11F194BE86C4CE1D38B0.roa (raw, json)
Hash identifier: NKjBbKhS3uSoXHSt0XYtnPGf5RfkFMr/epiWqGKdAUw=
Subject key identifier: 1C:DB:43:E9:80:6B:73:2A:5B:26:CB:EA:7F:CF:E3:B4:44:5B:9D:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C068
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F29CFFCE706B11F194BE86C4CE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:00:36 +0000
ROA not before: Thu 25 Jun 2026 08:00:31 +0000
ROA not after: Wed 22 Jul 2026 08:00:31 +0000
asID: 17497
IP address blocks: 156.255.48.0/22 maxlen: 24
156.255.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114792 (0x1c068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 08:00:31 2026 GMT
Not After : Jul 22 08:00:31 2026 GMT
Subject: CN=6a3ce024-7ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:c1:2c:98:6b:8d:22:c6:96:b0:62:20:1f:
f4:12:f4:1d:2b:c5:a1:2f:a9:5f:ea:e2:47:a3:1f:
37:de:dd:74:83:0a:c4:e8:6c:2e:30:c8:0b:6d:95:
ef:a3:b5:f4:71:5c:3c:26:d3:f1:ad:13:66:0c:f8:
a1:7a:91:da:91:06:ee:1f:ba:6c:eb:dc:9a:6c:89:
d7:04:e6:20:cb:de:b5:0b:3d:7b:be:dc:1a:01:c6:
1d:e4:a6:b4:bc:d8:d9:a5:d7:9d:c3:d1:5c:6e:b9:
82:a8:56:06:39:25:45:a2:b2:81:09:ce:61:b8:c1:
70:53:46:7a:e1:36:f4:02:65:3a:d2:fb:51:ab:11:
69:f5:b1:f0:16:a2:5a:9a:2c:3a:1a:56:9f:25:16:
b2:6b:a6:9a:76:c3:8b:c4:11:78:fa:b1:82:f2:2b:
44:e2:cd:4e:d2:2a:0c:7e:77:b6:6b:90:0e:37:60:
1c:b1:a2:a4:4f:b5:0b:e7:bb:11:58:47:b0:01:dd:
d8:14:66:8b:7d:21:34:77:aa:cc:1b:00:57:38:93:
ca:2c:92:16:cc:3e:8f:6d:ac:52:cb:cd:4a:02:df:
5e:e8:92:33:84:b2:92:7a:37:fe:3e:99:70:2f:85:
e0:6f:a4:2a:e7:2e:96:7b:37:78:03:08:24:9e:8b:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:43:E9:80:6B:73:2A:5B:26:CB:EA:7F:CF:E3:B4:44:5B:9D:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F29CFFCE706B11F194BE86C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.48.0/21
Signature Algorithm: sha256WithRSAEncryption
09:35:ca:22:24:fd:10:55:30:b4:54:52:55:15:6e:05:b1:38:
26:1a:c4:cf:f5:a3:6c:04:41:44:57:32:3a:1e:fe:f9:b4:85:
ab:f1:df:c1:f0:ae:d8:88:2f:b0:23:c3:db:23:f4:42:8f:88:
97:86:76:e7:68:6e:54:1d:05:2d:cb:ac:57:84:f5:f5:78:ba:
df:42:68:ed:f1:f4:3c:a1:2b:16:20:ef:d9:10:13:26:89:79:
f4:ed:44:0b:35:1e:e6:8f:8d:c3:18:e5:7a:2e:b7:75:a5:60:
dd:6b:cc:e4:82:9e:e6:c5:4c:d0:d7:c7:9c:53:1e:5c:ab:c5:
3f:55:24:6c:56:13:7e:0b:29:f4:19:99:1c:ba:1b:35:70:2b:
72:70:51:5b:42:14:08:b0:fd:9d:e6:3a:8d:81:9c:05:5b:79:
76:ba:1f:db:61:7e:be:30:55:60:e3:83:30:cc:6a:54:37:0f:
11:fe:fb:11:4a:48:9a:9b:df:74:9a:f6:28:a2:fa:51:45:4f:
16:2c:f9:17:a0:88:56:26:40:15:31:f5:82:28:fe:a8:75:5c:
69:f0:f1:e0:00:e3:b7:48:1f:d0:b7:55:68:6e:f2:d5:48:88:
cc:29:da:87:32:1d:92:3a:ab:f2:c3:4b:ef:c5:ef:37:d5:e4:
95:1a:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:34 2026 by rpki-client