Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C1DE2A810C11F18F2B79E0CE1D38B0.roa
File: F5C1DE2A810C11F18F2B79E0CE1D38B0.roa (raw, json)
Hash identifier: W7KjlrPrd3hC66SXP5T8XPrF1K3GqGmaITtBvg/8ORw=
Subject key identifier: E7:A5:2E:DC:23:63:49:E5:06:A7:DE:8D:E5:AC:64:E4:A7:0E:22:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C578
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C1DE2A810C11F18F2B79E0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 11:53:29 +0000
ROA not before: Thu 16 Jul 2026 11:53:25 +0000
ROA not after: Mon 16 Jul 2029 11:53:25 +0000
asID: 17561
IP address blocks: 156.238.221.0/24 maxlen: 24
156.238.222.0/24 maxlen: 24
156.238.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116088 (0x1c578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 11:53:25 2026 GMT
Not After : Jul 16 11:53:25 2029 GMT
Subject: CN=6a58c639-39ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:69:9a:b3:07:38:0f:90:9d:c8:4a:a9:9a:
63:57:77:5a:8e:24:64:57:75:7e:0b:bd:c2:29:78:
42:16:24:cd:5f:23:2d:a9:be:d5:a1:77:f4:cc:db:
a6:d5:52:14:46:ba:ed:6d:f4:89:e9:15:fb:07:0e:
f9:6f:97:91:b8:46:7c:06:c8:79:da:7b:b2:15:df:
63:3f:31:5d:4b:16:b8:68:9f:9d:b7:10:8c:6e:77:
b0:ba:7e:20:64:6b:d0:7e:5e:1e:75:a2:6a:09:f9:
e3:6c:54:ce:76:58:21:cb:06:b8:9b:68:fe:5d:bd:
33:1c:83:9f:c1:25:39:f4:fc:34:12:fb:be:03:79:
06:9e:53:85:f6:8f:39:f3:92:7b:e9:e9:8b:7d:09:
75:aa:d5:77:94:43:9b:26:1f:4f:66:23:72:b3:b4:
f8:76:69:a9:97:0f:c6:c1:06:62:77:c3:70:7d:5f:
9f:80:53:4b:bf:5b:97:b8:86:19:66:9f:82:27:d4:
41:0e:71:d6:43:d3:d4:fe:fb:41:92:6a:8c:4b:b2:
59:94:35:13:04:c6:de:eb:ab:0a:af:d6:1d:6a:76:
59:b0:2f:cc:cc:fe:3c:04:da:82:9b:df:f3:3a:b3:
ec:99:0a:d3:c6:3f:9e:e4:68:b0:d2:c5:0f:d6:c9:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:2E:DC:23:63:49:E5:06:A7:DE:8D:E5:AC:64:E4:A7:0E:22:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C1DE2A810C11F18F2B79E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.221.0-156.238.223.255
Signature Algorithm: sha256WithRSAEncryption
45:fb:90:8a:37:84:3d:c9:e4:61:4b:f8:49:2d:92:52:17:26:
b1:18:9f:0b:c6:96:d9:b5:46:71:04:db:9f:8f:36:c1:67:73:
57:61:10:d7:a6:d9:fc:4c:89:0d:91:92:7b:60:70:28:6a:5e:
36:42:80:30:30:e1:1d:72:8f:1d:fa:bd:ac:cc:c0:c1:79:b0:
db:2c:c8:c0:6e:dd:7f:78:fc:3c:d8:27:9d:23:22:ff:ac:a8:
5c:9f:a1:5b:31:3f:cc:8d:bd:46:8b:61:e2:00:74:05:ab:2e:
77:6a:23:1c:01:58:37:88:52:ac:fc:5a:8e:52:d9:9b:42:aa:
5e:a2:0b:76:59:f4:c5:51:08:cb:e5:20:9b:cb:70:41:05:09:
5c:c8:e2:28:29:c7:ba:cb:45:76:cc:df:40:10:78:f8:68:19:
0b:91:a5:43:fb:1d:1a:26:1f:2c:d1:1b:2e:ab:bd:30:96:23:
00:58:4c:cf:30:a4:88:26:28:93:d7:75:ca:57:ac:02:22:86:
f7:6b:a7:eb:4a:5b:f1:3f:63:cb:0a:cc:8a:04:cc:4e:1a:12:
e1:78:97:73:2e:ac:50:12:25:01:a8:ba:35:40:43:00:ed:57:
0d:cb:65:e9:f2:30:34:ff:87:33:ce:c7:9e:a5:bf:f6:00:c6:
4c:c8:55:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:33 2026 by rpki-client