Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8670D9680EC11F1AD9297A2CE1D38B0.roa
File: F8670D9680EC11F1AD9297A2CE1D38B0.roa (raw, json)
Hash identifier: QN6vjpoSJr23SvsfBFs4tyydjWBXUD7ZwQ2qupfe3PI=
Subject key identifier: E5:DC:48:B9:E6:00:BB:1C:AF:41:CF:2C:CE:E9:50:50:10:7A:A0:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C54B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8670D9680EC11F1AD9297A2CE1D38B0.roa
Signing time: Thu 16 Jul 2026 08:04:30 +0000
ROA not before: Thu 16 Jul 2026 08:04:26 +0000
ROA not after: Thu 20 Aug 2026 08:04:26 +0000
asID: 55020
IP address blocks: 156.254.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116043 (0x1c54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 08:04:26 2026 GMT
Not After : Aug 20 08:04:26 2026 GMT
Subject: CN=6a58908d-c4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:cd:14:6a:25:28:fc:f7:3b:98:f5:15:3e:
73:06:06:f5:81:8d:7d:06:6b:e3:f3:90:84:ef:48:
18:f9:6b:36:91:6f:57:50:23:7b:f0:32:45:f5:27:
a1:71:0b:d4:15:e1:16:51:33:d4:58:3c:fd:74:69:
ec:e2:38:13:79:2a:46:f7:ef:45:0e:23:03:63:22:
6e:ae:61:4e:3d:96:7d:6e:9e:2e:ee:a9:5a:d6:5d:
93:de:cf:b5:55:21:c7:65:42:56:5e:e4:42:a6:40:
a4:db:38:b6:94:76:f2:31:e8:0e:d0:2a:16:d2:f9:
f5:10:bd:5e:22:1d:eb:e7:14:db:e1:02:ae:94:14:
e2:7f:12:46:4c:b2:e0:94:01:ac:17:5c:42:71:f4:
72:43:a1:03:f6:47:d4:39:06:1f:f5:7b:3a:aa:0d:
8d:91:41:92:5c:e3:a6:71:6c:ec:e7:d6:c8:51:b0:
98:a7:ba:fd:ee:ca:57:8f:12:e4:48:e6:2a:b3:3d:
06:59:3c:07:58:8f:ba:f2:ac:16:1a:27:f9:8b:08:
ef:1a:f4:79:09:5d:35:fa:f7:64:ef:63:47:0c:1c:
30:9a:84:bf:fe:b7:e3:70:92:54:da:80:c8:a4:fe:
85:60:d1:d9:97:23:ee:b7:b5:ac:13:5c:2c:1b:c8:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DC:48:B9:E6:00:BB:1C:AF:41:CF:2C:CE:E9:50:50:10:7A:A0:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8670D9680EC11F1AD9297A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:1f:e5:94:83:ae:65:bc:6a:4b:95:b1:83:20:b3:d9:8e:a5:
16:03:80:8d:1c:b2:0c:2f:36:be:c3:80:5c:e9:c7:18:7e:a6:
71:8a:4c:3c:fb:bb:4e:00:74:63:77:07:e7:33:88:a4:28:52:
d5:07:c0:1c:83:97:f8:2d:56:2e:ef:24:11:54:d5:6a:32:10:
9a:f8:31:8a:3e:3e:7b:e2:e0:71:04:71:cb:c8:b0:59:f9:7b:
76:6a:b6:4e:9c:ec:5f:f6:20:e3:de:3d:3c:b6:0f:7c:79:3f:
7a:86:9d:4e:f1:55:db:5c:c8:d6:53:81:99:62:ae:65:e7:f1:
06:c1:39:72:3b:87:18:fe:97:b3:48:79:f4:4e:7c:86:24:23:
ca:a6:41:a2:9e:c5:85:1d:69:59:56:78:ec:25:f0:9b:a3:a9:
43:01:a4:98:99:00:93:aa:38:06:32:99:f1:e0:81:5f:a8:0f:
b0:16:77:95:72:6a:33:69:77:d7:e7:f5:bd:4f:e7:47:21:54:
45:d6:09:cd:0e:4e:0c:d8:25:a5:01:80:a0:25:76:df:b9:9d:
19:9b:34:46:15:cf:74:81:5f:f3:27:18:59:44:68:30:6b:d2:
3d:8d:26:5f:3b:74:7d:3a:5b:86:f7:b7:1b:f8:93:58:d5:00:
fa:92:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:38 2026 by rpki-client