Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F89D9FB2785B11F1B1B24407CF1D38B0.roa
File: F89D9FB2785B11F1B1B24407CF1D38B0.roa (raw, json)
Hash identifier: zm63KVIVWUBBBuNjDws0D4giq+7ktto4UKFYElZdK7A=
Subject key identifier: 8A:A7:54:EA:A2:49:67:17:2C:E4:FB:1C:CC:FB:4E:94:7D:FE:A8:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C316
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F89D9FB2785B11F1B1B24407CF1D38B0.roa
Signing time: Sun 05 Jul 2026 10:26:24 +0000
ROA not before: Sun 05 Jul 2026 10:26:19 +0000
ROA not after: Sat 22 Aug 2026 10:26:19 +0000
asID: 8796
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115478 (0x1c316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 10:26:19 2026 GMT
Not After : Aug 22 10:26:19 2026 GMT
Subject: CN=6a4a3150-60e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:af:e1:41:cd:6c:6c:75:af:b8:00:e8:d2:
44:26:52:22:7c:4b:a5:e2:42:1a:32:9a:85:f7:08:
31:86:b8:bc:c9:1a:d0:30:d0:72:fd:fe:ce:a9:4a:
80:96:e0:1d:70:c6:36:af:de:fe:37:c0:c9:0d:cf:
90:65:19:fc:45:07:b3:d2:de:3a:16:44:13:af:28:
05:fb:9b:4c:94:4d:57:8c:ca:88:bc:61:58:a0:a2:
96:38:e1:05:b8:a7:59:b0:ff:68:5d:61:76:c2:66:
7e:24:b5:ec:c8:0e:e7:89:6a:42:02:e4:bd:b0:bd:
8c:86:47:69:b1:5b:b6:96:75:ef:e9:0b:16:41:da:
12:93:64:43:b4:da:79:a8:3d:7e:3d:82:8f:62:68:
a9:c8:36:9d:ca:7c:07:e6:2a:6b:26:7f:92:42:23:
cd:f2:20:72:56:34:95:0f:19:7a:3e:89:b1:c3:85:
3a:f8:8d:0f:a7:af:6f:95:1f:f3:93:b8:c0:76:a7:
fd:10:2e:40:78:87:dc:f5:6c:19:91:86:2b:96:a6:
55:a3:51:85:30:58:7d:a5:7a:20:31:2d:a6:b6:ea:
11:bf:5b:b3:36:bf:9e:10:94:f5:55:00:6f:a2:c5:
11:d1:3d:87:1c:18:4d:58:c7:b9:74:82:d7:95:38:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:54:EA:A2:49:67:17:2C:E4:FB:1C:CC:FB:4E:94:7D:FE:A8:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F89D9FB2785B11F1B1B24407CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:ee:64:65:c4:fc:4b:c5:83:0d:da:bf:fb:3f:ed:5a:f9:0f:
70:99:81:db:16:9c:69:3c:1a:7f:5d:1d:83:fd:26:32:12:e8:
55:7e:78:10:2b:de:04:7c:5a:f6:82:27:67:38:91:a8:86:b9:
dc:3e:b4:f8:35:36:70:49:12:e3:13:f0:12:d3:5f:a6:b2:7f:
0d:43:e3:ae:fd:f5:89:e3:ee:03:b0:0e:4b:02:ed:c5:8c:7b:
3e:41:38:9f:73:3b:b5:34:41:fc:22:4c:26:80:33:1a:de:48:
96:a4:13:0b:f9:43:5a:74:e1:6d:a3:ee:83:a1:94:59:b7:fb:
f6:c9:c3:66:11:d1:48:23:83:ea:11:02:c7:0d:6d:22:f1:2d:
8d:5a:46:66:ec:10:f2:88:c9:52:07:9d:df:43:d2:98:62:b9:
fd:ae:6e:0b:a0:9f:0a:08:d2:b2:60:69:6c:51:09:8b:29:1c:
7c:b7:bb:ab:62:82:52:b8:aa:67:be:32:f7:47:c0:b6:a3:7f:
23:14:9b:7a:f7:ea:88:eb:32:ae:01:80:37:89:eb:f5:0e:ac:
86:8b:66:76:30:96:85:a0:3c:70:56:62:ae:33:38:82:76:cb:
ce:c3:cb:ea:5d:3f:6f:30:b5:41:85:47:54:c1:d4:79:f4:fd:
f1:43:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:40 2026 by rpki-client