Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD8DAF3876E611F1ADDBE1A6CE1D38B0.roa
File: FD8DAF3876E611F1ADDBE1A6CE1D38B0.roa (raw, json)
Hash identifier: Sn9+uKtgetg2M85+FOSzVaRHvfQ8oGS3JplnGpiOUYQ=
Subject key identifier: 23:BD:6E:70:0F:07:22:F0:93:C7:78:A8:B6:BD:67:28:F8:C9:A0:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C28E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD8DAF3876E611F1ADDBE1A6CE1D38B0.roa
Signing time: Fri 03 Jul 2026 13:56:30 +0000
ROA not before: Fri 03 Jul 2026 13:56:25 +0000
ROA not after: Mon 10 Aug 2026 13:56:25 +0000
asID: 154177
IP address blocks: 156.244.2.0/24 maxlen: 24
156.244.32.0/24 maxlen: 24
156.244.33.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115342 (0x1c28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 13:56:25 2026 GMT
Not After : Aug 10 13:56:25 2026 GMT
Subject: CN=6a47bf8e-acfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:87:34:ab:79:d1:cc:51:ad:b2:9b:ee:4d:
7c:0f:c3:34:67:cd:90:0f:db:09:0f:bf:71:30:ea:
b9:f0:da:8c:75:54:05:f0:e5:2c:f2:dc:93:cb:16:
00:2b:78:68:97:b3:f3:16:cb:53:94:2b:c5:6c:05:
c9:1f:50:84:bc:a9:7b:ab:d5:1f:ca:2b:27:99:5f:
37:2b:10:41:10:84:d3:c3:76:02:8c:b2:e6:4e:28:
0c:4e:69:c7:52:41:ae:f1:d4:b4:0c:57:38:e3:94:
82:8a:77:a7:62:68:f2:7c:77:6b:fb:78:ae:b1:a1:
43:92:a4:fd:9b:2d:a6:f9:e7:da:0c:3c:4d:5b:c2:
5f:7d:d8:1a:c0:17:86:e2:1c:fd:5e:3d:8a:1b:51:
0a:41:fb:f8:be:8f:95:51:60:4d:e3:41:e1:84:d7:
25:dc:b4:47:4e:56:a1:2e:1d:bf:39:76:b0:29:c4:
60:2d:d7:27:22:e3:10:30:03:24:c6:7c:9c:5e:c3:
4c:29:de:d1:24:be:5a:1d:31:44:e4:a8:db:fa:ca:
e8:a5:b9:7b:61:35:f4:9c:89:e9:9e:1e:ad:65:62:
e8:85:24:88:e5:f2:44:dc:a1:c6:cb:48:54:aa:18:
f9:f4:85:e1:39:3f:d3:f3:44:46:b4:69:59:18:e4:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:6E:70:0F:07:22:F0:93:C7:78:A8:B6:BD:67:28:F8:C9:A0:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD8DAF3876E611F1ADDBE1A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.2.0/24
156.244.32.0/23
156.244.38.0/24
156.244.54.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a0:73:15:09:81:61:75:e8:25:4a:a9:f3:6d:4a:13:76:0a:
67:77:94:a6:6f:a5:86:71:9d:08:8f:87:d4:79:6e:27:73:26:
81:75:ad:d0:bb:07:31:fa:3c:b3:df:6e:22:07:5a:12:ed:98:
59:88:6f:5f:39:50:de:7b:15:dc:dd:40:ed:94:40:68:51:96:
2a:de:52:dc:d2:81:16:12:0d:5b:e2:ae:52:96:fa:89:95:7f:
f2:c5:c2:65:f1:61:49:36:e5:af:59:c8:a3:15:3a:2c:f3:51:
a4:47:ec:b4:3f:fd:48:ab:79:c8:fd:5c:f7:9b:ab:2e:7e:ca:
6b:0d:6c:c4:4b:ef:37:b8:da:77:14:ac:45:a5:c1:57:3e:02:
98:ba:63:c4:29:42:81:a7:27:38:49:c2:ba:b7:e8:5f:ea:2b:
4a:ff:57:b1:1f:4f:05:fb:61:81:ec:8f:41:0a:75:a5:8e:45:
51:cc:1b:a2:55:93:74:a4:c0:46:ed:6e:09:96:82:28:f5:1f:
0e:e3:4d:24:31:5c:07:9a:41:aa:67:49:12:96:05:1a:c6:9f:
33:bb:67:c1:59:aa:73:4e:0d:b8:fb:29:cc:03:e8:cd:b5:7a:
fa:ed:35:db:44:a7:8e:e8:16:1f:1b:56:ed:33:43:39:c4:b2:
41:42:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:50 2026 by rpki-client