Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF356ADA76EE11F1AC2A90D6CE1D38B0.roa
File: FF356ADA76EE11F1AC2A90D6CE1D38B0.roa (raw, json)
Hash identifier: 2CWFgzS+ofrx/gRkTAhgvPWJU0xPA1x07+2hgds938U=
Subject key identifier: C8:BF:CB:45:65:77:2B:57:02:44:0F:C9:00:C8:2F:0A:20:91:59:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C29E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF356ADA76EE11F1AC2A90D6CE1D38B0.roa
Signing time: Fri 03 Jul 2026 14:53:48 +0000
ROA not before: Fri 03 Jul 2026 14:53:43 +0000
ROA not after: Mon 10 Aug 2026 14:53:43 +0000
asID: 138915
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.2.0/24 maxlen: 24
156.244.3.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.8.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115358 (0x1c29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 14:53:43 2026 GMT
Not After : Aug 10 14:53:43 2026 GMT
Subject: CN=6a47ccfc-bf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:b9:62:30:2a:d9:87:e8:e4:97:74:88:54:
17:1f:a5:05:b5:31:e6:08:89:dd:85:5f:76:62:67:
c8:0a:84:a1:b1:8b:c8:58:fe:55:2c:98:9c:05:ca:
bb:e0:c2:7e:aa:44:b9:50:db:8e:18:e3:0e:47:25:
6e:5e:e3:a9:94:a2:c9:e5:71:7e:71:fd:3a:80:2a:
cb:5c:d0:72:23:8f:85:57:fb:2e:8a:c3:31:62:ad:
ad:76:7d:fd:36:44:79:3b:10:82:2e:ee:58:5e:9b:
92:f4:11:ee:24:6e:b0:15:aa:ba:b2:46:73:7e:b0:
1b:1d:f6:08:8f:7e:fc:e2:41:0d:32:69:c1:b7:1b:
9a:8d:a0:a2:1c:00:52:f0:a7:03:8c:02:62:48:3c:
d5:e4:c1:da:c4:05:88:b4:52:5e:ac:fb:0c:98:37:
ec:45:d7:bc:5e:6b:bd:98:ef:87:0b:00:ee:b9:2f:
4c:75:9e:b8:5c:99:0d:49:2c:8d:b4:be:7e:ff:1e:
ad:51:61:8c:bd:56:2f:92:d6:8c:dc:06:20:29:45:
78:96:e5:a0:82:5e:c2:70:bb:0f:81:88:00:f9:74:
bd:19:c5:6a:e4:5a:e6:14:b8:40:c4:a1:18:f6:fa:
80:6a:07:51:c6:12:08:86:18:b4:1a:b5:a0:19:e0:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BF:CB:45:65:77:2B:57:02:44:0F:C9:00:C8:2F:0A:20:91:59:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF356ADA76EE11F1AC2A90D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0-156.244.8.255
156.244.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:a0:15:8a:b1:f0:9e:c8:8e:96:6a:b1:96:78:b5:9f:bd:cb:
91:25:c4:ba:05:7b:b3:11:0e:4e:64:50:40:72:cd:18:e9:78:
3b:41:9e:85:80:7c:51:97:16:a7:81:26:ce:24:6f:4b:ce:4c:
bc:95:e7:e7:8a:0a:7c:61:1c:f0:0b:a8:43:c9:9f:cc:ed:69:
99:50:88:57:ab:37:f1:95:a0:80:7d:8f:14:36:a2:47:71:73:
f1:4b:45:3b:1d:34:ad:78:f4:60:df:30:e8:b7:55:50:24:0f:
d7:3a:13:3e:1f:ae:2f:06:97:9f:6a:7d:32:ba:46:dd:ec:87:
39:85:6c:5f:9e:79:97:54:88:56:16:98:a9:6b:c6:e7:5d:89:
14:b4:01:36:68:b7:0b:7c:63:e8:70:80:2a:a5:f0:45:ce:40:
71:d3:8d:a4:27:b7:03:d7:ad:2b:38:57:fe:fa:4b:5e:b9:5a:
6d:5a:66:83:aa:47:c0:7d:ad:ea:80:05:24:2d:e5:39:71:f1:
51:09:c0:4a:da:2d:8d:bc:1d:1e:51:dd:f2:32:86:f6:5d:26:
73:c2:8e:37:16:61:a1:02:9e:81:02:51:20:75:6e:82:0c:b0:
3e:86:ba:42:0a:af:df:d1:3f:5c:3e:3f:d7:75:c0:85:71:d4:
f8:c7:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:40 2026 by rpki-client