Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D3968E8A5411F18726E2F8CE1D38B0.roa
File: 44D3968E8A5411F18726E2F8CE1D38B0.roa (raw, json)
Hash identifier: uANImUzIszHppsKJY+aeMseXtRe85/q78g41S38/E/o=
Subject key identifier: 68:2A:A8:3C:54:95:CF:1C:EC:68:2F:A9:92:D7:B0:7D:D8:61:18:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C83E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D3968E8A5411F18726E2F8CE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:16:36 +0000
ROA not before: Tue 28 Jul 2026 07:16:32 +0000
ROA not after: Fri 04 Sep 2026 07:16:32 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116798 (0x1c83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 07:16:32 2026 GMT
Not After : Sep 4 07:16:32 2026 GMT
Subject: CN=6a685754-b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:44:3c:05:bb:2b:00:e6:d8:05:de:f7:64:
42:7e:e9:52:d5:71:3f:c5:4f:b9:7e:35:03:36:cc:
f3:5e:bf:ee:fb:3c:a5:13:c1:fe:ef:33:df:6d:8f:
51:34:f0:d0:6c:b4:6c:39:2b:46:95:0b:dc:2b:32:
d5:44:dd:d2:dc:a8:24:9e:96:4b:74:db:3a:a8:f8:
ea:d6:82:f6:16:4a:13:0a:f8:19:c9:f7:67:e7:19:
8e:24:c0:11:ca:8e:66:13:38:0f:09:de:7d:a0:43:
fb:ac:42:80:40:46:86:c7:84:6a:5c:8d:a1:2d:b4:
6b:e6:d2:4e:0b:87:18:41:d2:96:1e:6d:87:ab:78:
36:b8:d3:b5:ab:b8:88:ac:e3:b2:d6:d3:b0:d2:c8:
53:9b:32:5f:a3:61:1c:6a:f9:5b:12:22:93:10:29:
7d:c7:62:c0:c8:2b:c3:18:44:af:3c:42:a3:1c:8a:
ca:02:0a:79:de:f2:69:fe:ac:51:f9:7d:86:69:53:
61:08:fc:a6:1a:31:99:61:c0:08:d1:e5:4b:b4:a0:
ef:2e:9b:f5:8a:f9:45:46:09:17:b5:1b:7a:1f:21:
0e:24:05:a9:52:d4:4c:01:92:85:14:5c:c5:a5:25:
df:9b:30:57:53:16:74:07:d7:bd:db:c1:72:6c:73:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2A:A8:3C:54:95:CF:1C:EC:68:2F:A9:92:D7:B0:7D:D8:61:18:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D3968E8A5411F18726E2F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:8a:e4:53:5b:55:14:4a:65:83:c9:3f:9b:46:74:b1:55:8e:
3b:8e:3e:dc:a3:60:c9:71:f5:7a:9e:ad:ac:0a:5c:4d:e4:2b:
af:90:75:ca:0c:77:59:6b:b4:e9:1d:c7:cb:10:2f:9c:34:ff:
79:fa:ff:b9:9d:d8:ad:7a:96:9a:0b:e3:33:31:ac:a4:91:4f:
90:5f:36:94:d8:44:02:e4:a0:39:88:de:11:ef:97:9b:4a:5f:
e2:5f:61:30:cf:ab:6f:94:5c:78:50:d2:6f:75:ff:bb:65:9b:
bd:15:b2:51:cd:74:2e:17:35:08:30:1d:07:77:8a:1e:5c:d4:
3d:b3:0a:14:73:94:a1:8f:cc:3d:02:d5:b4:01:f0:93:5c:52:
e4:85:63:1b:e8:4e:4a:99:40:ab:f0:a7:f0:09:ea:3b:b8:5a:
59:d3:12:3c:94:41:64:e4:72:4f:8f:07:c4:8c:03:58:18:a9:
bd:63:ed:cf:1d:e3:8d:80:65:8f:fa:c9:13:05:94:ce:01:9d:
ee:f8:79:91:23:97:6f:0a:9e:0b:0e:35:cf:bc:7b:bc:9d:42:
da:57:67:dc:c9:11:ce:09:91:1a:66:32:84:29:b7:6d:aa:ff:
ea:bf:c7:5f:9d:be:7e:08:b0:1b:51:73:d4:77:62:73:4c:d0:
12:0c:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:20 2026 by rpki-client