Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F4F14C48A5111F19F0227E8CE1D38B0.roa
File: 4F4F14C48A5111F19F0227E8CE1D38B0.roa (raw, json)
Hash identifier: yJb8Tb0PyHx7YMRHsg1BEhMBGz9NM28+/zALtJe4Up8=
Subject key identifier: 5A:B8:54:DB:B2:AC:50:E8:6D:14:CB:BB:2A:20:DB:BD:78:E3:B7:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C836
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F4F14C48A5111F19F0227E8CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:55:26 +0000
ROA not before: Tue 28 Jul 2026 06:55:22 +0000
ROA not after: Fri 04 Sep 2026 06:55:22 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 24
156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116790 (0x1c836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 06:55:22 2026 GMT
Not After : Sep 4 06:55:22 2026 GMT
Subject: CN=6a68525d-3d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:bd:27:04:0e:48:89:57:4f:b2:84:c2:a8:
c2:b4:b5:3c:2a:40:fc:e3:36:e3:79:8b:77:a5:ad:
2a:47:b9:0b:eb:23:8e:ef:91:69:c6:ad:96:76:22:
00:d4:5e:76:e8:d3:d0:bc:7a:9b:bf:20:49:d6:cb:
96:4b:af:5f:85:dd:12:d6:09:4b:14:62:9b:bc:60:
47:83:20:01:f8:e0:b4:c2:bd:bd:30:e7:e4:40:8c:
0c:a9:ba:b3:03:c3:86:a7:5a:3c:8f:ce:60:b7:5c:
10:ff:d6:c1:08:54:ef:e0:dc:63:23:15:66:87:91:
6f:1c:89:9a:fb:f5:5f:1d:47:26:19:ce:29:0e:7b:
23:b9:19:05:e3:62:c9:14:d4:4f:22:9e:0c:62:6f:
d6:a3:d2:9a:5f:28:69:27:80:96:b1:a0:6c:34:b6:
5e:9a:55:4b:4b:dd:15:34:8e:a9:90:c4:c0:2d:85:
60:6f:6c:06:87:d8:10:2a:88:d5:a4:0a:24:b3:bf:
cb:75:b2:d6:1c:86:70:40:b9:52:bb:eb:4c:8c:fa:
de:b3:ef:6a:e1:07:93:db:8f:96:6e:20:fb:0b:f5:
3f:57:68:b2:19:f6:30:4a:3a:f0:3b:16:d7:95:6b:
1d:09:72:de:3d:d0:c9:1c:86:cd:26:3d:35:65:85:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B8:54:DB:B2:AC:50:E8:6D:14:CB:BB:2A:20:DB:BD:78:E3:B7:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F4F14C48A5111F19F0227E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f8:de:eb:77:b9:ff:48:b8:19:b9:5a:7e:60:9e:55:a9:59:
af:6b:18:ed:e3:5f:1e:02:78:2f:3b:6a:93:5b:1a:93:98:06:
dd:54:de:ae:f9:4b:51:f5:9e:48:96:7f:91:3f:23:3a:69:17:
b8:67:78:b5:6c:7a:c3:95:2f:aa:85:7f:e1:ff:ee:47:5d:d1:
73:e4:78:4b:f4:5c:ea:96:78:6e:90:3f:a8:13:59:95:49:dc:
ed:ba:88:ae:97:48:45:4d:32:99:14:be:10:2b:e8:3c:0d:52:
82:80:65:4d:21:c7:a5:aa:d3:62:2e:25:55:dc:08:9b:8c:7b:
fc:26:56:6a:1f:9a:f0:e8:00:ad:5a:74:88:17:40:3c:bf:e8:
b2:f7:f1:ac:a2:7e:d1:13:79:c6:f4:f8:ab:01:fa:95:c0:37:
b7:68:0d:bb:fa:a6:cd:4e:90:07:0f:02:16:ba:02:b1:0c:30:
08:de:39:0b:e8:cb:51:4f:0c:4c:b7:5d:c2:09:8c:ff:c4:71:
a4:c3:96:07:98:08:f8:de:2b:a7:41:aa:98:28:7c:b5:4c:f9:
0a:27:da:64:c1:a0:74:c4:5c:1e:45:47:bc:86:98:7b:0b:d4:
93:52:c0:d4:3c:b2:d2:18:5d:06:29:03:a0:de:40:d9:c2:74:
c8:c8:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:37 2026 by rpki-client