Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C9D6BF68A5611F1BFF24505CF1D38B0.roa
File: 7C9D6BF68A5611F1BFF24505CF1D38B0.roa (raw, json)
Hash identifier: KtwnlsiNyO5Yk9uhnF8fD3nLjSZjsf8QjGuIlwn3P1g=
Subject key identifier: 32:F8:41:30:4F:40:B5:62:7C:06:75:D0:B0:DB:08:EE:7A:70:16:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C846
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C9D6BF68A5611F1BFF24505CF1D38B0.roa
Signing time: Tue 28 Jul 2026 07:32:29 +0000
ROA not before: Tue 28 Jul 2026 07:32:25 +0000
ROA not after: Sat 05 Sep 2026 07:32:25 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116806 (0x1c846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 07:32:25 2026 GMT
Not After : Sep 5 07:32:25 2026 GMT
Subject: CN=6a685b0d-612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:d4:b5:02:6c:0c:c3:63:d0:9d:7c:c7:a1:
1f:bc:3c:55:62:58:00:53:23:42:8e:bd:ea:d8:59:
bb:61:ba:0c:d1:94:85:f5:a0:71:ee:a1:f5:e4:68:
29:ed:17:bf:b9:f9:b1:6b:f9:4c:3c:19:10:0e:ce:
7a:cd:68:11:f8:45:03:0a:7f:cc:64:ec:44:57:c9:
ba:6c:84:ec:bc:fd:95:4e:67:36:a3:8f:19:64:f3:
2d:41:be:b1:4a:d6:01:b2:70:de:c2:de:2f:76:55:
db:45:25:1a:a4:7d:c8:f8:43:e8:a3:bb:7e:6e:e5:
63:c3:87:b2:4f:c6:e9:20:4f:c4:e1:67:16:d9:a8:
71:96:55:a4:ae:97:90:2b:70:de:85:2c:df:83:08:
79:9c:86:d3:5d:21:35:9a:5b:fc:22:88:3c:f0:39:
e1:28:68:11:82:b3:ab:27:7c:0c:09:27:c8:68:85:
f5:ec:28:9c:af:be:39:f4:5a:6e:8b:9f:bf:62:e8:
99:93:62:c7:33:ae:e7:0d:a6:8e:d0:8e:36:83:72:
76:78:fb:dc:19:4f:a7:ce:67:7c:f6:68:d0:4a:6e:
f2:93:d8:85:76:29:9e:52:33:71:be:54:83:c5:57:
cc:15:76:1a:95:e9:64:0b:21:25:75:b0:61:ec:b1:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:41:30:4F:40:B5:62:7C:06:75:D0:B0:DB:08:EE:7A:70:16:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C9D6BF68A5611F1BFF24505CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
83:f4:f4:d1:d7:05:06:8b:0f:44:7e:d4:94:ac:2a:95:d6:43:
c4:10:8f:91:bc:01:08:f9:56:37:26:aa:79:f7:ee:68:8a:c1:
56:df:73:8b:dc:73:ef:65:21:47:3c:ae:96:61:ab:47:1e:fe:
9f:6d:56:61:1b:a7:d1:8b:10:a4:ec:c9:0b:f1:df:ca:76:a7:
60:33:30:ea:bf:50:44:e1:19:27:38:ec:fc:49:cd:d9:ee:58:
13:41:de:ad:d2:82:7b:36:94:3d:83:d6:dd:59:f2:f5:0d:bb:
96:fb:f8:9a:4d:47:c8:4c:84:5d:c2:d1:4b:5f:f4:b1:30:f8:
30:16:55:96:cf:40:6e:3b:e6:d8:be:0e:35:69:fe:2e:24:04:
5f:a8:06:9d:6c:5b:f8:48:75:11:c2:45:bd:1f:2c:1e:ff:6e:
68:d9:a5:3a:de:90:e6:79:10:43:fc:a4:c6:1f:f8:16:0b:ac:
3b:06:80:d1:91:fd:dc:3d:ea:b7:ed:2c:04:9c:f5:99:fd:1c:
fd:65:13:c7:d6:6d:41:62:93:46:36:1d:2b:1b:26:69:1e:7e:
e4:74:23:cf:a8:4f:1a:d5:52:72:d6:e7:d4:4a:3f:6e:f5:0c:
90:12:c0:8a:ae:a1:8c:b8:7c:22:7f:8b:e5:9f:c8:bb:9d:ce:
7b:f4:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:13:03 2026 by rpki-client