Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BDBB9548A5311F18487B9F4CE1D38B0.roa
File: 8BDBB9548A5311F18487B9F4CE1D38B0.roa (raw, json)
Hash identifier: keYXVXlXM6xgY961ztUD4FsOR4+4jPrbNcDnIRD75W4=
Subject key identifier: C5:4D:B9:C6:DC:BE:F8:4A:F4:42:AA:D6:F9:3D:5E:52:1A:AD:72:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C83C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BDBB9548A5311F18487B9F4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 07:11:26 +0000
ROA not before: Tue 28 Jul 2026 07:11:22 +0000
ROA not after: Fri 04 Sep 2026 07:11:22 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116796 (0x1c83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 07:11:22 2026 GMT
Not After : Sep 4 07:11:22 2026 GMT
Subject: CN=6a68561e-1732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:d8:85:d9:c2:62:d3:aa:48:2d:15:56:5d:
2e:9d:f7:4c:92:03:1b:24:76:46:45:f2:4f:7b:5b:
f0:5f:97:0a:26:72:d4:49:c5:5a:8c:a0:6b:4b:65:
84:2c:03:63:ce:27:bd:20:c7:8a:07:bc:cf:41:88:
ad:d2:dc:e2:d0:41:22:04:22:90:9b:ff:a2:00:58:
56:eb:4e:60:af:32:4a:ca:86:22:81:a2:4f:5f:8a:
95:d1:ba:d3:16:5a:53:32:97:99:f8:c5:fe:88:44:
8c:4e:41:2c:5f:5e:f2:ca:94:6c:00:f5:f1:68:4f:
63:ce:f7:3d:bf:29:8e:4f:75:0e:eb:66:b9:80:93:
21:80:02:19:0f:67:36:b3:81:ea:1b:96:e5:ae:c1:
86:37:68:19:12:ad:6c:4a:43:c8:b1:37:0b:b6:84:
c9:02:b8:6a:0b:29:51:74:0f:8c:e4:1a:5e:a2:0d:
9e:b8:cf:45:5e:93:0b:09:0c:8f:18:92:ac:02:a6:
49:2d:0b:fa:a5:3d:c5:04:f6:dc:72:69:69:7f:67:
9f:ac:e3:90:7c:3b:ef:6c:eb:7b:d7:1d:9c:45:af:
2d:44:80:77:21:5c:1a:bb:de:30:67:a4:c5:f6:36:
14:20:2c:d6:b6:70:79:20:e9:5b:af:43:6f:d4:a6:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:B9:C6:DC:BE:F8:4A:F4:42:AA:D6:F9:3D:5E:52:1A:AD:72:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BDBB9548A5311F18487B9F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:f6:d7:4f:34:44:cc:d6:49:e9:68:36:6d:55:05:55:25:ab:
db:b2:e4:18:8d:de:06:cf:4b:b7:48:eb:ff:31:47:45:1e:1b:
7f:9d:a8:79:7d:aa:32:93:d6:e8:c4:15:78:73:ec:c3:12:dc:
5f:80:c6:1d:28:e0:30:16:1b:f7:df:10:a4:92:8a:10:6d:68:
44:3d:66:4e:8a:86:1e:9b:85:d8:c7:65:ad:ff:67:18:24:79:
77:a1:21:a0:dd:c5:1e:69:6e:b9:29:cb:6c:48:bb:63:54:9e:
4a:39:41:74:8e:3a:b8:28:57:1e:0c:0e:ad:67:2d:45:c6:6f:
fa:b9:a8:b2:7b:e9:ca:0f:dc:bb:a0:e6:61:a4:bb:bb:90:ef:
e6:cb:be:14:23:ed:74:aa:a7:4f:3e:3a:93:42:22:d9:32:f4:
ba:fc:da:fd:4e:83:6d:94:cb:30:14:41:fc:3c:50:cb:91:b1:
7d:bd:39:0a:2d:7a:ee:96:8e:ee:87:40:e6:03:85:79:24:85:
49:97:d8:c6:ac:df:59:72:5e:ff:8f:b9:23:a1:c6:da:f9:ba:
ab:08:a0:86:16:e9:d7:4a:44:90:01:e5:09:d4:d6:b8:03:a4:
af:5c:68:2d:fd:3e:b5:13:14:1e:a8:9c:12:e3:2e:f4:ad:11:
6a:c9:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:25 2026 by rpki-client