Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955ED07C8A5011F1AF8A0BE4CE1D38B0.roa
File: 955ED07C8A5011F1AF8A0BE4CE1D38B0.roa (raw, json)
Hash identifier: iLpzCq9+UrABTN8Fb7KUJ4VywSqbBAV6Y9cNnG+CsoI=
Subject key identifier: D0:37:F7:63:13:5B:2C:8B:5C:22:2D:15:44:B0:74:B7:85:C6:23:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C834
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955ED07C8A5011F1AF8A0BE4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:50:14 +0000
ROA not before: Tue 28 Jul 2026 06:50:10 +0000
ROA not after: Fri 04 Sep 2026 06:50:10 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116788 (0x1c834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 06:50:10 2026 GMT
Not After : Sep 4 06:50:10 2026 GMT
Subject: CN=6a685125-b6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:e3:f8:86:b0:c0:8c:d8:fa:a7:df:09:81:
29:05:d0:79:4b:2e:3e:84:95:c8:e6:b4:64:05:75:
b3:b8:d4:13:e6:7d:77:b6:57:1c:79:88:22:44:ca:
9d:85:d3:b0:a3:c2:13:b1:94:51:cf:62:b2:94:25:
df:cd:61:ab:14:78:c3:12:ce:cc:4f:9b:42:00:5d:
a4:96:ea:c1:a7:20:c7:32:eb:29:dd:e1:b7:31:97:
93:94:75:ae:39:97:80:3d:d3:53:f7:a9:84:3c:8d:
a0:a2:c5:f4:5f:52:c1:6b:4b:c3:fa:b0:da:86:6c:
63:80:9c:82:2a:5c:28:a3:c1:a0:84:38:07:e8:5a:
53:02:38:06:07:c6:91:b4:18:f9:66:ef:f5:4e:6e:
4a:2d:fd:e1:ec:30:33:7e:0f:c7:ca:e2:ea:c2:50:
59:b6:e4:2c:5a:68:30:b1:3b:d5:4d:35:d9:8d:e0:
59:29:17:53:6d:f9:f5:68:eb:b2:91:8b:be:27:8e:
f6:55:50:c6:8c:00:13:97:20:da:05:b6:80:a0:1b:
04:9d:f9:10:81:8e:69:39:74:07:0b:01:29:bb:40:
7f:90:53:d3:c1:77:a5:c6:49:55:00:aa:24:43:b0:
13:d4:dc:87:f1:80:07:e2:8e:6f:7b:89:fd:f5:16:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:F7:63:13:5B:2C:8B:5C:22:2D:15:44:B0:74:B7:85:C6:23:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955ED07C8A5011F1AF8A0BE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
78:98:fe:63:6b:0e:f7:b8:d3:fe:41:b4:81:6a:af:d0:85:47:
2f:60:3e:3d:18:cf:b3:73:76:80:48:fd:d3:4a:c1:2b:31:32:
be:d3:ab:be:41:2b:a6:16:c3:4f:02:a3:1a:1e:4c:40:04:fa:
36:31:89:e7:19:73:8e:60:55:b7:2b:d2:16:82:d8:f5:4c:07:
99:c9:7a:46:b8:5e:59:81:df:d8:f9:95:bd:06:87:f3:25:06:
66:5f:cd:e3:33:f0:d1:d2:d1:56:84:14:4c:bb:39:dd:5e:b9:
6c:3a:4a:74:34:28:f9:06:a9:6f:b3:83:73:87:04:63:70:9f:
6d:7b:e8:18:12:54:35:6c:5b:ff:9f:cc:a1:f8:17:de:94:33:
e0:a0:f6:1c:17:e4:ce:04:db:e5:1a:e2:d0:c9:9f:42:3a:f8:
7a:ae:a0:22:6f:e0:81:cb:6d:1a:43:4e:76:68:51:06:a4:0e:
0c:c3:0c:8a:8d:a0:93:b1:71:a4:75:e3:2b:fd:d9:a6:d3:47:
f4:94:18:cb:07:9f:0f:64:ec:bf:de:44:55:fa:42:a4:63:a9:
b6:f1:b1:c5:de:cb:a0:c3:ec:ef:2b:ca:4f:19:48:80:fe:ad:
0a:ac:22:bb:bb:8d:ec:19:c7:79:d7:2a:3e:7c:bc:4d:74:af:
c3:6b:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:56:16 2026 by rpki-client