Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F28DC04E8A5711F1AB8D7F0DCF1D38B0.roa
File: F28DC04E8A5711F1AB8D7F0DCF1D38B0.roa (raw, json)
Hash identifier: dCRMsPENPHM+UctDBVCg+8PJH+AuQ+K5pZ206azahd0=
Subject key identifier: 24:CA:27:46:03:D7:A9:4C:6D:14:96:CD:2E:32:A9:7C:3F:2E:B2:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C84A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F28DC04E8A5711F1AB8D7F0DCF1D38B0.roa
Signing time: Tue 28 Jul 2026 07:42:56 +0000
ROA not before: Tue 28 Jul 2026 07:42:52 +0000
ROA not after: Sat 05 Sep 2026 07:42:52 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116810 (0x1c84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 07:42:52 2026 GMT
Not After : Sep 5 07:42:52 2026 GMT
Subject: CN=6a685d80-5b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:30:f7:5f:42:ee:cf:ce:ba:da:59:35:54:
fa:3e:be:75:4d:5a:b5:97:40:22:34:ad:07:1d:b3:
81:f7:96:e4:a8:e6:59:ea:09:f9:64:4b:2f:49:4b:
2f:95:bf:fe:20:c2:20:de:73:d7:1c:94:da:a7:83:
8d:b5:3e:21:ca:9e:cd:c0:62:c1:ab:4f:cb:b8:d9:
91:68:a9:78:21:a8:a5:cb:da:2b:df:e4:ff:65:99:
f1:52:ac:a4:ec:ff:bc:32:6c:6b:0c:58:a1:ee:1c:
56:bb:90:57:84:54:89:11:20:4c:b2:1c:6e:c7:77:
88:c6:fd:e7:cc:6c:f3:70:bf:61:1f:dc:ad:37:df:
02:d6:93:f2:67:9b:3d:cf:05:d3:b0:43:62:2c:b8:
d6:c3:8b:04:2c:1e:ec:23:14:f0:a1:d8:6c:31:80:
62:b8:03:06:e2:b4:cb:c4:65:30:c9:65:7d:f6:63:
41:f5:28:ec:ca:90:04:8d:73:cd:5b:a5:a6:b8:53:
44:32:ee:70:8c:ee:0f:a4:ca:4e:08:85:cb:08:64:
f9:1f:91:ac:60:d0:a5:bc:7b:1c:0d:f7:61:06:a9:
bf:62:8e:5b:a6:40:04:7c:66:7b:ae:80:c7:5c:9d:
d5:d9:19:4c:65:be:1c:ff:cb:da:01:96:ff:d8:0a:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:27:46:03:D7:A9:4C:6D:14:96:CD:2E:32:A9:7C:3F:2E:B2:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F28DC04E8A5711F1AB8D7F0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:db:2f:89:65:fb:f9:92:f3:2d:c0:d0:1d:f9:55:cf:23:29:
8b:40:c5:3d:87:d2:23:ed:30:bf:f8:ff:26:38:18:3a:8f:42:
c0:18:98:c4:0f:d9:40:fc:71:0d:18:bb:71:ac:41:56:cb:4d:
6e:18:17:0d:c8:11:98:97:7e:24:c6:d8:b0:6e:0a:35:35:f3:
57:2d:4f:91:66:f3:4a:26:57:5e:9c:8b:34:c7:8c:74:13:68:
c2:e0:2b:19:a2:39:8b:62:a0:f1:4f:5b:66:34:c7:ce:53:b1:
32:49:da:ae:8f:aa:ee:12:89:6d:85:f5:d5:5c:85:82:b1:5c:
83:a7:63:c7:ef:cc:52:ba:c2:cc:09:71:01:87:22:56:40:f1:
73:99:7f:7e:43:0c:3a:d0:b2:63:c8:5e:0d:b1:cf:bd:1b:d7:
60:4b:07:02:c5:38:9d:0a:81:80:91:30:39:7c:b0:40:ff:a7:
14:66:e2:75:ce:f5:de:47:63:60:8c:26:cc:fb:02:cc:41:e4:
68:98:88:c8:18:ae:08:33:59:2a:62:ec:eb:70:95:6f:31:5a:
13:90:cc:30:0c:01:13:ee:3f:56:3f:9c:ad:df:45:da:df:b1:
0f:96:d0:99:5e:c9:32:a0:d9:08:2e:6a:f9:cf:a0:a4:b0:de:
e0:eb:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:06 2026 by rpki-client