Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C9949484F111F1A8708214CF1D38B0.roa
File: 44C9949484F111F1A8708214CF1D38B0.roa (raw, json)
Hash identifier: kNzUaqrkUHprUvWz/PSZ0lA59lVS3Y6MFvhM4CAOpEE=
Subject key identifier: F5:56:C7:B7:67:7A:AC:7F:77:D5:EA:5F:C1:47:44:D0:35:12:81:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C9949484F111F1A8708214CF1D38B0.roa
Signing time: Tue 21 Jul 2026 10:45:20 +0000
ROA not before: Tue 21 Jul 2026 10:45:16 +0000
ROA not after: Sat 29 Aug 2026 10:45:16 +0000
asID: 44559
IP address blocks: 156.246.160.0/24 maxlen: 24
156.246.166.0/24 maxlen: 24
156.246.167.0/24 maxlen: 24
156.246.168.0/24 maxlen: 24
156.246.169.0/24 maxlen: 24
156.246.170.0/24 maxlen: 24
156.246.171.0/24 maxlen: 24
156.246.172.0/24 maxlen: 24
156.246.173.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116456 (0x1c6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 10:45:16 2026 GMT
Not After : Aug 29 10:45:16 2026 GMT
Subject: CN=6a5f4dc0-26e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:60:b0:7b:f8:5d:70:7b:22:0a:dc:18:77:
74:6d:7a:06:b6:5f:d3:5d:38:08:ba:c5:24:fc:7f:
26:86:0e:d1:ab:c8:79:34:1b:92:c8:a1:4a:ad:75:
46:c2:5d:6a:4d:1e:02:0c:d3:aa:27:d4:15:12:a3:
16:83:ab:22:cd:f4:ab:b0:01:f5:a1:34:16:3b:0b:
b9:87:41:78:e8:83:69:bf:37:08:bc:fe:55:0d:78:
ae:d9:46:8a:7e:17:48:5a:98:c6:85:49:96:c2:e2:
06:b7:ba:f5:6b:57:01:47:01:71:88:07:be:ed:3e:
e9:e3:73:7f:0c:2b:2e:93:59:c8:f1:6b:af:76:2b:
ad:89:ff:b9:da:73:db:3b:95:30:52:f5:51:a1:d4:
ad:50:9d:1b:82:24:05:6d:85:6b:02:07:f2:63:a1:
22:32:22:b1:10:30:35:87:9e:05:7c:3d:cb:7a:90:
53:9d:30:30:66:86:1c:06:b9:ee:9b:34:b9:52:e1:
58:2f:c0:b6:d5:53:8b:b7:8d:2a:51:14:6a:72:79:
b3:8d:76:73:13:aa:da:31:9d:b8:3b:82:5a:0c:80:
56:6d:a4:98:3c:03:c5:91:08:d3:bf:bd:f7:72:ba:
b9:45:c2:be:8a:d8:4f:22:29:e7:77:5d:a4:78:95:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:56:C7:B7:67:7A:AC:7F:77:D5:EA:5F:C1:47:44:D0:35:12:81:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C9949484F111F1A8708214CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.160.0/24
156.246.166.0-156.246.173.255
156.246.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c1:b6:9d:26:a8:ad:2b:68:02:4a:ad:24:7f:1b:4d:ce:0b:
0f:72:0e:e0:b7:5e:2f:f0:63:9c:3b:0a:d6:b3:f2:b4:46:a5:
d6:66:34:95:48:d6:90:91:cf:21:05:8f:ba:30:cd:ca:bb:8c:
d4:8a:ec:14:cd:b7:43:ff:f9:bd:b5:2d:c7:02:57:53:1c:03:
ed:51:cb:82:ed:06:f8:99:a8:ff:54:c5:0f:a2:71:b4:67:ba:
14:4e:82:92:48:ad:fc:9f:e2:f7:76:09:bc:87:b2:6a:34:6d:
26:c0:cc:cc:e7:ab:3d:50:58:26:f6:03:f9:54:f3:bb:4b:84:
1a:f9:20:f5:b2:d5:f0:93:db:bd:f2:50:c4:b4:7c:26:c0:c5:
e9:f3:c9:9e:44:2b:90:ef:e9:03:88:e8:b2:a9:5f:be:76:78:
49:c2:3c:74:7f:7c:3d:3a:1b:00:fc:49:30:56:01:9b:8f:47:
67:a4:04:8a:c6:a7:b7:9a:cd:39:43:d4:d8:98:f7:6f:10:7a:
aa:54:16:b4:2c:3d:08:1f:a6:5c:39:ad:20:e4:66:ad:38:92:
03:39:da:51:2a:22:18:9c:ee:5c:75:ca:05:58:18:bd:8c:6c:
c3:6b:f9:fa:76:1c:41:6d:ab:25:cb:22:51:77:3e:af:0d:0d:
b2:40:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:45 2026 by rpki-client