Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C47440A84F611F195757AB6CE1D38B0.roa
File: 9C47440A84F611F195757AB6CE1D38B0.roa (raw, json)
Hash identifier: 5roGHGaKKfMJtKz0wTPU2CDvVv3Z+KjC9X/9E5Cu78g=
Subject key identifier: C8:94:D3:3C:FC:9C:4D:9D:EA:79:4A:DC:B8:91:CB:BF:1F:44:D6:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C47440A84F611F195757AB6CE1D38B0.roa
Signing time: Tue 21 Jul 2026 11:23:35 +0000
ROA not before: Tue 21 Jul 2026 11:23:31 +0000
ROA not after: Sat 29 Aug 2026 11:23:31 +0000
asID: 44559
IP address blocks: 156.246.238.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116472 (0x1c6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 11:23:31 2026 GMT
Not After : Aug 29 11:23:31 2026 GMT
Subject: CN=6a5f56b7-cfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:08:1b:ae:0e:89:a5:21:44:63:1a:d6:00:
1f:0b:05:1f:0f:90:4f:d3:2c:7e:c9:f6:80:fb:9d:
73:df:02:78:e7:4b:e3:9c:8d:a2:9d:b3:ea:40:78:
70:b2:5b:9a:a3:3a:af:0a:62:ae:4a:60:b1:dc:d6:
b5:7a:5f:85:f6:45:ac:51:c0:0a:ba:33:c5:fa:4a:
67:3f:31:40:a0:0a:90:e3:ac:d6:21:24:e2:00:e1:
74:75:ad:3b:19:c5:41:db:21:94:22:e6:02:13:0c:
9c:06:f3:d9:03:94:df:e1:ef:17:aa:56:9d:e0:a5:
83:e4:9d:5f:e5:8f:bb:cb:e1:f9:2d:a6:55:9b:26:
35:c9:3d:40:57:04:cc:c0:89:ec:5a:3e:ce:f5:ed:
8a:86:b7:2b:33:ea:84:e4:14:f7:88:3d:8a:2a:c8:
3e:84:0f:e9:2e:82:59:01:86:09:c9:89:cc:e4:62:
52:d0:8c:57:07:30:14:78:08:bf:c5:72:95:66:6e:
1a:f1:ac:13:c2:c6:7f:35:c3:bf:33:b1:5a:14:72:
2f:5c:50:63:f7:46:10:23:c3:e5:fb:98:55:b9:7c:
b2:aa:da:d0:da:eb:61:82:73:5d:e4:03:3c:15:9a:
7a:a7:ef:73:93:e5:ff:de:a8:4c:10:2d:03:56:b1:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:D3:3C:FC:9C:4D:9D:EA:79:4A:DC:B8:91:CB:BF:1F:44:D6:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C47440A84F611F195757AB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.238.0-156.246.247.255
Signature Algorithm: sha256WithRSAEncryption
b9:35:5e:0c:e9:ad:9e:77:5c:d7:ec:6f:0a:6c:d8:97:f2:9e:
84:ae:f5:11:15:01:73:40:29:9e:21:c6:4a:84:ef:2e:5e:0f:
40:fb:e7:80:6b:60:c9:30:76:71:41:b3:43:fb:c0:31:1e:77:
15:5c:ec:95:5d:14:44:14:be:82:73:12:3f:53:2b:58:2e:fb:
de:fd:16:57:09:ca:05:b4:e7:90:89:38:dd:af:77:e0:a5:57:
d4:a4:a8:ef:05:6e:e9:c5:b0:9d:53:54:ba:db:62:e5:57:34:
3b:8b:ff:11:4f:dc:e2:66:25:bc:42:09:db:bf:19:d4:3a:06:
ab:3f:c2:4c:31:01:3c:e5:df:1a:37:f1:a5:f2:ed:a5:a3:ed:
43:82:fb:6b:6d:17:f7:62:b5:fd:59:90:a7:ac:3e:e4:e0:fa:
81:b3:86:c3:7a:95:34:6e:27:b6:c9:48:89:6f:a5:1d:6c:f8:
ac:b1:5c:5a:8b:f6:a3:ea:a0:27:97:47:50:8d:6d:9f:7f:87:
db:2e:f8:f5:04:90:af:3c:13:75:33:75:45:fa:92:2a:c1:34:
37:4f:69:8d:15:90:48:89:66:52:1e:29:f9:c6:98:c8:66:71:
23:2a:55:d6:e9:45:e5:03:f0:ce:6f:a0:83:b7:4a:50:23:16:
a9:47:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:44 2026 by rpki-client