Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33AD47884F311F1AACD29A6CE1D38B0.roa
File: F33AD47884F311F1AACD29A6CE1D38B0.roa (raw, json)
Hash identifier: rYv2k0MmO0VAa0Bl9dslOhEpF3dn5oWx7D1gDot0bXs=
Subject key identifier: EF:78:1E:FB:61:03:FA:E0:DA:5A:BC:EB:3B:6C:B4:F4:5C:FA:56:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33AD47884F311F1AACD29A6CE1D38B0.roa
Signing time: Tue 21 Jul 2026 11:04:32 +0000
ROA not before: Tue 21 Jul 2026 11:04:28 +0000
ROA not after: Sat 29 Aug 2026 11:04:28 +0000
asID: 44559
IP address blocks: 156.246.208.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116462 (0x1c6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 11:04:28 2026 GMT
Not After : Aug 29 11:04:28 2026 GMT
Subject: CN=6a5f5240-83d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:27:92:61:ac:7e:d7:25:ec:21:6f:d8:c1:
ab:be:da:ab:2b:e7:d9:81:ad:00:08:98:d2:6b:37:
e6:f0:95:75:e5:51:da:b0:56:58:64:8c:6f:49:2b:
f1:04:f0:88:fd:8e:4d:05:19:9b:d0:7e:ac:b3:ca:
cd:d6:7f:37:19:7c:05:ac:ef:8f:25:94:c0:f2:65:
e0:8e:e6:d7:34:41:fb:41:ca:e1:02:7e:f3:10:99:
9e:e2:c9:76:b6:b3:51:11:45:78:ef:18:ad:80:89:
39:8d:70:1e:b9:04:fe:70:c6:24:d5:9c:10:d8:ce:
b3:ac:a2:ae:0d:8c:2d:23:41:5a:4a:96:5f:0c:a4:
df:89:57:70:b1:b8:9e:4d:75:9d:81:d8:8e:56:8c:
a5:87:30:5d:fe:13:58:17:e6:1c:44:66:bd:4d:2f:
ce:fd:ea:c5:a0:a0:2b:6a:1c:10:f6:6f:49:3e:19:
b9:bd:02:98:9e:56:03:8f:cb:3a:63:60:6b:4c:6c:
15:80:aa:a8:a1:53:8d:ba:a8:91:5f:99:48:34:88:
8c:76:59:90:7f:94:05:c9:12:af:bb:4b:19:36:b8:
0f:68:bc:66:bf:ab:0d:4c:59:6f:43:3f:76:c0:2a:
1b:54:6b:e5:c3:33:ae:62:c1:d2:26:31:a1:1a:25:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:78:1E:FB:61:03:FA:E0:DA:5A:BC:EB:3B:6C:B4:F4:5C:FA:56:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33AD47884F311F1AACD29A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.208.0-156.246.217.255
Signature Algorithm: sha256WithRSAEncryption
05:ca:a8:ad:f4:a3:6f:c8:48:df:48:6a:7e:79:f7:56:f4:41:
e5:bc:38:6b:cc:ce:36:21:af:d1:a4:cf:c1:16:4a:1e:7e:01:
b8:b8:86:2d:28:44:5d:44:86:f6:93:ac:57:b5:61:a1:b9:41:
9e:88:38:a1:99:85:ae:44:b8:29:32:b5:0d:14:a0:eb:28:1b:
15:c5:80:85:aa:01:74:65:9e:f6:e9:46:c9:ba:74:d5:64:d6:
6b:d1:b4:0c:26:21:c0:f0:b9:d0:1b:2a:b0:67:db:7f:a9:5c:
ba:fc:a6:92:d8:cf:78:43:b4:b0:ca:2e:18:38:3e:a2:c5:59:
65:c2:66:0d:9d:a0:c6:17:0d:16:3f:9d:aa:ce:2e:d5:2d:31:
b3:7b:c3:03:ab:8f:83:5e:2f:86:15:8a:23:02:23:bd:a1:3b:
6f:3e:ac:6d:58:a6:6e:73:d6:70:6c:0d:ee:96:a8:da:7e:10:
f5:c2:a0:0b:3a:cc:c3:b0:72:ed:50:b8:93:96:0d:30:b3:61:
4f:ad:ef:8f:f8:91:58:fd:95:c6:c7:c2:f0:84:ac:58:2f:82:
22:e7:1a:ca:6e:c7:20:fb:69:40:92:31:86:ab:f6:a6:35:6f:
da:3d:61:1c:06:40:7d:30:d3:ec:49:b4:f4:b3:2e:e2:cb:27:
01:14:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:46 2026 by rpki-client