Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01483C4E69C011F1889747E5CE1D38B0.roa
File: 01483C4E69C011F1889747E5CE1D38B0.roa (raw, json)
Hash identifier: zNNObqsggGhZynavketnZk2VIXVPpiJEa6s7EH+nWSo=
Subject key identifier: 20:D8:9B:14:14:63:FF:1B:44:6E:6D:0D:F6:0E:59:FB:B5:0F:F5:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01483C4E69C011F1889747E5CE1D38B0.roa
Signing time: Tue 16 Jun 2026 20:14:40 +0000
ROA not before: Tue 16 Jun 2026 20:14:33 +0000
ROA not after: Sat 05 Sep 2026 20:14:33 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114291 (0x1be73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 20:14:33 2026 GMT
Not After : Sep 5 20:14:33 2026 GMT
Subject: CN=6a31aeb0-c306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:f5:80:df:9f:69:3a:02:18:a2:3e:04:17:
b2:e2:66:cb:d5:19:b4:89:c2:c6:7a:87:48:c5:6d:
23:c4:22:16:15:08:98:35:a0:29:18:16:e1:d4:db:
11:c3:0d:61:d8:8a:a1:0e:e5:37:23:8f:14:4f:e5:
eb:be:1c:33:3f:93:61:18:a5:01:e8:21:ce:51:88:
8d:66:b2:73:be:e6:bf:c1:62:7a:05:b3:28:82:2e:
67:fb:ed:1b:0f:bb:3e:28:0f:76:a0:4c:6a:6a:c5:
6a:84:46:24:fd:c4:23:be:61:d1:02:5b:62:71:32:
f8:28:83:f9:a3:22:21:1f:31:5d:bf:74:fc:4a:0f:
c8:9a:e4:a1:71:f1:24:b7:8b:4d:f1:92:01:1f:6f:
16:62:f3:c0:11:dc:64:b9:d5:1f:26:f6:bb:6e:2b:
b7:37:93:87:99:20:c5:48:ed:b7:db:d7:73:b4:25:
f5:89:f2:bd:d6:b5:6c:71:58:e1:bc:1a:ea:be:39:
80:5b:cc:df:95:bc:18:b7:a1:da:94:06:e7:19:35:
58:3f:39:70:bb:6a:37:42:2c:47:74:7e:32:6f:f0:
26:7a:90:f5:c6:b7:80:c3:f3:eb:2d:8a:7a:31:3a:
32:bc:0d:a8:62:ea:1a:7b:0f:ea:c6:f0:a8:51:d6:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:9B:14:14:63:FF:1B:44:6E:6D:0D:F6:0E:59:FB:B5:0F:F5:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01483C4E69C011F1889747E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d9:72:ef:0d:b6:0b:90:03:a4:68:d6:c7:a7:24:98:a7:33:
05:5c:02:dc:95:f3:da:49:e9:59:71:52:10:01:bf:92:61:20:
55:0a:e4:1c:58:48:09:a5:bd:74:8d:39:a2:c8:53:11:53:80:
56:8b:fe:1d:47:88:a1:b4:ed:8a:65:69:b6:a6:ce:94:f0:6b:
1a:90:d0:c7:71:c3:2f:29:15:83:92:38:ad:1b:55:85:bd:29:
c6:96:f9:31:ec:09:83:40:33:9e:42:04:2e:65:21:f1:13:71:
30:fa:ba:9b:53:59:f9:da:9f:36:e5:3f:f3:a4:db:28:ce:98:
d6:e9:d9:d2:2a:25:a6:96:d5:a6:74:48:fc:92:13:3b:2e:ec:
28:82:62:b4:6e:56:1f:5d:a4:23:5d:c9:e6:8a:d6:f5:cc:0a:
f9:44:f2:5b:83:dd:ae:1d:d7:da:d6:21:a6:b5:68:66:99:58:
38:e7:35:92:71:af:56:c7:29:fc:fa:4d:76:99:2b:e7:77:00:
3e:93:cb:79:8f:ba:26:21:56:e1:68:5f:ba:21:32:68:7a:48:
0d:a6:bd:87:73:27:bd:70:be:96:31:01:ab:32:6b:c3:1a:cd:
b3:bf:49:ee:d2:ba:30:2b:af:81:a2:3f:fd:4d:13:8e:25:70:
6b:7f:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:52 2026 by rpki-client