Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048B9ADC72DE11F1B7677DA2CE1D38B0.roa
File: 048B9ADC72DE11F1B7677DA2CE1D38B0.roa (raw, json)
Hash identifier: QYl0hDFI6gvVXlytTzZljkc2J1c7249aVDrvWO8lbms=
Subject key identifier: 3A:FF:D6:1E:70:2A:44:DE:0F:83:F5:C5:2A:FC:CD:5A:CB:7A:65:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C111
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048B9ADC72DE11F1B7677DA2CE1D38B0.roa
Signing time: Sun 28 Jun 2026 10:42:11 +0000
ROA not before: Sun 28 Jun 2026 10:42:06 +0000
ROA not after: Mon 31 Aug 2026 10:42:06 +0000
asID: 399077
IP address blocks: 156.251.37.0/24 maxlen: 24
156.251.38.0/24 maxlen: 24
156.251.39.0/24 maxlen: 24
156.251.40.0/24 maxlen: 24
156.251.41.0/24 maxlen: 24
156.251.42.0/24 maxlen: 24
156.251.43.0/24 maxlen: 24
156.251.44.0/24 maxlen: 24
156.251.45.0/24 maxlen: 24
156.251.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114961 (0x1c111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 10:42:06 2026 GMT
Not After : Aug 31 10:42:06 2026 GMT
Subject: CN=6a40fa83-e56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:a9:76:09:2a:fe:99:d1:33:f1:63:d7:a3:
96:94:a5:e4:1f:50:d9:fe:03:5d:3e:2c:4f:b1:90:
00:54:c4:e0:76:cf:81:77:5e:7d:7d:b9:9b:1a:ee:
1f:2b:c8:ca:2e:69:d2:3a:8c:71:88:6e:f8:af:00:
a3:7d:90:57:69:b1:d2:5c:29:1a:ce:b0:cc:a3:46:
eb:05:3f:a0:5f:d8:5c:81:9e:9e:31:1e:01:70:3b:
04:c1:ff:56:d8:74:c6:c8:8d:44:b9:25:95:d1:f5:
44:f6:65:7d:89:9a:07:fa:08:aa:b4:2b:15:d4:b8:
59:aa:6a:28:4f:d6:15:d7:95:80:5f:1d:0c:57:af:
e8:46:bf:9a:e9:dd:07:54:e4:82:bf:16:d4:35:fd:
6e:92:ce:6c:55:68:8f:29:98:a1:2d:2f:c4:49:01:
2e:4c:b8:25:1c:78:e1:1f:5e:40:3a:b9:cf:20:c9:
2b:43:47:0a:d2:88:5c:37:75:91:f7:4d:be:f0:f3:
4c:e8:48:2c:36:18:04:da:bc:9a:d1:0d:7b:c5:cd:
81:69:68:4f:14:64:83:d2:10:50:7d:5e:aa:23:f9:
35:4f:05:e9:97:0e:7c:90:d8:6e:7b:1f:b6:77:97:
e7:a5:e2:7b:5b:4e:a8:12:34:cf:a5:cd:bb:f2:bf:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:D6:1E:70:2A:44:DE:0F:83:F5:C5:2A:FC:CD:5A:CB:7A:65:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048B9ADC72DE11F1B7677DA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.37.0-156.251.46.255
Signature Algorithm: sha256WithRSAEncryption
aa:34:dd:dd:4a:69:8c:d6:46:00:6c:f0:ef:8a:16:ae:e2:e6:
6f:e4:27:0c:d4:18:7f:b7:ab:86:e5:27:0f:8e:a6:7c:3d:c7:
08:41:53:e6:4f:38:12:86:1b:94:cf:f5:01:81:0b:c5:96:4a:
79:63:60:64:4b:f9:58:7e:7d:e9:cf:3e:9e:4f:a4:5c:6d:1f:
e0:51:4f:f4:4c:d4:34:a5:a4:82:f3:71:06:e8:52:13:ee:2a:
ef:35:cf:2f:0c:95:c5:2c:81:33:2f:17:00:91:ca:f3:ed:bc:
a8:d2:d7:69:63:d7:95:fa:c0:ca:25:2f:28:2f:81:06:ea:8f:
39:ce:ac:72:95:59:29:bf:ed:52:ed:db:02:71:82:da:c6:35:
7b:7e:3a:10:d2:e4:ae:ee:a7:19:12:6c:f9:80:7d:33:59:4c:
8a:94:e3:30:ab:34:2b:37:3a:dc:2a:12:59:e5:7b:8b:64:da:
fd:1e:b1:19:cc:af:03:30:10:c1:0f:db:e7:44:72:84:c5:3d:
ba:5f:6e:7a:8c:e3:f4:ac:37:5e:f7:b4:2b:f7:53:31:f3:d7:
9c:db:7f:47:d6:74:2b:c8:14:ab:eb:47:72:b2:69:de:2b:70:
40:5f:38:cd:f6:e1:f7:ec:a6:69:f2:52:a5:4b:d2:5e:db:98:
85:46:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:04 2026 by rpki-client