Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05A184E6720111F1A0DF91E3CE1D38B0.roa
File: 05A184E6720111F1A0DF91E3CE1D38B0.roa (raw, json)
Hash identifier: foV2Oz8xBmBdPY+oEpfDFBc220gMmP0MkS/i5/mtuZM=
Subject key identifier: 40:C1:BD:AB:C5:B0:46:52:86:9D:CD:AA:44:B9:B7:95:F8:89:D4:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05A184E6720111F1A0DF91E3CE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:20:14 +0000
ROA not before: Sat 27 Jun 2026 08:20:10 +0000
ROA not after: Mon 31 Aug 2026 08:20:10 +0000
asID: 399077
IP address blocks: 156.240.231.0/24 maxlen: 24
156.240.232.0/24 maxlen: 24
156.240.233.0/24 maxlen: 24
156.240.234.0/24 maxlen: 24
156.240.235.0/24 maxlen: 24
156.240.236.0/24 maxlen: 24
156.240.237.0/24 maxlen: 24
156.240.238.0/24 maxlen: 24
156.240.239.0/24 maxlen: 24
156.240.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114900 (0x1c0d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:20:10 2026 GMT
Not After : Aug 31 08:20:10 2026 GMT
Subject: CN=6a3f87be-da78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:11:6b:a7:87:6f:39:eb:c6:1a:b3:2c:d5:
e1:4b:24:de:f3:99:91:03:6a:8b:c8:cc:02:90:bc:
42:a1:e3:a9:c3:ad:e4:1d:8c:ff:9f:63:1d:fe:c0:
dc:9e:76:8c:db:76:b6:a2:f4:65:eb:33:88:62:ea:
a6:b9:0d:41:23:43:b4:43:cb:89:64:7e:3e:60:a6:
ee:15:b1:59:ad:ad:f2:92:09:50:89:88:70:ee:5d:
69:fd:5b:66:f7:11:3e:de:ff:15:86:d8:27:c9:ba:
a5:22:21:7b:2e:76:8f:9b:bd:df:4e:18:4e:3d:84:
23:3f:8c:61:47:2b:90:2a:2d:a1:b2:66:79:8f:52:
de:8d:7c:fb:cd:ea:9d:44:b5:96:df:24:d4:7a:d8:
f1:49:c0:ca:f3:6b:51:92:83:a6:73:6d:52:a0:2c:
a7:d0:06:33:2f:f9:1c:24:d3:a9:bf:da:8b:9b:b9:
f5:d8:fb:7e:ed:df:64:9f:d7:63:78:15:6a:b8:a7:
61:45:c7:e6:3d:87:ea:47:9c:ca:92:8b:fb:72:d7:
85:9b:32:46:bc:6e:0e:3d:7e:9b:80:5e:2f:18:df:
c9:b4:bd:0c:4d:a5:75:69:11:fe:e6:40:16:b0:6c:
eb:6a:0c:61:10:77:20:2a:48:0b:42:c0:b2:6c:d0:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:BD:AB:C5:B0:46:52:86:9D:CD:AA:44:B9:B7:95:F8:89:D4:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05A184E6720111F1A0DF91E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.231.0-156.240.240.255
Signature Algorithm: sha256WithRSAEncryption
68:0d:e0:4f:d8:62:d0:e9:b1:8b:14:d7:d7:e8:8a:57:7c:50:
b5:35:d9:4d:73:e7:ec:39:1e:72:27:b2:6b:15:85:88:83:57:
ea:00:27:92:79:09:b3:87:5f:29:79:09:52:c1:42:f2:06:9f:
71:49:ca:25:ca:5f:43:5f:ff:0a:f0:15:eb:ce:45:6c:c5:2b:
b5:4b:3a:a5:6d:69:ee:89:3f:e8:d2:d6:6b:7b:92:20:3e:39:
b4:a4:27:63:0b:e5:35:15:0d:1b:13:03:2b:0a:08:44:54:c5:
44:73:6b:eb:4b:49:2a:6c:1a:78:1c:5a:e4:01:d3:66:96:b8:
03:1b:c8:a9:a6:0f:eb:02:7f:df:5b:46:fb:d5:c1:f6:7c:a9:
03:39:90:d7:b3:51:64:4c:d1:77:e7:b0:61:f5:f0:8a:68:32:
1c:83:00:78:36:d9:78:92:4e:b2:15:f0:c9:bd:10:df:f3:ac:
43:b0:ff:26:da:62:3e:05:44:f9:15:9a:5b:38:1b:d8:9e:29:
99:b8:e2:38:15:bf:f3:84:be:b1:6e:d8:6f:d1:24:f2:03:de:
da:9e:38:8d:86:32:62:0e:f9:3d:90:fb:d0:cc:8e:02:71:29:
27:bd:23:22:a6:80:eb:e0:b2:ea:8f:13:3f:c5:63:9e:41:45:
e0:9b:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:57 2026 by rpki-client