Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/090572426C9211F1A839C10BCF1D38B0.roa
File: 090572426C9211F1A839C10BCF1D38B0.roa (raw, json)
Hash identifier: a1MNcmJJxAR1JMIsTshUQtn/R44mccVVf4WuFaZPwMI=
Subject key identifier: BB:CC:89:CC:2A:C9:C3:40:8C:78:DF:80:E0:A9:3D:4E:69:E9:4A:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/090572426C9211F1A839C10BCF1D38B0.roa
Signing time: Sat 20 Jun 2026 10:23:10 +0000
ROA not before: Sat 20 Jun 2026 10:23:05 +0000
ROA not after: Mon 27 Jul 2026 10:23:05 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114472 (0x1bf28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 20 10:23:05 2026 GMT
Not After : Jul 27 10:23:05 2026 GMT
Subject: CN=6a366a0e-2ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:4a:91:06:75:a0:df:cc:2e:2d:7c:1a:d7:
c8:ae:65:a9:c7:18:b2:3d:34:40:65:37:3b:87:57:
a8:da:7f:f5:1d:f2:86:62:86:7a:06:7b:6c:d8:5c:
46:e6:c9:1c:6a:88:01:ed:bd:65:70:d6:aa:18:28:
8e:c4:25:07:96:e2:06:12:2d:ab:d3:43:2c:3d:ee:
54:dd:74:c8:60:c2:a1:ef:05:31:a7:90:de:16:25:
82:2b:cd:98:e8:d4:e3:82:3f:dd:1d:90:3f:b6:74:
58:4e:c2:7e:b3:97:eb:8c:6e:62:e2:2f:69:ab:65:
d1:aa:97:47:64:0c:cc:58:c0:d7:5e:7e:bf:a6:ce:
74:b4:84:d4:8e:5f:2f:2c:f3:90:3f:0f:56:8a:c5:
63:c2:7e:22:12:9f:bd:05:ee:b8:2a:41:33:f3:a0:
d5:99:17:36:66:61:fe:35:00:4c:7d:30:e4:99:a0:
3f:61:d9:25:84:b6:99:84:d3:9d:64:7d:6e:18:b9:
4f:5a:10:20:94:ea:ac:d6:c2:8f:95:f5:29:80:ba:
7d:55:d5:15:0f:0f:32:8d:08:00:15:f2:66:9a:c0:
93:60:48:c9:36:cc:fb:a9:74:52:7d:fc:cf:8a:9c:
09:a0:85:db:69:88:77:b6:dd:88:c6:2a:19:36:fb:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:89:CC:2A:C9:C3:40:8C:78:DF:80:E0:A9:3D:4E:69:E9:4A:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/090572426C9211F1A839C10BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
156.225.126.0/24
156.227.193.0/24
156.227.199.0/24
156.229.51.0/24
156.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0c:d4:b1:a5:9a:12:bc:e0:af:61:3c:4b:c7:7d:37:3c:aa:
8f:24:de:a8:ba:41:eb:00:35:de:3b:76:e6:69:59:6f:fb:69:
81:de:a5:17:9d:9e:6e:1f:ed:ca:5e:c0:45:42:3b:0c:ca:05:
ee:9b:da:a2:72:ae:59:5f:0d:e0:37:51:9c:07:0a:fb:cc:b4:
32:f5:72:c8:30:fc:ea:f7:0a:5b:5a:73:70:ac:46:1b:3b:56:
72:92:cf:6c:be:f8:a9:96:c1:ed:ec:59:ea:c2:57:45:a4:7f:
ff:2a:d4:20:e4:7c:82:5e:50:aa:82:11:76:c6:68:0b:7d:e6:
d9:f8:f8:70:19:79:74:60:f4:78:b3:8f:6e:9d:fe:44:1e:24:
25:b7:0e:72:a9:18:7c:01:2a:a3:0d:0c:45:df:e0:eb:f3:e3:
24:e1:6e:36:61:78:07:49:02:9c:99:c5:19:10:36:15:01:a1:
32:89:96:51:6f:10:47:8c:4e:f8:5e:46:2c:8a:3b:56:ef:fe:
ec:94:bf:8c:35:ab:20:31:06:51:14:78:3f:8c:6b:98:2e:ff:
05:d5:94:c2:6e:ea:c5:80:a4:a4:45:2b:d9:cd:14:1a:fb:ef:
70:4a:58:ce:6d:8e:54:e5:93:79:45:c6:c6:fd:79:7c:fa:68:
34:27:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:32 2026 by rpki-client