Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C571D0476E411F18104E314CF1D38B0.roa
File: 0C571D0476E411F18104E314CF1D38B0.roa (raw, json)
Hash identifier: NDPv9Bq9MjFaQEJaWCZHVKN2/+oAQcZsiiiDoYMVico=
Subject key identifier: 0B:F4:0A:07:58:72:EA:C6:57:E4:26:5A:BA:7A:0A:98:E7:E4:5E:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C286
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C571D0476E411F18104E314CF1D38B0.roa
Signing time: Fri 03 Jul 2026 13:35:26 +0000
ROA not before: Fri 03 Jul 2026 13:35:21 +0000
ROA not after: Mon 10 Aug 2026 13:35:21 +0000
asID: 154177
IP address blocks: 156.244.3.0/24 maxlen: 24
156.244.8.0/24 maxlen: 24
156.244.10.0/24 maxlen: 24
156.244.11.0/24 maxlen: 24
156.244.12.0/24 maxlen: 24
156.244.31.0/24 maxlen: 24
156.244.39.0/24 maxlen: 24
156.244.41.0/24 maxlen: 24
156.244.42.0/24 maxlen: 24
156.244.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115334 (0x1c286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 13:35:21 2026 GMT
Not After : Aug 10 13:35:21 2026 GMT
Subject: CN=6a47ba9e-e31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:b8:a4:45:99:f8:ad:b7:45:8b:6a:35:52:
99:d3:6c:14:1e:90:f0:d0:f1:38:04:bd:03:ab:fb:
94:b1:d3:87:74:3a:d1:db:1b:b8:2b:96:5e:a4:1b:
f8:86:05:68:a7:d7:39:b3:c1:ab:37:fb:76:c4:cb:
3c:25:41:57:90:99:34:cb:40:11:9c:c3:73:8f:c3:
c2:db:63:21:ad:9e:c2:33:03:dd:69:30:9e:d7:ed:
28:62:c1:01:04:20:00:4f:6d:23:22:25:f7:5b:57:
79:80:95:1a:f2:cb:ed:c3:84:90:63:55:eb:1e:1e:
2a:65:53:80:60:f4:e6:df:a8:3e:82:c3:2b:76:b7:
1b:fc:fd:17:6b:a5:c5:b9:5f:7c:d3:77:25:7c:29:
ef:a4:6f:56:3a:65:bc:a0:28:3a:e6:4d:1e:18:20:
9f:77:8a:7a:47:d6:5a:32:03:48:bb:c0:be:00:d0:
06:eb:d9:6b:a2:c0:4e:84:8a:a4:69:09:ab:5a:7f:
76:5f:36:d9:d0:d1:6b:f6:f3:96:a9:e7:8c:a3:0b:
b1:ca:9b:4a:6f:25:91:57:b9:51:6c:45:46:8b:b2:
a5:b1:c6:87:02:f2:12:82:41:9c:77:57:ad:37:25:
e8:8a:16:68:9b:4e:37:4f:22:02:f2:17:4e:a7:ec:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:0A:07:58:72:EA:C6:57:E4:26:5A:BA:7A:0A:98:E7:E4:5E:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C571D0476E411F18104E314CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.3.0/24
156.244.8.0/24
156.244.10.0-156.244.12.255
156.244.31.0/24
156.244.39.0/24
156.244.41.0-156.244.43.255
Signature Algorithm: sha256WithRSAEncryption
29:2d:8c:06:64:24:4a:c7:57:6e:7b:f8:2c:7b:6d:ba:b0:55:
d0:dd:7a:6d:88:1a:c4:75:de:9d:fd:63:20:c7:6e:e8:50:87:
93:6f:93:be:f1:f5:a3:bd:cf:4c:14:37:62:d3:00:32:ba:36:
95:15:ef:7c:bc:f4:69:68:56:3e:f6:cd:4d:45:e7:5a:4b:cc:
b2:f2:cd:5b:79:a1:ff:07:8b:65:a8:cb:a3:54:c7:6c:66:70:
85:b4:36:d0:c4:1c:bd:19:7f:08:33:27:f7:ce:82:bc:1c:2f:
d1:1c:1e:83:c3:a9:bf:f5:51:ac:a2:c7:df:9e:1f:12:e0:3b:
a2:37:4a:68:f4:4e:18:be:72:03:ed:92:ba:a3:d9:96:d3:c9:
a6:b5:5e:df:26:bc:a4:c1:d5:c0:e6:70:ec:eb:d7:ff:de:11:
99:1a:d3:c8:0f:b2:48:c4:aa:ba:18:12:51:13:b0:61:76:7c:
bc:dc:46:5c:74:3d:16:e5:96:c8:ed:f1:de:d1:f0:ac:f8:b6:
34:f8:40:5b:6f:22:50:61:8a:8e:f7:8e:69:18:31:d2:84:64:
5c:0c:13:0e:18:6e:4d:b0:96:ae:4b:e4:a7:42:5e:82:f7:7a:
33:b8:1e:4d:c1:de:ea:f5:71:ba:27:32:bb:3e:bb:90:1d:78:
18:07:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:51 2026 by rpki-client