Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12503D8073E711F1A8504AE5CE1D38B0.roa
File: 12503D8073E711F1A8504AE5CE1D38B0.roa (raw, json)
Hash identifier: A613/tGUqpcbhNOOKXPUPLQPaYU428XQ0Qp6u7bNd54=
Subject key identifier: A6:70:C1:29:25:B5:30:BC:D3:18:5B:3C:76:A9:E4:27:0D:D1:57:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C198
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12503D8073E711F1A8504AE5CE1D38B0.roa
Signing time: Mon 29 Jun 2026 18:19:31 +0000
ROA not before: Mon 29 Jun 2026 18:19:26 +0000
ROA not after: Mon 31 Aug 2026 18:19:26 +0000
asID: 399077
IP address blocks: 156.251.27.0/24 maxlen: 24
156.251.28.0/24 maxlen: 24
156.251.29.0/24 maxlen: 24
156.251.30.0/24 maxlen: 24
156.251.31.0/24 maxlen: 24
156.251.32.0/24 maxlen: 24
156.251.33.0/24 maxlen: 24
156.251.34.0/24 maxlen: 24
156.251.35.0/24 maxlen: 24
156.251.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115096 (0x1c198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 18:19:26 2026 GMT
Not After : Aug 31 18:19:26 2026 GMT
Subject: CN=6a42b733-98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:7f:54:e7:df:f0:f9:c3:8b:62:16:be:48:
eb:7b:04:e5:ec:22:c5:41:4d:58:58:19:d4:0e:51:
d0:49:d3:8a:64:22:ff:1f:5d:ae:fe:08:2f:9b:68:
d1:98:f2:ea:23:d1:89:63:21:f9:a1:d4:dc:29:50:
f7:c2:87:c1:5a:7f:58:1c:6d:ef:c7:ec:5d:ca:2c:
ce:1f:5d:e9:d7:5d:63:2a:1c:cb:9e:99:b7:5d:eb:
05:7f:3d:14:87:aa:8e:9a:36:af:cc:35:4e:89:95:
ab:59:5e:5c:36:ba:67:09:aa:42:a9:79:45:db:78:
7e:35:60:23:b5:1f:3c:7f:03:68:db:c0:bf:dd:29:
d1:cf:f6:bc:ae:d9:fe:24:f4:2d:bb:57:6d:91:95:
4e:54:04:70:85:b0:6a:46:bb:20:3d:b8:09:26:90:
d4:c7:66:08:c3:5d:b3:3d:bb:4b:14:f2:5f:cc:5c:
d2:27:95:db:97:85:b5:bd:89:e7:d7:56:15:df:66:
05:a1:fa:cf:23:f9:03:eb:85:6f:ad:cf:65:81:31:
c4:32:8e:51:5c:8f:17:65:1f:83:4b:13:9e:35:f2:
b7:a4:f4:da:c8:cc:dc:7a:4b:ff:ee:4f:d8:0e:fb:
60:d5:ae:9a:e7:1e:77:8d:70:ba:08:24:01:99:b3:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:C1:29:25:B5:30:BC:D3:18:5B:3C:76:A9:E4:27:0D:D1:57:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12503D8073E711F1A8504AE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.27.0-156.251.36.255
Signature Algorithm: sha256WithRSAEncryption
76:71:1f:40:c8:b4:0b:83:b0:9d:3c:41:b5:d3:40:12:19:ed:
f1:05:fd:4a:ac:b9:a8:12:d4:6d:37:23:ed:e6:a7:94:bd:82:
1b:43:23:64:55:62:39:d0:26:08:3f:db:ed:0e:9f:5b:69:aa:
48:dd:cc:99:2e:4c:f0:bc:a7:1e:ac:b4:68:37:30:ee:24:30:
42:6c:76:12:1a:6e:34:2a:af:da:fc:74:5d:91:fa:48:be:ce:
df:b4:14:62:39:44:0f:61:97:66:61:48:ea:9a:94:6e:7b:22:
75:f1:54:46:f3:e3:93:3c:ac:ee:69:9d:0d:e9:e2:a8:a5:d8:
1d:4c:df:50:db:c1:5e:09:f0:3b:1d:78:7d:13:9b:55:e1:b4:
36:a1:f5:51:3e:29:0f:b8:64:2c:82:be:ee:52:41:49:01:dc:
99:5a:f9:56:7b:90:a0:be:c6:42:9c:e3:22:be:7e:93:58:31:
6c:61:c9:3b:df:2d:63:b7:e5:c0:66:c0:46:89:9a:be:84:7d:
e6:81:e2:95:f2:49:cc:53:11:dc:22:7f:05:75:22:30:39:d9:
b6:81:f4:61:9b:79:1f:d1:ea:18:6d:a2:2a:88:11:cf:3b:a4:
e3:64:4d:e0:a3:cc:44:01:c8:f2:9e:42:47:de:b2:1f:93:ec:
8d:95:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:30 2026 by rpki-client