Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19A775F67F6511F19D8CAD06CF1D38B0.roa
File: 19A775F67F6511F19D8CAD06CF1D38B0.roa (raw, json)
Hash identifier: udpOGR8ZCEAWRnZ/7GH5BMKxIsg8WNZf1LW5TPe0BFA=
Subject key identifier: D7:2D:C7:BA:76:2E:69:A3:6B:A1:70:19:F9:03:76:E9:60:0C:3F:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19A775F67F6511F19D8CAD06CF1D38B0.roa
Signing time: Tue 14 Jul 2026 09:19:23 +0000
ROA not before: Tue 14 Jul 2026 09:19:18 +0000
ROA not after: Fri 21 Aug 2026 09:19:18 +0000
asID: 214143
IP address blocks: 156.230.136.0/21 maxlen: 24
156.231.13.0/24 maxlen: 24
156.231.176.0/21 maxlen: 24
156.249.192.0/23 maxlen: 24
156.249.198.0/23 maxlen: 24
156.249.210.0/23 maxlen: 24
156.252.27.0/24 maxlen: 24
156.252.28.0/24 maxlen: 24
156.254.112.0/23 maxlen: 24
156.255.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115967 (0x1c4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 09:19:18 2026 GMT
Not After : Aug 21 09:19:18 2026 GMT
Subject: CN=6a55ff1b-c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:c3:8a:52:ab:62:6f:dc:dd:91:39:3b:1e:
98:a9:be:77:58:3b:3b:4c:f0:55:c9:1b:e8:ec:99:
0c:39:50:e2:be:4d:ff:97:ee:b7:6d:89:3b:85:a1:
93:60:45:39:04:e0:1c:cb:cc:65:23:d1:c7:13:fe:
a3:77:ca:bd:dd:19:8f:68:20:fc:9f:4a:70:eb:ce:
3b:15:a2:14:76:3c:19:b2:6a:46:cb:17:00:a2:ce:
84:8b:47:4a:64:1f:27:78:4f:04:b7:f0:92:e2:8f:
65:57:95:66:c9:92:27:39:2d:08:d1:8b:07:3e:f7:
41:06:9e:8b:80:b9:90:be:45:a4:38:a1:3f:73:78:
07:75:91:78:f2:9f:cd:42:ab:4e:b7:75:a9:be:93:
c2:32:ba:d7:bd:3a:2a:5d:d8:60:81:2f:27:6a:95:
7b:ec:17:3d:35:b8:51:63:de:94:f6:bb:ba:bf:16:
f2:48:fd:ed:29:39:b9:43:3e:94:8f:45:cc:ee:f3:
86:73:21:bf:5d:47:51:c8:cd:cf:38:13:88:44:72:
20:d7:1a:fb:2d:68:5c:34:5f:2a:0c:11:f8:1d:c2:
aa:2e:85:ee:d8:f8:32:65:07:22:f2:72:4a:3f:1e:
00:5a:99:a0:be:1e:95:5a:45:06:e6:0a:58:08:92:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:C7:BA:76:2E:69:A3:6B:A1:70:19:F9:03:76:E9:60:0C:3F:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19A775F67F6511F19D8CAD06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.136.0/21
156.231.13.0/24
156.231.176.0/21
156.249.192.0/23
156.249.198.0/23
156.249.210.0/23
156.252.27.0-156.252.28.255
156.254.112.0/23
156.255.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e1:d2:a8:3d:36:a0:0b:4c:9d:6a:4f:6e:25:2d:70:76:51:
c5:b4:3d:a1:06:cb:f0:e3:05:dc:8a:37:31:c9:0b:17:5b:7b:
19:81:f5:50:63:20:a2:67:38:64:c3:d1:e8:b5:8f:7c:28:ab:
41:71:c0:db:e4:11:0f:21:ac:bf:3d:e3:26:52:8d:7a:45:bf:
be:ec:6a:43:a9:12:5b:67:4e:40:87:24:be:36:7c:38:36:99:
12:6b:60:97:a7:9c:0d:94:49:50:f0:03:9c:02:ae:74:ce:c9:
20:88:74:05:0b:f9:bc:72:53:d6:f8:e8:5c:96:7e:93:9d:f8:
91:f1:32:67:a3:3d:be:c1:21:20:b2:41:e7:ad:dd:ad:7d:31:
4a:9a:6b:b7:35:2a:49:ce:76:66:bc:1c:6e:b4:14:92:ab:1c:
b8:e4:6c:aa:74:4f:12:40:fe:34:7e:80:81:54:2a:68:ac:d9:
84:f2:53:be:d2:cf:d8:36:e6:90:f9:be:29:bc:ce:80:fd:f2:
46:79:9a:c9:7b:65:b1:8c:3b:26:99:af:d5:10:f8:da:8a:54:
5a:14:fc:d6:3a:6e:0d:3a:cf:87:6b:e7:34:88:1f:8e:f5:c3:
86:d8:48:7d:15:ef:0c:27:32:df:56:5b:35:32:17:4d:cb:4e:
e4:16:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:00 2026 by rpki-client