Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B153F2271FF11F1B7C42BD9CE1D38B0.roa
File: 1B153F2271FF11F1B7C42BD9CE1D38B0.roa (raw, json)
Hash identifier: 914dJYI442uaDZX9JRZzAWfRKOEpHE05iXgt0I3aQxM=
Subject key identifier: 53:B4:29:53:E2:13:A7:DF:4A:28:8F:E2:4E:53:08:C0:32:C5:FD:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B153F2271FF11F1B7C42BD9CE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:06:31 +0000
ROA not before: Sat 27 Jun 2026 08:06:26 +0000
ROA not after: Mon 31 Aug 2026 08:06:26 +0000
asID: 399077
IP address blocks: 156.240.252.0/24 maxlen: 24
156.240.253.0/24 maxlen: 24
156.240.254.0/24 maxlen: 24
156.240.255.0/24 maxlen: 24
156.251.0.0/24 maxlen: 24
156.251.1.0/24 maxlen: 24
156.251.2.0/24 maxlen: 24
156.251.3.0/24 maxlen: 24
156.251.4.0/24 maxlen: 24
156.251.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114896 (0x1c0d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:06:26 2026 GMT
Not After : Aug 31 08:06:26 2026 GMT
Subject: CN=6a3f8487-f726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:7b:ea:bb:4f:24:5b:f1:e1:18:bc:b5:74:
9f:26:11:fc:36:70:77:e0:20:09:88:b4:56:c7:9d:
88:61:00:5c:b5:7e:01:f6:96:7d:0d:71:2e:5a:56:
87:4d:f7:79:26:2e:b3:d4:33:3c:0c:e2:f2:2f:d7:
39:c8:95:b9:27:35:49:96:18:60:96:40:74:59:cf:
15:65:fd:e4:fc:37:68:c9:f6:16:f5:d7:6f:1e:2b:
0c:00:f0:14:ab:8b:02:1f:d3:cb:04:60:49:35:6e:
fb:9e:9d:0a:01:b0:a1:8c:99:0f:ce:eb:fb:d2:ae:
e4:e5:74:c4:a8:cf:06:fa:74:3e:f8:7f:f1:ea:e9:
c0:99:04:d5:25:e7:9f:83:47:af:9b:59:b1:7e:a6:
70:30:e6:38:37:de:e2:36:a9:f3:b6:59:a4:b7:63:
10:79:1b:1f:bd:fd:37:9f:75:d0:d0:17:1b:c3:51:
63:fe:e6:a1:d0:b8:65:ca:9b:f3:5a:31:88:7c:5b:
a0:22:c5:10:07:e9:83:fd:5a:62:22:56:c0:62:c7:
57:15:f3:bd:3a:58:73:a4:4e:ec:1c:66:8a:c6:a8:
6b:67:8a:6c:85:ca:70:76:14:d1:77:a1:73:c5:47:
6a:b9:85:47:71:92:7d:c0:16:43:9c:48:e9:ea:17:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B4:29:53:E2:13:A7:DF:4A:28:8F:E2:4E:53:08:C0:32:C5:FD:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B153F2271FF11F1B7C42BD9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.252.0/22
156.251.0.0-156.251.4.255
156.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
32:32:f9:2f:c0:53:69:dd:dc:4b:ae:a1:54:ba:2e:73:03:55:
61:18:ba:89:74:b3:c0:c7:75:e6:30:9a:c3:93:b0:4d:85:b2:
e9:04:71:59:a8:e5:6f:40:f5:9c:04:a8:be:12:b9:d0:a1:69:
b3:1a:d6:0b:70:5f:f8:81:90:bd:49:ff:9d:c3:1e:ae:a6:91:
c4:fc:ee:c2:39:35:1d:e8:43:fb:e1:97:2e:12:2e:0c:c5:9a:
2d:17:07:70:9f:8f:7d:3f:34:16:11:92:7d:f1:77:df:90:80:
2c:3b:70:ed:31:29:40:5c:a1:8d:e5:d3:db:10:b8:c3:e4:74:
af:63:7f:37:96:bf:d1:a7:cf:90:51:22:a9:e2:cf:32:bd:37:
5c:17:61:2c:52:fc:27:ed:ba:4e:12:66:4b:eb:cc:ff:c2:01:
d3:27:f5:bd:c2:a8:4a:bf:e6:98:64:45:f1:a8:a6:15:d1:96:
6a:d6:07:92:fa:07:f4:4c:ba:c5:21:d3:cd:53:27:20:fb:7c:
7f:45:bd:f1:d2:7f:37:18:b3:88:0c:a0:2e:cc:10:03:f9:01:
34:a1:d7:3f:45:d9:0a:5e:13:24:30:c5:b4:81:e0:8e:3c:99:
27:77:fe:52:c2:bd:82:7c:1a:79:09:16:cb:bc:a3:b5:6d:c2:
67:59:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:03 2026 by rpki-client