Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24FFFE4258DB11F1887D20C9CE1D38B0.roa
File: 24FFFE4258DB11F1887D20C9CE1D38B0.roa (raw, json)
Hash identifier: VBYtYAwDh/i4Nppn7z2JR6FKdFIuN6BMOkQ4D5HPqCw=
Subject key identifier: AE:02:89:74:2F:9A:36:A2:25:CA:28:5E:54:0B:CA:9F:AF:6E:FB:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24FFFE4258DB11F1887D20C9CE1D38B0.roa
Signing time: Tue 26 May 2026 08:16:07 +0000
ROA not before: Tue 26 May 2026 08:16:02 +0000
ROA not after: Sun 28 Jun 2026 08:16:02 +0000
asID: 44559
IP address blocks: 156.246.175.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
156.246.219.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113087 (0x1b9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 08:16:02 2026 GMT
Not After : Jun 28 08:16:02 2026 GMT
Subject: CN=6a1556c7-fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:89:99:57:47:03:0e:a8:fa:c5:a0:4c:88:
40:f6:c6:76:ce:b6:8b:a1:63:97:02:a6:70:b7:2e:
d0:4c:bf:f6:19:b4:50:66:46:1e:42:ce:e8:09:ef:
72:ce:d5:54:82:18:55:04:11:f4:1c:cb:13:0a:84:
77:92:2a:92:27:65:52:9b:e5:b1:83:e4:5c:3b:ba:
38:9c:ab:f7:0a:1f:b3:ef:52:5c:23:39:c2:e7:ba:
4d:84:3b:1e:43:b4:1b:0a:a8:f6:eb:eb:03:1f:f7:
cc:eb:dc:45:41:0f:3f:aa:d9:dc:a8:ac:a4:4b:c1:
66:b6:fd:b6:1e:bd:05:6f:45:c1:f9:e8:9b:97:84:
7f:83:16:da:2a:91:7e:a7:6f:9a:db:d8:58:d7:b0:
63:03:6f:4a:30:64:c6:8f:78:e6:8b:6d:db:65:6e:
6f:56:ba:ae:d2:2b:2f:ec:b7:0f:35:06:44:db:37:
dd:03:6f:f7:47:94:c8:2a:73:73:42:40:c3:7e:72:
e5:49:50:e6:d0:e8:ea:6a:c0:ab:37:bf:94:71:04:
a2:0d:30:da:47:08:55:a7:f6:1a:58:0d:52:75:80:
11:c3:c0:8b:72:aa:7a:87:4e:55:b8:b5:cf:07:2c:
34:e2:4b:63:92:c7:a4:35:8a:4f:14:cf:48:e9:20:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:89:74:2F:9A:36:A2:25:CA:28:5E:54:0B:CA:9F:AF:6E:FB:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24FFFE4258DB11F1887D20C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.175.0-156.246.178.255
156.246.209.0-156.246.224.255
Signature Algorithm: sha256WithRSAEncryption
a8:c7:9a:e2:c2:30:04:06:6b:e4:3e:f4:79:4b:73:0b:09:df:
fc:ca:ff:98:84:a1:9f:f3:1c:de:13:67:e1:f4:8d:24:21:81:
cb:df:c8:f7:06:9a:a1:67:cc:65:40:f7:f2:ac:6b:da:62:55:
95:53:49:0d:72:9e:b8:3b:e3:25:5c:a5:1c:9d:b2:5f:b6:c3:
cf:d9:ec:f4:ab:74:8e:fb:ef:c8:dd:11:16:8c:7c:02:7d:7e:
65:61:44:68:91:ea:a5:3e:6c:43:3d:74:b3:3e:95:e3:60:d9:
7b:0a:79:52:aa:6b:69:5d:04:09:23:24:2d:44:e0:47:14:ea:
2d:cc:a7:8e:76:45:b0:35:b8:3a:83:e1:90:07:02:7f:ea:78:
6c:0b:6d:ee:3a:87:29:a0:bb:70:f5:e5:8a:a3:17:3b:00:8d:
6b:fe:c8:71:84:ba:82:e9:fb:11:be:a6:34:1c:20:8e:3c:b5:
9f:1b:ce:9c:04:ef:c9:d4:f6:ae:29:a7:40:1a:22:79:09:a5:
ec:1a:6f:9c:8d:bf:47:8e:f2:e1:4d:da:b8:aa:87:76:87:41:
16:aa:80:5a:8a:81:a6:60:7c:a1:7b:44:c5:88:2f:d8:ae:ba:
a4:d1:ee:86:b5:27:76:81:3e:33:74:99:48:73:9a:06:9d:d8:
4a:29:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:06 2026 by rpki-client