Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27AEA7B4553511F197D8DD02CF1D38B0.roa
File: 27AEA7B4553511F197D8DD02CF1D38B0.roa (raw, json)
Hash identifier: EVG59kfJbR3DY6MuYdnaVZKHAxnh5RpCrjvrPWlGFJE=
Subject key identifier: 60:93:5B:62:FB:8E:D3:E3:BF:DC:64:D5:14:C3:47:0C:B8:A6:42:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B76D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27AEA7B4553511F197D8DD02CF1D38B0.roa
Signing time: Thu 21 May 2026 16:50:21 +0000
ROA not before: Thu 21 May 2026 16:50:17 +0000
ROA not after: Thu 25 Jun 2026 16:50:17 +0000
asID: 271355
IP address blocks: 156.236.192.0/19 maxlen: 24
156.236.192.0/24 maxlen: 24
156.236.193.0/24 maxlen: 24
156.236.239.0/24 maxlen: 24
156.236.240.0/24 maxlen: 24
156.236.241.0/24 maxlen: 24
156.236.242.0/24 maxlen: 24
156.236.243.0/24 maxlen: 24
156.236.244.0/24 maxlen: 24
156.236.245.0/24 maxlen: 24
156.236.246.0/24 maxlen: 24
156.236.247.0/24 maxlen: 24
156.236.248.0/24 maxlen: 24
156.236.249.0/24 maxlen: 24
156.236.250.0/24 maxlen: 24
156.236.251.0/24 maxlen: 24
156.236.252.0/24 maxlen: 24
156.236.253.0/24 maxlen: 24
156.236.254.0/24 maxlen: 24
156.236.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112493 (0x1b76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 16:50:17 2026 GMT
Not After : Jun 25 16:50:17 2026 GMT
Subject: CN=6a0f37cd-8f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:30:de:85:32:41:20:17:ab:a4:52:f1:cd:
03:e2:61:b2:f8:48:91:18:9d:4f:48:34:70:1c:bf:
b7:ec:a2:f7:b7:68:5f:ea:80:44:47:83:47:fb:31:
9d:47:de:7a:43:54:d8:a6:9c:9a:6e:82:4e:c2:17:
7b:58:96:48:95:cb:ef:3d:e4:bd:aa:36:c8:8c:1b:
22:59:53:b9:52:f1:87:b6:ec:e5:4b:25:d8:f9:b4:
a5:8a:be:7a:22:d6:ce:68:de:c5:c9:ec:0b:75:7c:
cc:99:fc:ad:36:c5:41:fa:f5:01:5c:21:6c:78:e7:
ec:52:9f:71:14:b9:b2:76:83:1b:6e:5f:6a:4f:ed:
97:ea:1d:52:02:5d:c7:85:5b:1e:8b:60:82:ea:a9:
d1:fe:44:d5:28:1e:2b:d4:9e:97:14:6b:32:91:6e:
22:e7:3b:16:d5:84:28:b4:ff:e9:09:58:4f:f6:d2:
3a:f9:be:fd:67:d6:ae:8c:76:93:58:fb:9d:4d:d3:
e1:30:c4:73:87:56:fe:0c:27:eb:9b:29:5f:83:77:
a9:b9:a0:d4:e9:39:17:2e:39:f5:4d:48:69:9f:d6:
66:74:70:b5:22:66:8f:37:0d:cb:18:56:d2:1b:f9:
61:0a:07:bc:27:88:a7:02:c5:28:ce:82:c4:4e:e5:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:5B:62:FB:8E:D3:E3:BF:DC:64:D5:14:C3:47:0C:B8:A6:42:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27AEA7B4553511F197D8DD02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/19
156.236.239.0-156.236.255.255
Signature Algorithm: sha256WithRSAEncryption
67:ba:7f:1f:11:fc:b6:0d:67:01:84:1e:ae:79:0a:87:56:07:
35:b1:98:56:23:4d:7e:c3:2e:5f:c3:68:db:f0:a9:49:a3:41:
f2:ae:76:35:65:7a:69:8b:1b:5f:4e:de:f4:a3:70:d7:c5:8f:
f6:0b:2d:63:4e:c4:6a:63:63:7a:7c:05:f6:55:81:e6:1e:94:
0f:b1:ad:01:7f:f9:f3:51:b1:e3:54:b9:4e:30:5f:0a:45:42:
07:0d:8b:31:76:1f:4e:07:60:38:c2:38:ab:fa:b2:e1:41:d2:
e7:ad:00:3d:e7:11:40:2b:00:70:5d:6b:d8:41:5b:b9:cd:6a:
2c:09:53:bd:7a:14:ba:f1:49:43:bd:2f:cc:ce:8a:b6:4f:a4:
cf:85:5b:b7:a4:d9:c9:8a:8e:93:14:d1:ef:38:25:13:c1:48:
fd:f6:ca:e7:7b:1e:4a:f7:28:6f:2c:df:95:4e:ab:76:fd:83:
56:35:77:ab:ba:71:41:10:e6:81:fb:c7:7c:ea:c1:6f:0b:30:
d4:da:e2:dc:2c:ad:ac:73:f6:c1:0f:cd:49:6d:dc:8e:5f:7f:
ce:22:cf:34:b7:c1:4f:d5:3a:21:b4:b8:87:a8:0a:0d:76:2b:
e2:c8:82:80:69:22:2e:c2:9b:2c:b1:28:df:7d:1e:ed:63:07:
fd:a3:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:40 2026 by rpki-client