Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29925A384F0611F1ACE1B2DCCE1D38B0.roa
File: 29925A384F0611F1ACE1B2DCCE1D38B0.roa (raw, json)
Hash identifier: ZruJ/hCoGzsUJTKF70kWqbj0SLROYSB68F08pboHQp8=
Subject key identifier: B5:B3:66:84:07:76:D3:2B:BE:72:53:F6:8F:E8:0E:53:69:E6:36:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B453
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29925A384F0611F1ACE1B2DCCE1D38B0.roa
Signing time: Wed 13 May 2026 19:58:51 +0000
ROA not before: Wed 13 May 2026 19:58:46 +0000
ROA not after: Mon 18 Jan 2027 19:58:46 +0000
asID: 136907
IP address blocks: 156.227.22.0/23 maxlen: 24
156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
156.232.16.0/20 maxlen: 24
156.240.128.0/18 maxlen: 24
156.249.32.0/20 maxlen: 24
156.253.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111699 (0x1b453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 19:58:46 2026 GMT
Not After : Jan 18 19:58:46 2027 GMT
Subject: CN=6a04d7fb-c649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:0c:5b:bb:18:59:91:ad:23:1b:bd:1d:5f:
5e:ec:a2:8d:c5:9d:83:32:95:72:bd:e8:c3:b4:6a:
75:85:74:6d:53:ec:0d:7a:ac:13:08:0f:d9:e8:38:
6d:e7:51:ef:eb:b6:c1:fd:33:d0:e4:b7:fc:d1:f4:
d1:99:0e:09:44:fd:88:9e:97:71:e5:a6:ed:72:65:
1f:62:d1:b1:8b:f3:68:bd:02:33:7b:1c:b6:6f:8d:
c1:87:3d:2f:b9:9b:4c:af:d9:00:6f:52:12:a8:fc:
f9:92:3e:77:6b:fd:51:4a:8b:f1:6f:39:11:80:e9:
a5:1b:a2:0f:f2:4d:0c:96:4d:a7:6f:76:7f:a7:e0:
ca:78:2b:61:08:8b:9d:61:0d:26:67:ed:dd:34:9e:
de:49:c2:f4:1a:31:ae:0a:fe:f1:a5:8d:0c:c8:fe:
d6:f9:5c:ad:c1:00:e5:9b:43:03:37:cb:3d:94:2d:
2c:59:4f:6f:ed:a1:1a:34:63:87:ff:de:ba:17:13:
9c:36:7e:c3:9b:a8:10:9e:c9:b3:7e:d1:82:55:12:
52:27:2b:b5:6b:75:f8:f4:94:00:11:2e:ff:9f:9b:
bc:27:1a:58:58:c4:70:30:39:07:dd:39:b9:6b:96:
87:80:52:56:1d:62:38:b6:7d:49:6e:16:b2:91:2a:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:66:84:07:76:D3:2B:BE:72:53:F6:8F:E8:0E:53:69:E6:36:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29925A384F0611F1ACE1B2DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.22.0/23
156.230.32.0/20
156.230.64.0/18
156.232.16.0/20
156.240.128.0/18
156.249.32.0/20
156.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
58:be:27:34:8d:28:b6:ac:6a:9c:d5:d2:86:93:28:de:3c:22:
5c:a0:9f:07:c2:1d:9d:9c:ce:cf:76:da:3e:f1:0c:6c:78:70:
9f:c0:66:f6:bb:05:88:5c:8f:92:16:ef:40:2d:2e:80:60:77:
be:f4:9c:a7:df:d2:e3:cc:e7:06:11:fc:5c:c8:6e:ab:83:99:
42:b5:f1:8b:d6:c4:4a:e7:98:a2:c5:35:17:91:21:7a:44:aa:
17:9c:28:f8:42:58:3c:6f:ad:de:20:f3:f4:9d:e2:a1:90:3d:
8b:ba:d4:ce:99:66:47:b3:5d:62:0d:4f:53:5b:0e:8e:dd:cc:
70:79:1b:57:b4:92:e2:bf:81:07:82:fb:43:22:0c:c0:b0:63:
3d:8e:57:97:19:f5:67:db:2c:00:46:d7:2e:31:de:40:58:02:
01:b5:f3:75:0b:24:1e:fc:6f:16:21:89:71:da:22:b6:1a:28:
f7:46:d1:a5:e0:9f:ed:b5:92:1a:00:2a:68:2e:bc:a5:78:f7:
80:44:17:79:b5:88:bf:f9:1b:c2:e7:30:98:f3:91:0a:45:7a:
14:ba:71:5c:d6:7d:71:c5:a5:d7:53:1b:f5:4b:db:2a:74:3c:
b1:49:d7:1e:64:4c:81:ef:32:ee:e8:2d:3b:54:de:fd:d5:38:
ca:e4:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:55 2026 by rpki-client