Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B60D884550B11F1A8997507CF1D38B0.roa
File: 2B60D884550B11F1A8997507CF1D38B0.roa (raw, json)
Hash identifier: SkHwOvi40zCXGgJlhJEqvox1+BRdfkllAK2STM0vGmM=
Subject key identifier: 53:EA:44:57:FF:CC:F0:90:95:E4:CA:96:72:5F:CF:14:07:AF:BE:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B60D884550B11F1A8997507CF1D38B0.roa
Signing time: Thu 21 May 2026 11:49:49 +0000
ROA not before: Thu 21 May 2026 11:49:43 +0000
ROA not after: Tue 20 Jul 2027 11:49:43 +0000
asID: 328888
IP address blocks: 156.253.128.0/24 maxlen: 24
156.253.131.0/24 maxlen: 24
156.253.132.0/24 maxlen: 24
156.253.133.0/24 maxlen: 24
156.253.135.0/24 maxlen: 24
156.253.136.0/24 maxlen: 24
156.253.137.0/24 maxlen: 24
156.253.138.0/24 maxlen: 24
156.253.139.0/24 maxlen: 24
156.253.140.0/24 maxlen: 24
156.253.141.0/24 maxlen: 24
156.253.142.0/24 maxlen: 24
156.253.143.0/24 maxlen: 24
156.253.160.0/24 maxlen: 24
156.253.161.0/24 maxlen: 24
156.253.162.0/24 maxlen: 24
156.253.163.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112352 (0x1b6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 11:49:43 2026 GMT
Not After : Jul 20 11:49:43 2027 GMT
Subject: CN=6a0ef15d-fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:b3:e6:7d:9e:45:0a:8f:6d:ab:63:93:2f:
0b:86:80:3a:1a:14:35:22:80:1c:56:f5:4d:e0:fa:
42:fd:ba:92:0d:05:e3:09:ef:92:34:84:5f:69:29:
d8:8d:a0:8d:c7:d0:85:c1:c7:e0:44:24:3f:3b:56:
4d:6e:a3:f1:30:a7:8b:df:1d:e8:06:08:0e:dd:87:
ea:92:5c:3c:26:b5:98:bc:ed:4e:bf:8d:15:6e:0a:
43:32:2e:ab:ec:b3:fa:f1:ad:d8:5e:93:5f:ef:3d:
f8:18:22:83:11:54:0b:6d:5f:a0:ec:f5:74:c4:54:
e6:07:c3:de:ae:c6:bb:6f:be:6e:a8:27:d1:6d:2d:
74:54:5a:b0:13:53:19:2b:71:06:fb:9d:75:cb:50:
e9:12:d8:e9:3c:cf:d2:50:6c:36:2b:b1:c7:83:80:
f4:b0:fd:57:49:b9:30:71:82:e7:c9:a2:a0:b2:d7:
8c:1b:f7:db:ad:2c:dd:41:70:12:a9:ab:63:ce:88:
e6:03:22:03:db:cf:e7:ac:23:ec:e6:48:ba:be:5c:
30:38:d2:a0:67:e3:f8:81:aa:e8:38:cc:b6:27:e9:
54:7a:23:26:46:dc:39:e2:fb:b2:c0:06:4d:f4:42:
84:f0:2c:0c:db:25:a7:6f:5f:02:69:06:87:05:7b:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:44:57:FF:CC:F0:90:95:E4:CA:96:72:5F:CF:14:07:AF:BE:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B60D884550B11F1A8997507CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.128.0/24
156.253.131.0-156.253.133.255
156.253.135.0-156.253.143.255
156.253.160.0-156.253.166.255
Signature Algorithm: sha256WithRSAEncryption
21:fa:be:9c:1e:66:8c:35:48:7f:6a:20:c6:61:11:ef:9b:ab:
bb:35:f2:9d:31:12:91:e2:80:55:7d:4f:78:01:51:2b:dc:f8:
b1:a7:4c:29:fc:1a:38:ff:eb:7a:95:7b:a4:e2:54:49:a5:85:
96:75:5e:d2:bc:0b:2c:a7:8a:14:ea:c9:3f:b6:09:3a:e3:41:
5a:ac:f0:d1:c0:6f:17:c6:eb:06:75:2c:1c:aa:70:eb:40:ab:
60:7c:35:58:b6:df:b0:cc:fb:34:80:5c:87:a8:b5:e2:6d:57:
c9:45:cd:81:2b:bb:4f:e1:91:aa:31:00:51:f7:31:61:84:77:
7d:f7:92:1c:20:a6:d5:c3:52:69:c6:39:0b:29:57:3a:6a:20:
4c:3e:88:b9:6c:8a:64:f3:8f:7b:90:7d:5e:4a:d1:e2:2b:54:
e7:ee:d3:b3:64:b3:32:cb:c0:eb:4c:04:b3:b2:df:35:0c:5f:
17:21:a3:5b:51:67:7d:48:5c:ed:c7:37:59:00:51:5b:83:52:
06:9b:1b:12:17:5e:80:f6:e9:03:47:7e:84:f3:37:72:76:0c:
0e:0f:2f:50:88:3c:0c:80:a1:ed:3f:1c:3d:3e:53:8b:dc:05:
84:89:6c:1c:31:bb:ab:3e:2c:22:43:fd:26:5f:51:0f:7f:cb:
b5:a8:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:21 2026 by rpki-client