Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E28B942578111F190F7AB06CF1D38B0.roa
File: 2E28B942578111F190F7AB06CF1D38B0.roa (raw, json)
Hash identifier: hz7KsiHqJrly1YhoJUcWWKdXAbHfW3nUKaqUvsk7ZAY=
Subject key identifier: 96:A7:9C:4C:50:45:1F:99:91:85:23:F8:5F:CF:D0:53:C4:AA:F3:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B906
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E28B942578111F190F7AB06CF1D38B0.roa
Signing time: Sun 24 May 2026 14:59:37 +0000
ROA not before: Sun 24 May 2026 14:59:32 +0000
ROA not after: Fri 03 Jul 2026 14:59:32 +0000
asID: 140869
IP address blocks: 156.225.90.0/24 maxlen: 24
156.225.91.0/24 maxlen: 24
156.225.92.0/24 maxlen: 24
156.225.93.0/24 maxlen: 24
156.225.94.0/24 maxlen: 24
156.225.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112902 (0x1b906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 14:59:32 2026 GMT
Not After : Jul 3 14:59:32 2026 GMT
Subject: CN=6a131258-972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:6a:fe:31:d6:da:b7:ff:5c:c2:5f:f4:b5:
5f:1b:a1:52:b6:db:03:1e:ef:c1:c7:59:6a:d5:54:
3d:8f:e3:d0:e7:f0:d4:bb:cd:e3:11:44:d4:cc:87:
52:ee:89:23:2d:22:c0:c6:e3:ef:26:57:fb:5a:31:
48:42:f2:d5:90:5d:9c:38:01:24:33:5c:09:c8:09:
9f:cf:17:74:f8:f3:c3:c9:fb:68:82:d0:54:76:6e:
3f:a6:0b:56:eb:39:93:0b:57:3f:78:81:9c:77:4a:
7c:c2:fa:9d:41:64:a3:e6:9d:72:98:ea:ab:17:7d:
db:75:2d:1d:fc:7c:ca:3d:9f:96:fb:dd:1e:e8:1e:
f0:bb:bc:f8:4c:b5:2a:a8:1d:c7:6b:95:3e:9e:e2:
7d:48:93:e8:67:54:96:e1:5f:5c:07:6b:29:59:6b:
89:0f:d2:25:10:da:c7:c9:a7:e5:bb:db:71:1f:00:
87:b7:51:ed:df:26:11:d7:e4:d8:41:79:6d:b1:03:
51:b1:ca:91:36:65:c5:10:0b:71:78:c0:34:76:c2:
81:2e:31:eb:a8:23:5a:9e:26:c5:af:8d:2d:99:f2:
d2:5c:5c:99:6c:a4:c5:f3:fc:56:9c:da:27:fa:0d:
ea:22:d6:17:ac:a3:5d:ae:6f:3f:53:8b:48:0e:4c:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:9C:4C:50:45:1F:99:91:85:23:F8:5F:CF:D0:53:C4:AA:F3:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E28B942578111F190F7AB06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.90.0-156.225.95.255
Signature Algorithm: sha256WithRSAEncryption
78:ff:99:ae:c8:5c:62:61:35:ab:fc:39:e9:df:a3:0c:a7:d4:
31:27:00:d9:c1:87:24:57:85:5f:93:0b:1b:f6:98:22:a4:43:
9d:d3:33:18:46:1b:e5:02:7a:76:72:80:19:b2:eb:57:63:7c:
0b:a0:a9:42:be:b1:ce:ed:90:9b:d8:47:51:96:6c:21:0a:bb:
dd:f2:f5:c7:aa:24:f1:16:34:87:8b:b8:87:df:9b:04:e9:f5:
bb:b2:04:a4:46:fd:f9:69:3d:d6:af:9f:1e:6f:7e:b7:c7:2f:
bc:f3:83:8a:0f:e3:b3:6b:84:25:89:4a:a1:de:51:54:96:88:
54:f4:b4:2e:59:a4:9a:7d:85:0d:ca:ce:ea:1a:c8:0a:2a:b8:
5e:6a:da:84:00:fe:91:ea:31:ae:17:f2:7c:90:a1:0d:3f:dd:
20:41:41:a7:a0:7e:d3:01:68:e9:1d:f3:f6:01:97:38:64:bb:
17:91:3e:c3:14:86:71:89:6d:01:cf:1e:36:85:d2:2b:6a:03:
ba:d2:d1:24:eb:ec:c9:17:74:88:16:f6:f9:4c:85:ef:34:89:
fd:f3:7e:0e:93:94:e9:d8:04:23:6a:a8:1a:e9:9e:66:8f:c2:
7b:c3:ec:e9:7c:a9:0d:8d:b9:48:a6:93:09:81:eb:05:a3:16:
9c:0e:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:47 2026 by rpki-client