Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32116C2673E611F1B59755DFCE1D38B0.roa
File: 32116C2673E611F1B59755DFCE1D38B0.roa (raw, json)
Hash identifier: QX2dOjtzvm6YELtJR2ewlMJ45LwelUjrQZWtlKNZ6Ug=
Subject key identifier: 9D:92:E2:A5:23:FB:C3:6C:E4:2E:C4:75:69:39:01:A9:3A:FE:9A:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C196
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32116C2673E611F1B59755DFCE1D38B0.roa
Signing time: Mon 29 Jun 2026 18:13:15 +0000
ROA not before: Mon 29 Jun 2026 18:13:10 +0000
ROA not after: Mon 31 Aug 2026 18:13:10 +0000
asID: 399077
IP address blocks: 156.251.37.0/24 maxlen: 24
156.251.38.0/24 maxlen: 24
156.251.39.0/24 maxlen: 24
156.251.40.0/24 maxlen: 24
156.251.41.0/24 maxlen: 24
156.251.42.0/24 maxlen: 24
156.251.43.0/24 maxlen: 24
156.251.44.0/24 maxlen: 24
156.251.45.0/24 maxlen: 24
156.251.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115094 (0x1c196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 18:13:10 2026 GMT
Not After : Aug 31 18:13:10 2026 GMT
Subject: CN=6a42b5bb-6d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:73:2c:06:e4:91:7b:d9:95:47:26:ff:fd:
15:a9:0b:2a:59:cd:4b:8f:6f:71:03:c0:b5:43:aa:
bd:08:f4:59:6b:24:20:10:0f:c5:c0:6c:3f:51:4c:
02:e0:61:6a:29:86:ec:5f:f0:42:1c:69:3d:21:7b:
e0:16:d8:1b:2b:fb:65:3f:01:5e:21:57:af:a9:5a:
f6:26:6f:6e:0c:74:5f:44:e8:ea:90:ba:9d:e7:8c:
e6:26:6d:43:13:7e:21:d0:3b:64:5a:c1:24:a7:37:
65:a4:fd:15:6a:a9:ba:cd:42:98:47:53:05:1d:c7:
25:0c:f7:f2:f0:ec:01:dc:1a:81:da:55:fe:06:15:
13:b6:0c:7b:ec:43:27:49:28:2c:1b:34:bd:1c:40:
5a:7f:d7:a6:ca:17:74:68:e3:b6:b4:5a:d3:b0:22:
28:66:fa:55:3c:0a:cf:fc:64:e2:27:11:a0:76:a3:
eb:38:6c:66:47:d1:51:0f:33:37:c2:e7:15:7a:01:
99:88:fb:17:c5:17:44:b9:6c:d0:d2:b1:87:33:2b:
14:1d:0f:a5:11:02:57:fa:5f:da:29:fe:ff:7e:0c:
0c:2d:41:85:82:56:1a:29:9e:e1:69:38:da:24:c3:
cf:36:a6:55:fd:79:58:23:4d:cd:c0:8e:e7:b5:c8:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:E2:A5:23:FB:C3:6C:E4:2E:C4:75:69:39:01:A9:3A:FE:9A:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32116C2673E611F1B59755DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.37.0-156.251.46.255
Signature Algorithm: sha256WithRSAEncryption
1b:23:00:03:03:bb:d7:a4:25:8a:54:b2:e8:02:3e:39:ff:48:
59:c9:a1:e2:35:80:07:d3:69:26:e8:d2:a3:86:e8:76:62:1d:
ff:05:8e:bd:6b:73:b2:02:3a:8a:d1:3e:51:7f:86:71:a7:e0:
7d:48:a4:e4:87:3d:ef:b8:3e:28:b9:db:13:25:f0:f5:de:e1:
c0:97:64:eb:5d:69:9d:e0:2d:62:c5:8b:0a:47:7e:7e:ff:43:
3b:dc:58:58:e6:bc:a7:6c:f1:d2:58:b1:16:85:91:be:e4:ec:
9a:39:f4:ae:b1:da:1e:b3:62:a4:04:eb:59:dd:35:f2:f7:cb:
b7:a3:01:ed:fa:a7:1b:94:23:81:63:88:81:b4:e9:db:94:68:
cb:54:77:0b:1b:42:ac:25:7b:7b:18:e7:d6:42:34:4d:16:16:
5d:f2:89:67:8f:a2:04:7c:2b:a8:bb:95:20:ac:17:18:e5:ae:
86:96:5c:e9:7b:0f:12:88:7b:f1:68:ba:1e:40:68:5c:8f:65:
00:76:fe:32:63:1e:18:47:d9:f4:82:0c:f5:20:6c:ad:c9:f3:
4f:23:de:24:b5:31:55:b9:44:e3:b2:2d:2d:7d:6b:32:98:7d:
1a:0e:38:13:25:b9:71:a5:32:b9:31:70:d8:4e:a4:8e:08:aa:
21:b2:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:21 2026 by rpki-client