Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/336B61E06FBC11F1AA63B913CF1D38B0.roa
File: 336B61E06FBC11F1AA63B913CF1D38B0.roa (raw, json)
Hash identifier: rZKybEb9IVfX7lKfZu0V+kYsdEYh2EZicHwlj0bggSw=
Subject key identifier: 1E:57:96:1C:9C:2F:DC:CC:DA:A7:32:C2:1D:26:7E:19:85:B2:F3:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C020
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/336B61E06FBC11F1AA63B913CF1D38B0.roa
Signing time: Wed 24 Jun 2026 11:02:33 +0000
ROA not before: Wed 24 Jun 2026 11:02:29 +0000
ROA not after: Sat 01 Aug 2026 11:02:29 +0000
asID: 44559
IP address blocks: 156.243.139.0/24 maxlen: 24
156.243.144.0/24 maxlen: 24
156.243.150.0/24 maxlen: 24
156.243.151.0/24 maxlen: 24
156.243.156.0/24 maxlen: 24
156.243.158.0/24 maxlen: 24
156.243.191.0/24 maxlen: 24
156.243.216.0/24 maxlen: 24
156.243.217.0/24 maxlen: 24
156.243.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114720 (0x1c020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 11:02:29 2026 GMT
Not After : Aug 1 11:02:29 2026 GMT
Subject: CN=6a3bb949-1f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:f1:15:0f:39:65:2a:16:c4:37:fe:4b:80:
a9:28:ff:dd:6d:db:95:3d:47:ee:ca:38:13:b3:3f:
08:c6:c7:dd:3b:9e:ad:d9:84:45:26:f4:2d:a9:5a:
46:e3:5c:68:90:4d:57:a1:29:ba:6c:74:76:47:1c:
79:2d:fc:53:c6:2e:3f:66:f4:ed:41:43:f3:e8:b1:
00:80:da:5e:eb:20:6b:b4:20:ee:6b:7e:c0:dd:cb:
fd:d4:6d:15:68:7c:98:1c:b6:94:55:ee:38:ed:01:
e6:4f:c1:0f:b6:76:ef:79:54:0b:06:73:6a:39:0a:
6e:12:ee:0e:5a:79:cc:35:94:c1:1f:a1:f5:69:0f:
fa:03:96:b9:68:a7:e0:5c:30:1c:b8:48:48:d7:79:
70:60:2d:36:8f:c5:a7:9d:d7:64:e9:af:d7:88:61:
b7:17:a6:18:04:83:7e:22:41:38:83:53:17:10:ba:
e1:f8:67:d4:d7:89:68:3b:01:bf:2d:5e:97:52:75:
ea:43:57:d9:06:bb:f3:e2:32:66:5a:79:6f:78:cd:
35:32:60:b5:f1:cf:63:62:a6:ac:f9:1e:3c:0d:8a:
af:10:63:bf:d7:a4:65:d4:44:e0:c1:6a:e2:1d:9d:
44:9a:bb:4a:92:d4:2e:6c:86:db:0c:10:27:8c:ce:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:96:1C:9C:2F:DC:CC:DA:A7:32:C2:1D:26:7E:19:85:B2:F3:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/336B61E06FBC11F1AA63B913CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.139.0/24
156.243.144.0/24
156.243.150.0/23
156.243.156.0/24
156.243.158.0/24
156.243.191.0/24
156.243.216.0/23
156.243.219.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9c:9b:64:cd:7f:db:73:82:40:dc:33:65:f6:63:9e:43:b4:
af:75:8a:ec:e5:3a:14:5f:0f:c5:6f:fb:6b:d0:4a:cb:e0:cf:
54:1b:da:98:87:8e:f8:b1:b3:4f:44:1b:42:a2:c0:c0:22:b3:
60:6c:ba:1f:76:c8:f0:6d:d1:9f:c0:36:ce:29:78:1f:89:8c:
58:c8:83:cf:d7:1a:a8:43:6c:69:36:9c:7a:50:58:35:e9:1b:
da:33:32:9e:ca:0f:31:87:3e:25:34:b4:18:08:e3:8c:3b:c7:
bb:d3:f4:4b:1e:31:b2:bb:4b:05:b3:33:a9:45:d8:a4:30:73:
40:fc:2a:bc:4b:53:b4:3b:b6:39:19:60:42:38:3a:49:63:4f:
90:94:71:0a:50:a9:98:92:29:e7:2a:78:20:75:94:88:0c:dd:
91:f8:72:53:e7:f3:e4:37:65:c2:50:04:38:a8:37:8b:3b:b6:
f4:73:dc:84:6b:fc:99:94:00:5e:2a:2e:c5:eb:c0:6e:59:6f:
5e:61:b3:ad:89:49:ee:d2:e5:a1:18:2b:37:ff:2b:9f:fa:05:
e5:3c:b3:12:70:1a:a4:a1:2a:d8:c6:a3:56:5e:8b:46:1b:df:
35:84:da:f1:00:b7:a6:70:0b:99:ba:c7:7b:00:52:7d:0d:4e:
e2:9a:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:56 2026 by rpki-client