Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37D588767B8A11F1B55BE40FCF1D38B0.roa
File: 37D588767B8A11F1B55BE40FCF1D38B0.roa (raw, json)
Hash identifier: wz8W4ZlouX1ahPv253ujNDez3Eqodz9kZ4bNRg+G3ow=
Subject key identifier: D1:C2:11:66:D0:20:CD:E6:7E:95:F3:54:CB:C0:2B:20:6D:C7:BB:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C40D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37D588767B8A11F1B55BE40FCF1D38B0.roa
Signing time: Thu 09 Jul 2026 11:35:01 +0000
ROA not before: Thu 09 Jul 2026 11:34:55 +0000
ROA not after: Sun 19 Jul 2026 11:34:55 +0000
asID: 984
IP address blocks: 156.249.177.0/24 maxlen: 24
156.249.179.0/24 maxlen: 24
156.249.196.0/24 maxlen: 24
156.252.8.0/24 maxlen: 24
156.252.11.0/24 maxlen: 24
156.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115725 (0x1c40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 11:34:55 2026 GMT
Not After : Jul 19 11:34:55 2026 GMT
Subject: CN=6a4f8765-2b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:e5:8b:eb:2c:1a:32:de:57:ed:89:0a:b9:
cc:ed:51:e4:d3:26:92:97:8a:9e:c5:4f:ea:f0:65:
a8:6a:cc:8b:4d:2b:e1:cf:7b:68:bc:a7:06:6e:6b:
4f:3c:22:1f:96:3e:48:03:a9:a6:7b:56:06:2c:78:
c1:6b:48:d7:62:84:58:58:6f:a9:a2:d5:36:38:0e:
7d:dc:70:1d:fd:88:5b:bf:3e:53:76:f6:ff:7c:41:
3f:aa:95:04:0e:88:de:06:e7:41:e0:23:66:96:f1:
e6:18:37:4e:b1:83:74:31:17:db:5d:5d:d7:0f:13:
62:df:d9:7d:49:3a:79:7f:5d:ba:f5:42:08:e1:91:
2f:25:64:69:ee:b3:68:41:a4:88:48:cf:60:fb:ad:
0b:e6:3d:9b:3b:fa:87:66:0c:d3:35:bb:fa:ae:85:
27:48:e6:d5:8d:87:3d:73:b7:44:39:f8:1b:09:19:
ee:6b:ea:52:48:61:72:30:3a:04:b1:9c:32:af:84:
6a:09:64:a1:21:3d:45:9a:f1:9f:a0:21:c0:06:2e:
df:28:e6:f2:96:67:5a:6c:d8:d3:0d:26:8e:df:20:
b2:80:e9:39:24:a6:f8:e1:c3:13:27:98:bd:0b:ea:
ac:65:49:93:86:b5:ef:30:f4:8b:ab:a4:55:4c:0b:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:11:66:D0:20:CD:E6:7E:95:F3:54:CB:C0:2B:20:6D:C7:BB:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37D588767B8A11F1B55BE40FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.177.0/24
156.249.179.0/24
156.249.196.0/24
156.252.8.0/24
156.252.11.0/24
156.253.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7c:ed:e6:81:a6:51:e2:66:96:b1:58:d6:ba:a2:9a:a2:cd:
43:69:b1:aa:d2:46:52:42:60:94:d4:90:9d:ed:57:fb:46:dd:
15:5e:bf:c8:e3:9f:7b:0d:ff:91:8d:46:06:c6:f5:66:13:36:
04:3e:3b:d6:71:d4:1e:c9:05:fc:4c:dd:ab:29:84:61:ed:64:
db:5a:8f:70:98:3b:bc:00:d0:c5:8c:0f:a1:05:a6:1a:fb:07:
6a:46:21:35:0d:ba:ea:f7:3d:99:70:c6:7e:38:d0:00:23:3e:
2f:90:19:d5:47:7e:94:51:50:ce:90:a3:71:cc:46:6e:38:3b:
79:60:14:57:8f:28:98:b1:29:3f:8e:1f:5a:b8:00:f3:56:a6:
13:71:ac:84:01:55:95:0e:0d:c9:4f:04:d9:e3:08:63:7a:61:
32:c4:19:77:79:7f:01:78:76:e9:f0:5d:cf:1a:14:6a:57:8a:
17:19:8d:4b:80:d1:93:62:ef:3c:eb:32:de:df:55:19:a2:4a:
fd:72:62:43:21:9a:ef:6e:a1:69:50:c7:d3:6d:a5:8d:bb:3b:
4a:7b:4e:fa:45:c7:67:c2:e0:03:16:8b:02:59:aa:64:0d:49:
be:7e:6d:b3:7e:62:c4:90:3e:54:7d:51:33:2d:f7:8b:66:47:
88:13:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:56 2026 by rpki-client