Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C274CA65A7011F19E80DCE3CE1D38B0.roa
File: 3C274CA65A7011F19E80DCE3CE1D38B0.roa (raw, json)
Hash identifier: 8lxaz1sVg+QcYgNHRfCEgxPl1NQixG/poSAS2kQu/cg=
Subject key identifier: 37:67:42:25:E1:11:7F:F0:AF:01:EE:80:AD:EF:7B:35:31:DC:5A:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C274CA65A7011F19E80DCE3CE1D38B0.roa
Signing time: Thu 28 May 2026 08:35:52 +0000
ROA not before: Thu 28 May 2026 08:35:47 +0000
ROA not after: Wed 01 Jul 2026 08:35:47 +0000
asID: 44559
IP address blocks: 156.233.8.0/24 maxlen: 24
156.233.9.0/24 maxlen: 24
156.233.33.0/24 maxlen: 24
156.243.150.0/24 maxlen: 24
156.243.151.0/24 maxlen: 24
156.243.156.0/24 maxlen: 24
156.243.158.0/24 maxlen: 24
156.243.224.0/24 maxlen: 24
156.243.226.0/24 maxlen: 24
156.249.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113279 (0x1ba7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:35:47 2026 GMT
Not After : Jul 1 08:35:47 2026 GMT
Subject: CN=6a17fe68-20dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:1f:34:05:a4:5b:4f:62:d2:68:86:4c:14:
5f:29:dd:ca:6a:a4:41:ec:b1:87:b5:45:f9:46:74:
f9:d3:e4:3d:b2:36:39:2b:f9:2b:ef:bb:16:e7:00:
ee:bf:b2:60:83:80:c8:cb:52:0e:e2:1d:cb:41:c8:
ec:3b:29:6c:f7:05:36:76:ca:d0:c7:9e:f5:cf:7b:
42:88:4a:3c:92:32:fc:1a:15:91:fb:e9:9c:bc:64:
ab:d5:bc:6b:9a:2c:53:57:07:92:ba:6e:af:4b:36:
76:da:91:5f:82:73:a1:c8:2a:fc:9f:ee:33:7c:1a:
f7:4a:cb:3e:03:90:ea:6a:48:97:db:78:3b:be:69:
1e:a9:6c:99:ee:7b:b6:af:d8:49:22:eb:22:83:09:
cb:15:79:3a:42:58:58:ec:11:6a:e0:1b:c3:01:a3:
d2:f6:d0:ce:b6:ac:c5:6a:de:a5:51:c8:f7:29:41:
a7:fb:a9:36:f5:b0:5a:90:1c:c2:5e:69:f2:93:6a:
15:7b:ba:ec:ef:b5:2a:a1:19:26:bd:22:33:db:52:
ad:1f:70:68:d8:27:05:3b:7f:32:4a:ed:e7:8c:ac:
58:22:b0:8e:19:66:a5:85:b0:a8:c3:a7:c2:48:cb:
7f:a4:74:cd:30:fb:81:f2:b1:bd:7c:de:97:66:85:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:42:25:E1:11:7F:F0:AF:01:EE:80:AD:EF:7B:35:31:DC:5A:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C274CA65A7011F19E80DCE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/23
156.233.33.0/24
156.243.150.0/23
156.243.156.0/24
156.243.158.0/24
156.243.224.0/24
156.243.226.0/24
156.249.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f0:f0:7c:8d:0c:ef:ed:72:bf:b2:ba:8a:3b:b8:6d:48:d0:
4f:de:91:04:7b:44:b1:3b:a5:5c:ee:61:d7:b2:cf:7f:4f:49:
17:e5:c3:10:9f:99:fe:3b:ce:37:7c:37:67:8c:7d:aa:da:4d:
8f:33:8c:ee:2f:4d:81:78:cf:5d:95:be:07:db:cc:7d:73:58:
88:0f:74:65:87:b7:3c:0c:80:44:fc:6f:e0:dd:9e:5b:c2:1e:
6d:5d:5a:e6:c8:6f:29:bc:36:fd:76:14:78:8b:62:1d:25:d5:
eb:b6:b7:f5:9c:25:28:71:46:37:68:79:6e:56:e8:3c:bd:04:
a0:23:3a:44:de:aa:54:a0:a2:9c:29:97:c5:d2:90:2f:04:5b:
ec:72:8c:54:f4:a5:f6:68:34:c0:36:d0:8c:cf:36:44:3f:4b:
9a:88:82:f5:ca:19:bd:6b:3d:d6:8c:89:38:17:ff:eb:75:6d:
cd:29:1d:30:d5:ee:e1:78:b9:7a:8a:3d:a4:96:31:70:92:69:
4d:11:f5:1a:7d:7d:5f:0e:0b:49:85:e1:6d:97:61:48:f9:a9:
c3:21:3b:e9:e7:5a:f2:43:3e:d5:b6:0c:12:92:1e:23:45:9b:
1a:8c:d5:e8:da:a8:ce:cc:7d:dc:4c:1f:c2:46:3a:77:ff:7a:
4a:ad:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:37 2026 by rpki-client