Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4020D66C760211F1AD0483BECE1D38B0.roa
File: 4020D66C760211F1AD0483BECE1D38B0.roa (raw, json)
Hash identifier: lIieh2xKFtK9SwQT9MtnVdGrMoyvCIHM7vhjIHiKvmc=
Subject key identifier: 60:DC:AB:5E:B2:A7:53:C5:9E:D2:64:79:B5:B1:B5:65:55:29:41:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C25E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4020D66C760211F1AD0483BECE1D38B0.roa
Signing time: Thu 02 Jul 2026 10:39:07 +0000
ROA not before: Thu 02 Jul 2026 10:39:01 +0000
ROA not after: Sat 25 Jul 2026 10:39:01 +0000
asID: 32043
IP address blocks: 156.249.128.0/22 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115294 (0x1c25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 10:39:01 2026 GMT
Not After : Jul 25 10:39:01 2026 GMT
Subject: CN=6a463fca-a950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:7c:a1:61:3f:6d:d5:74:79:51:37:65:95:
0f:fe:e6:81:5a:fa:0d:5a:ff:7c:c7:ab:86:30:42:
15:0c:62:2a:30:4f:d3:a8:95:77:65:a8:61:40:b8:
f5:40:31:7c:e4:49:48:1f:ce:01:a4:29:f2:34:8d:
c4:ec:44:e3:12:a3:71:7b:dc:52:59:85:7e:43:bf:
5f:5c:ed:b9:71:8a:e4:c4:a3:c4:cd:8f:d7:c7:b3:
d5:05:12:58:70:b4:d0:be:13:15:a1:0e:0c:54:ea:
b1:a4:c4:35:d8:c4:21:98:05:f9:f3:9a:bf:94:ce:
c0:3e:f9:fe:5f:83:c1:00:3f:e2:65:9d:26:f5:b6:
d6:a2:78:47:de:6c:c4:2a:f7:17:29:2b:15:b6:2f:
7b:62:30:18:a9:df:12:bd:a5:a3:b7:3a:b4:9a:5c:
61:d0:63:af:ae:98:45:7a:df:32:9f:99:c7:c5:4a:
48:8a:6a:72:d5:b0:a9:12:2a:19:50:e0:ec:2a:27:
c4:51:69:2e:37:0c:d5:df:b0:d4:c1:47:8e:10:0a:
6f:08:6b:d2:60:a5:5c:a7:aa:37:73:57:45:1d:78:
16:e7:71:b2:f4:7f:80:94:ce:c6:97:35:57:79:63:
1f:07:66:52:1f:74:06:15:8d:8c:0b:1a:05:b7:fb:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:AB:5E:B2:A7:53:C5:9E:D2:64:79:B5:B1:B5:65:55:29:41:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4020D66C760211F1AD0483BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.128.0/22
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:ef:95:e5:b8:a7:2f:35:07:eb:e5:08:b3:ff:9e:2b:a5:8d:
6f:ae:2a:b5:80:8b:24:b4:7c:5a:03:67:f6:e8:80:cd:54:f3:
2a:9b:3b:e9:a0:48:1d:30:c5:c1:bf:43:e0:73:50:f7:cd:1f:
6e:a4:3c:b3:07:d0:36:42:2f:a0:7c:d8:98:9a:d3:de:7c:f2:
1c:19:53:ff:d4:fe:2c:95:22:6d:9a:84:76:5c:b2:3e:42:4a:
e7:02:38:14:5e:ae:4e:4b:ca:2e:14:6d:7e:b2:92:fa:d1:92:
f8:c1:bb:6d:30:e9:2a:e1:67:52:f3:d8:26:25:ec:bb:3a:c4:
94:64:d9:2c:ce:84:78:69:3e:65:a5:0a:dc:3f:39:c0:4b:c1:
e6:07:91:23:a2:bb:85:16:9e:ee:c9:0e:89:7b:19:da:01:78:
e2:2e:05:a4:88:fb:11:ad:11:87:fe:d2:50:09:6b:69:7e:15:
24:3b:1b:97:ef:ca:59:0c:db:a0:38:f2:ef:c4:da:34:a7:7b:
ea:30:89:10:3a:d0:68:05:e7:59:b9:55:33:68:cf:bf:ba:92:
26:7d:8e:29:e5:de:ff:62:e7:66:55:eb:75:25:83:c7:cc:8b:
0e:65:cd:6c:53:40:2f:b2:13:f5:cd:b1:40:ce:cd:45:09:49:
2f:42:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:39 2026 by rpki-client