Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47459C76545A11F1A946F6C9CE1D38B0.roa
File: 47459C76545A11F1A946F6C9CE1D38B0.roa (raw, json)
Hash identifier: LygPs1y1xuld6ts56ESQfMSD8gliS8E4erYYC2bAk8k=
Subject key identifier: 3C:DB:AA:E8:08:5F:5E:B4:55:4B:9F:4D:09:D8:0B:40:08:B4:72:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B662
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47459C76545A11F1A946F6C9CE1D38B0.roa
Signing time: Wed 20 May 2026 14:43:35 +0000
ROA not before: Wed 20 May 2026 14:43:30 +0000
ROA not after: Fri 26 Jun 2026 14:43:30 +0000
asID: 63139
IP address blocks: 156.227.200.0/24 maxlen: 24
156.227.201.0/24 maxlen: 24
156.227.202.0/24 maxlen: 24
156.227.220.0/22 maxlen: 24
156.227.224.0/23 maxlen: 24
156.227.226.0/23 maxlen: 24
156.227.228.0/23 maxlen: 24
156.227.230.0/23 maxlen: 24
156.227.252.0/22 maxlen: 24
156.229.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112226 (0x1b662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 14:43:30 2026 GMT
Not After : Jun 26 14:43:30 2026 GMT
Subject: CN=6a0dc897-2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:02:8f:52:28:28:9d:d7:d2:c8:6f:15:f7:
6b:05:63:3a:f0:06:5b:a8:41:f7:fa:37:3d:22:5e:
b1:0f:10:98:4e:8c:38:6b:01:ee:92:0c:2f:a8:04:
a8:71:4a:d0:c0:30:f0:c0:5c:ac:e3:4a:07:87:5f:
87:7a:e1:56:52:df:bf:cc:37:3f:67:c2:32:4a:ea:
b4:89:1b:fa:2b:46:c8:a9:56:d7:e1:6d:bf:57:8c:
90:b1:cc:22:e9:b3:49:0d:60:87:71:f3:a4:27:3a:
24:d5:0e:7e:ed:3b:22:5b:d3:89:fa:6c:cf:f6:8c:
d8:77:ee:98:eb:65:ff:06:d2:b9:62:09:7b:95:ec:
bc:f1:9c:0c:b9:e9:cf:40:9d:ea:b6:d1:61:e5:35:
51:62:8b:90:74:e6:3a:ec:6d:73:e0:d8:d0:f8:03:
ad:bd:70:51:e7:34:fc:aa:0b:6d:e4:06:40:d3:35:
87:82:82:c7:6e:37:97:1f:67:76:9f:c7:e5:11:a1:
92:9c:ac:6d:d9:99:7a:6a:70:87:65:70:0b:56:85:
d7:97:d2:aa:94:b9:a1:96:d6:66:5a:60:84:39:c0:
a6:5e:27:7a:f2:12:4f:28:33:f5:6e:ea:07:c3:89:
1e:5c:1e:4c:92:b1:53:ed:4d:65:ef:40:51:86:7b:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:AA:E8:08:5F:5E:B4:55:4B:9F:4D:09:D8:0B:40:08:B4:72:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47459C76545A11F1A946F6C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0-156.227.202.255
156.227.220.0-156.227.231.255
156.227.252.0/22
156.229.2.0/23
Signature Algorithm: sha256WithRSAEncryption
31:40:e0:3d:45:02:f1:ad:6c:60:58:4f:2b:b2:f1:63:41:a7:
18:5c:b5:ba:cb:a2:9b:66:8c:be:cb:88:7d:c6:24:5f:97:ed:
b8:bc:44:ad:a1:60:4d:9a:12:f2:0f:47:5a:30:62:8b:8f:2f:
c0:37:20:c4:23:c9:01:3c:e5:0e:f5:d9:ef:72:2f:e7:6b:c2:
96:9b:56:03:2c:2f:4d:74:83:8c:91:1d:cb:87:cf:ed:04:b8:
e3:9e:50:26:bb:95:41:f6:85:47:61:06:a3:e3:bc:7f:44:aa:
ae:3f:d1:6b:d1:ac:80:f7:11:97:a3:26:f6:03:6f:ec:cb:7f:
dd:ba:0b:11:c8:fb:20:50:6c:a8:d0:20:77:e2:db:63:fe:0f:
ec:57:8b:a6:52:c2:f9:87:18:28:c5:18:3d:e3:e6:83:ba:99:
95:57:3f:78:7a:35:b1:a4:2e:a3:d6:c2:3d:18:72:1c:02:39:
79:ba:9a:6c:59:ca:33:b2:cb:e5:e0:67:3b:67:ae:ca:7a:11:
77:46:c8:db:92:4e:b5:2e:da:df:3a:ee:c0:a5:e5:23:39:9a:
61:80:d7:4a:7a:92:90:62:39:6e:55:3a:ce:6c:f3:4a:09:2a:
08:17:a5:b7:2b:29:a5:7e:28:2b:39:01:31:ae:9c:f8:28:20:
2d:30:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:26 2026 by rpki-client