Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47E4949A580E11F1A48DD0EACE1D38B0.roa
File: 47E4949A580E11F1A48DD0EACE1D38B0.roa (raw, json)
Hash identifier: VLrM4iqy5uNBXuTPvCkaX4gX9QNdI8IDahU4PIwhRL8=
Subject key identifier: 41:53:94:5B:2D:0C:83:CF:F8:B1:14:09:71:3D:27:82:F8:DC:F2:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B962
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47E4949A580E11F1A48DD0EACE1D38B0.roa
Signing time: Mon 25 May 2026 07:49:39 +0000
ROA not before: Mon 25 May 2026 07:49:33 +0000
ROA not after: Tue 09 Jun 2026 07:49:33 +0000
asID: 154177
IP address blocks: 156.244.13.0/24 maxlen: 24
156.244.14.0/24 maxlen: 24
156.244.15.0/24 maxlen: 24
156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
156.244.31.0/24 maxlen: 24
156.244.44.0/24 maxlen: 24
156.244.47.0/24 maxlen: 24
156.244.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112994 (0x1b962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 07:49:33 2026 GMT
Not After : Jun 9 07:49:33 2026 GMT
Subject: CN=6a13ff13-0f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:6a:8a:35:fb:42:14:6f:74:c8:e0:f3:4e:
18:f1:94:2a:bd:9b:4f:ba:eb:b3:f6:3f:1b:fb:11:
c9:8c:2b:e6:2f:87:14:46:b0:7a:5d:2a:db:f6:7a:
a3:8e:5f:01:d2:12:8e:e4:07:76:21:cb:5f:ea:86:
e1:83:eb:04:19:f4:be:ce:52:9f:da:01:80:f3:9e:
1f:85:a6:eb:4f:e0:15:44:c4:e9:a6:c3:17:6e:23:
41:3b:e9:be:40:3d:44:30:a5:34:bb:06:32:ba:a9:
ef:c6:c8:85:1a:7f:46:fc:35:1b:ac:30:8c:c5:50:
74:53:f1:30:60:f8:64:b4:92:9a:86:f9:d6:20:2b:
21:8b:0a:0c:8a:37:73:ad:2e:9d:08:2d:97:1e:a1:
66:07:4d:4c:d9:5d:13:52:48:a6:cb:f8:78:07:49:
62:85:44:a7:50:9e:13:6a:d2:af:cd:ec:06:6d:e1:
c3:ce:2b:d2:0f:1c:1b:ae:a8:a0:a2:54:6c:24:60:
ed:dd:df:18:44:26:6b:c2:44:a3:ab:82:dd:0c:12:
ed:59:d8:23:ff:a1:b3:2c:16:5a:f8:33:4b:76:31:
48:cb:ed:05:59:d0:9c:19:0a:53:8b:2d:e8:86:79:
20:ab:af:80:a5:cf:37:a9:85:f3:b3:ca:97:14:73:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:94:5B:2D:0C:83:CF:F8:B1:14:09:71:3D:27:82:F8:DC:F2:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47E4949A580E11F1A48DD0EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.13.0-156.244.15.255
156.244.23.0-156.244.24.255
156.244.31.0/24
156.244.44.0/24
156.244.47.0-156.244.48.255
Signature Algorithm: sha256WithRSAEncryption
2d:3e:d8:3b:07:30:70:70:14:95:e4:b3:23:b8:92:dc:c1:74:
54:54:c5:05:a3:c0:f2:75:7c:12:44:2c:29:8d:4c:dc:5c:e7:
4e:8f:a5:3f:af:13:32:6e:ac:4c:4f:99:b5:bf:49:94:41:4c:
ea:89:56:50:fc:74:62:a8:f7:a4:ce:be:4f:a4:2d:a0:e3:c7:
70:70:f2:57:ea:0e:17:df:52:04:40:c8:a7:c9:a1:20:13:34:
e1:d3:92:f7:af:1d:3c:6c:8b:8e:16:32:fa:db:22:fd:f7:c7:
62:b6:5f:39:99:43:89:a9:37:17:5b:34:ff:97:2a:c7:cf:9e:
ff:be:f6:42:e6:91:36:30:54:0b:60:0f:44:75:95:93:6b:a6:
c3:34:ab:1b:ac:d2:75:85:7d:7a:fa:7e:c8:a3:f3:03:9b:b3:
f2:e6:2e:d3:0e:b0:f0:3a:2f:3c:8b:29:c5:17:7f:c8:42:da:
28:c9:84:3c:1f:b3:36:35:41:23:62:ff:f8:7d:a9:49:64:58:
6f:ee:ac:28:77:c0:ab:9f:cc:8a:1e:dd:65:c1:09:c1:48:36:
4d:a9:d1:1c:2d:f6:33:0a:96:f8:31:02:7c:70:1e:7a:f5:dd:
70:4d:c1:1e:0a:90:e3:09:23:be:b7:4f:fd:27:95:70:1f:d3:
b6:00:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:37 2026 by rpki-client