Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/491339141F8F11F1824F8BD0DAE4EC9C.roa
File: 491339141F8F11F1824F8BD0DAE4EC9C.roa (raw, json)
Hash identifier: Cpkj2UujLYcAVUxnR7Yr6HDDcbaBvEGohYrjo+vRSm8=
Subject key identifier: 7E:14:60:AB:C8:C3:57:39:A8:76:83:3E:09:1F:C1:64:D4:C9:7F:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A50A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/491339141F8F11F1824F8BD0DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 10:19:30 +0000
ROA not before: Sat 14 Mar 2026 10:19:23 +0000
ROA not after: Sun 31 May 2026 10:19:23 +0000
asID: 399077
IP address blocks: 156.240.255.0/24 maxlen: 24
156.251.0.0/24 maxlen: 24
156.251.1.0/24 maxlen: 24
156.251.2.0/24 maxlen: 24
156.251.3.0/24 maxlen: 24
156.251.4.0/24 maxlen: 24
156.251.6.0/24 maxlen: 24
156.251.7.0/24 maxlen: 24
156.251.8.0/24 maxlen: 24
156.251.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107786 (0x1a50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 10:19:23 2026 GMT
Not After : May 31 10:19:23 2026 GMT
Subject: CN=69b53632-5375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:f1:e8:0a:6e:42:55:4b:b8:fe:44:f0:f2:
7f:8b:4c:7b:33:a4:66:d3:3f:43:16:92:58:2b:94:
c7:5c:95:ef:57:fb:7c:a5:f7:2a:39:6f:7a:63:06:
ed:41:1a:08:c3:4c:8c:61:76:7e:e2:e6:db:94:d2:
fb:73:2b:63:cb:ae:0b:45:03:98:56:43:bc:76:3c:
ed:35:43:af:a8:f4:21:99:97:ec:21:07:2e:b5:5e:
15:17:07:9c:5f:2d:d9:9c:8a:da:20:d7:d7:10:3c:
a2:0b:2f:63:81:0a:1e:c5:d7:38:2b:51:c9:38:a8:
22:ae:42:2f:25:08:a3:f9:45:96:1c:3e:2c:79:f9:
98:6a:d6:fe:a0:44:4a:af:27:b7:2a:ca:64:d1:c7:
7f:39:95:08:2f:da:9c:b3:ca:ef:4d:eb:88:6a:41:
12:ed:86:2c:3c:e3:a5:09:e5:24:ad:ba:74:d8:a8:
d3:2d:3c:32:c8:62:e3:1b:15:6c:b1:dc:6f:a3:17:
25:d5:af:ad:31:c0:0b:e8:db:8c:01:31:8b:ff:98:
d2:eb:41:8c:8a:2a:be:ea:8d:9b:b1:2f:f7:26:79:
c9:0f:92:5a:e2:97:03:cb:47:ef:cf:9a:a3:bf:f5:
51:c8:35:ad:6e:2b:a7:f3:6a:7f:1e:17:fc:9c:92:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:60:AB:C8:C3:57:39:A8:76:83:3E:09:1F:C1:64:D4:C9:7F:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/491339141F8F11F1824F8BD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.255.0/24
156.251.0.0-156.251.4.255
156.251.6.0-156.251.9.255
Signature Algorithm: sha256WithRSAEncryption
87:cc:c9:a8:0e:14:88:d8:15:d1:1e:1d:09:9e:7a:5e:28:4d:
0b:6a:c7:8e:0b:00:21:66:27:e3:ef:b5:bf:02:14:c3:fb:44:
51:6c:c6:95:4c:8a:a6:59:b5:37:6b:1f:4c:ef:66:82:01:4b:
8e:62:4c:35:5f:92:75:cf:5e:56:1d:dd:6b:23:2f:04:60:e4:
38:cb:42:d5:90:15:f0:3e:50:03:7b:f7:65:98:9b:a4:9e:63:
cf:58:84:4e:f4:49:ef:a0:f7:76:d5:a9:35:bb:c0:d7:6c:e8:
be:86:61:56:7f:bd:7f:f7:8f:59:db:d4:fc:5e:39:9f:38:07:
83:cc:fa:6c:df:da:17:e8:ec:f3:46:d4:40:a8:42:78:99:7f:
8a:0d:87:6a:b2:ba:d7:ba:b0:06:0d:0a:cf:6f:a8:e7:59:1c:
35:3f:73:09:4c:dc:da:af:2b:fc:7f:5e:ee:76:a1:ea:6f:65:
d1:7c:68:ad:d3:72:16:2c:ac:c7:82:22:e9:96:3a:64:85:be:
f0:1d:70:51:ac:15:21:84:e1:53:11:50:12:05:9d:54:bc:00:
50:dc:75:00:20:d2:53:b0:a7:5c:f0:9a:f2:b3:79:1c:00:f0:
ec:45:5b:f5:d3:47:38:ae:81:1e:07:a6:d3:0c:6b:96:3c:67:
5f:7d:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:29:40 2026 by rpki-client