Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C8180B47C3811F1882B09B9CE1D38B0.roa
File: 4C8180B47C3811F1882B09B9CE1D38B0.roa (raw, json)
Hash identifier: QN3u1lmhE0XHfOei4jmFFU+zIC3yg4YVTESA8cRImF4=
Subject key identifier: D6:0F:3F:F6:32:4D:B2:60:EE:A6:10:8C:60:C0:16:F0:EE:5E:5C:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C433
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C8180B47C3811F1882B09B9CE1D38B0.roa
Signing time: Fri 10 Jul 2026 08:21:07 +0000
ROA not before: Fri 10 Jul 2026 08:21:02 +0000
ROA not after: Tue 10 Jul 2029 08:21:02 +0000
asID: 17561
IP address blocks: 156.243.25.0/24 maxlen: 24
156.243.26.0/24 maxlen: 24
156.243.27.0/24 maxlen: 24
156.243.28.0/24 maxlen: 24
156.243.29.0/24 maxlen: 24
156.243.30.0/24 maxlen: 24
156.243.31.0/24 maxlen: 24
156.251.128.0/24 maxlen: 24
156.251.129.0/24 maxlen: 24
156.251.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115763 (0x1c433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:21:02 2026 GMT
Not After : Jul 10 08:21:02 2029 GMT
Subject: CN=6a50ab73-d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:f1:be:ee:88:38:b8:a9:b9:bd:79:2e:d8:
e7:b8:11:f4:f5:70:a8:d6:05:da:6e:d0:93:6f:75:
d0:45:8e:bf:f7:9f:1d:5e:ec:20:68:3e:29:f2:f2:
f7:b8:fb:61:6f:d1:96:3a:09:94:56:a7:4d:90:7e:
73:ab:ea:42:7d:05:80:f0:00:f2:99:db:da:13:05:
a1:65:e8:c6:eb:e3:c7:6d:e5:23:ea:c6:96:79:2e:
8d:00:5e:e5:69:38:55:b0:d3:c5:8e:8c:83:a8:ec:
19:39:9a:99:d1:89:06:61:8e:67:a4:e1:fd:49:d2:
68:3c:4e:10:5e:b3:2a:00:af:70:7b:1a:e6:71:be:
6c:23:9d:06:87:4b:af:93:19:a2:3f:ac:46:d1:0d:
8d:74:87:5d:56:bd:7a:96:68:c6:3e:b4:dd:ee:d3:
55:1d:e0:7a:59:af:d9:f0:8b:ff:46:1c:ba:92:5d:
3d:0c:1a:6e:1e:ac:9a:63:cf:ad:98:06:a5:d8:45:
b6:ca:a5:0a:65:49:af:29:ac:2c:5c:fd:72:e0:42:
63:0e:bb:98:8c:55:0b:99:25:d4:59:30:c8:9d:6a:
92:39:49:95:77:3d:d9:0f:00:0d:0d:9c:d3:50:8a:
30:2c:a5:87:6c:a7:a8:5b:64:fc:74:4b:3d:0c:96:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0F:3F:F6:32:4D:B2:60:EE:A6:10:8C:60:C0:16:F0:EE:5E:5C:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C8180B47C3811F1882B09B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.25.0-156.243.31.255
156.251.128.0-156.251.130.255
Signature Algorithm: sha256WithRSAEncryption
89:f6:83:3c:a0:88:16:7a:43:f8:8f:fe:1a:58:43:cc:7b:70:
81:ee:19:e4:56:7f:9f:0e:a9:0c:42:cc:62:31:13:ee:74:3d:
ab:a4:1e:43:26:cc:1e:0e:0b:81:16:4d:5d:d4:40:53:ee:1e:
7b:4f:e8:63:80:9a:8e:a9:a1:4e:97:e3:b9:35:c5:0a:75:de:
c9:09:c2:83:2e:ae:14:11:12:d3:a2:a9:32:5e:85:ae:39:7c:
c8:1c:e5:e9:33:45:e2:3a:63:63:56:57:8f:58:56:2e:ec:98:
37:4f:bf:9f:3a:22:0a:62:d7:7a:55:5e:d7:f8:9a:14:ea:0e:
ad:52:9c:11:d2:54:4c:9a:65:5d:61:52:24:e8:9c:6e:85:9d:
6e:fc:ef:d0:1a:c0:52:cc:fa:36:0c:3c:52:d3:cb:f9:26:cc:
c5:b6:c4:dc:81:c7:bd:82:b4:e5:60:18:db:36:89:c6:26:a4:
5f:24:3f:a6:79:c9:11:df:5a:ff:68:1a:39:87:0b:e1:5c:73:
30:59:7d:fa:e1:60:37:c8:19:07:7d:46:7a:f3:35:e2:cb:e0:
92:0e:67:c2:5b:51:b7:ca:df:ba:d5:35:1a:ae:c8:16:1d:d2:
81:8c:9c:90:80:cd:0c:91:6c:b0:a7:d7:8f:2b:eb:a3:df:d7:
c4:be:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:52 2026 by rpki-client