Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA4336A73E511F192D537DBCE1D38B0.roa
File: 4EA4336A73E511F192D537DBCE1D38B0.roa (raw, json)
Hash identifier: vNIKjGPL/Ac/H4qUN674IzSaYvoNZYaMAhOh6cpFJL8=
Subject key identifier: 3D:A8:22:50:02:6E:F1:C0:14:63:A0:1C:BB:DE:4B:8A:A3:0E:E1:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C194
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA4336A73E511F192D537DBCE1D38B0.roa
Signing time: Mon 29 Jun 2026 18:06:53 +0000
ROA not before: Mon 29 Jun 2026 18:06:48 +0000
ROA not after: Mon 31 Aug 2026 18:06:48 +0000
asID: 399077
IP address blocks: 156.251.47.0/24 maxlen: 24
156.251.50.0/24 maxlen: 24
156.251.51.0/24 maxlen: 24
156.251.52.0/24 maxlen: 24
156.251.53.0/24 maxlen: 24
156.251.54.0/24 maxlen: 24
156.251.55.0/24 maxlen: 24
156.251.56.0/24 maxlen: 24
156.251.57.0/24 maxlen: 24
156.251.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115092 (0x1c194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 18:06:48 2026 GMT
Not After : Aug 31 18:06:48 2026 GMT
Subject: CN=6a42b43d-e028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:a4:b2:eb:23:51:e3:52:4d:4e:81:c4:97:
78:cd:4c:63:fc:d3:57:65:9c:09:c7:1b:02:74:f1:
c7:5d:54:9f:c3:06:c3:82:6c:fe:81:e1:ed:19:4e:
29:b5:88:2b:49:9d:f3:08:15:58:a3:00:b8:48:fc:
5d:f1:49:1d:a7:60:e7:ee:14:58:ca:5b:a7:f6:f0:
5a:47:c3:9b:12:f8:2d:f6:de:2d:ee:d6:b5:3d:f7:
2b:b1:22:f4:90:3c:19:a3:ac:d5:f3:0e:80:0f:1e:
4e:69:76:8e:94:23:55:cc:9d:67:df:c9:7e:b5:a0:
22:a5:00:a0:7b:bf:fa:53:3a:06:04:e7:d4:67:00:
26:74:fd:9d:8d:9c:b3:b5:a9:20:c4:d5:aa:33:0f:
08:94:2b:62:57:16:0f:ea:a5:df:cd:32:e7:9e:89:
b4:05:85:2e:ac:8c:cf:c7:16:58:5e:18:e4:eb:b8:
3c:fb:c8:c1:02:3e:fc:92:5e:87:b4:9e:c5:9c:5a:
8c:f1:48:c5:3b:e9:2d:f5:00:41:a1:d9:30:5f:6b:
a1:ee:cf:a1:ce:96:24:30:ba:25:81:8d:56:82:79:
d8:45:d5:04:d7:ac:3d:ba:9a:bb:d1:24:47:a9:87:
6e:6b:d2:8f:75:42:98:6f:e4:48:c2:f0:39:44:1a:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:22:50:02:6E:F1:C0:14:63:A0:1C:BB:DE:4B:8A:A3:0E:E1:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA4336A73E511F192D537DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.47.0/24
156.251.50.0-156.251.58.255
Signature Algorithm: sha256WithRSAEncryption
22:0f:3f:75:dc:b7:3e:75:d0:54:50:6a:e3:82:14:05:fe:ee:
c5:e1:7a:74:ef:66:e3:dc:20:60:82:d2:c3:b9:6a:b1:42:28:
57:ec:92:80:58:ea:8e:eb:a6:c3:a3:57:e9:57:08:66:09:9b:
be:1d:65:e3:4a:15:23:ca:52:ec:84:08:f1:11:2d:a7:3b:d7:
87:c0:98:f6:dd:00:f8:c8:81:c8:91:da:57:b9:24:c9:59:80:
cb:d5:ae:7c:f5:5f:1b:1d:43:81:d3:97:3d:d7:3f:f0:9b:9b:
aa:ff:e0:4c:c6:bf:09:f9:d4:bd:bf:83:1d:56:20:a7:df:7c:
cc:28:81:fc:f7:5a:55:91:84:e5:7f:e4:af:ec:0d:1e:a9:bb:
3b:6c:3e:8d:be:20:b4:a9:c9:b7:ce:24:e0:5c:05:1f:9f:e3:
90:cc:8f:4b:17:29:ff:18:e3:83:f0:9d:f4:38:35:9c:9c:e5:
97:a6:6d:1e:f9:74:70:5e:0a:96:d5:18:12:0b:47:5f:ed:18:
f7:13:62:05:ad:6a:86:e9:e9:66:b6:50:f6:60:96:b8:47:01:
da:47:a4:01:80:81:5f:05:a5:9a:60:c3:30:6f:eb:4f:5a:68:
87:e2:7b:72:92:0b:d1:22:a0:0b:18:d9:bd:6f:96:24:49:f0:
0c:e1:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:56 2026 by rpki-client