Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5014951C760D11F1BC30A4FDCE1D38B0.roa
File: 5014951C760D11F1BC30A4FDCE1D38B0.roa (raw, json)
Hash identifier: sjqYoxPLx5YuaMB236PHNKraZ8AlVEzY80dKvcIK0j0=
Subject key identifier: 28:F9:CF:58:8A:76:C8:BD:6E:FD:3A:D7:1D:40:AD:9A:D7:E0:60:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C26E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5014951C760D11F1BC30A4FDCE1D38B0.roa
Signing time: Thu 02 Jul 2026 11:58:18 +0000
ROA not before: Thu 02 Jul 2026 11:58:12 +0000
ROA not after: Sat 25 Jul 2026 11:58:12 +0000
asID: 9304
IP address blocks: 156.245.136.0/23 maxlen: 24
156.245.152.0/22 maxlen: 24
156.245.156.0/22 maxlen: 24
156.245.160.0/24 maxlen: 24
156.245.163.0/24 maxlen: 24
156.245.168.0/24 maxlen: 24
156.245.194.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115310 (0x1c26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 11:58:12 2026 GMT
Not After : Jul 25 11:58:12 2026 GMT
Subject: CN=6a46525a-e3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:01:70:6c:dc:20:39:5c:46:ed:c7:26:e1:
9c:44:88:cd:65:16:18:90:00:fe:a4:26:c7:d7:ef:
a6:30:8d:9d:52:49:34:f5:8e:34:25:d7:72:42:98:
aa:c3:da:69:4c:10:23:a6:41:8c:6f:d4:83:66:6a:
3a:80:d1:c8:53:d9:39:ff:63:87:81:23:8a:92:7b:
1d:7e:81:4e:e2:fc:76:ce:a3:53:51:f7:5f:8e:91:
54:1e:1d:5f:38:fc:8f:e8:82:ac:79:f7:72:d2:38:
ef:51:be:9c:ab:55:6b:03:bc:7a:7e:ca:3b:1b:b6:
ba:cd:bc:90:ea:c7:ea:62:dd:bf:85:c6:c6:61:66:
e3:26:1f:34:23:03:e1:81:c0:46:04:28:6e:c2:44:
37:4b:c9:30:d1:88:59:18:ab:f2:81:d9:69:c3:a6:
ab:d4:96:81:9b:ef:c2:c2:6e:f8:40:1f:bb:b9:18:
98:f1:61:82:c7:e5:eb:f1:fb:80:e8:eb:51:18:7d:
f6:b7:33:dc:9c:21:0f:5e:ef:ea:ce:4b:85:52:58:
e0:6e:23:b5:df:3a:a9:d8:4a:00:39:37:8c:51:73:
bf:50:e7:9e:dc:f3:9d:69:dc:31:07:6e:c2:48:07:
99:26:e1:1e:76:3e:bc:e2:ae:67:d5:5d:93:6f:31:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:CF:58:8A:76:C8:BD:6E:FD:3A:D7:1D:40:AD:9A:D7:E0:60:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5014951C760D11F1BC30A4FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.136.0/23
156.245.152.0-156.245.160.255
156.245.163.0/24
156.245.168.0/24
156.245.194.0/24
156.245.211.0/24
156.245.224.0/24
156.249.180.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6f:32:93:91:97:dc:4b:f4:43:a9:d6:a7:c6:b7:aa:28:d6:
fb:03:be:05:27:1f:3f:e6:47:3c:12:0c:cc:f9:ca:a6:04:ca:
69:49:38:ad:e1:13:ef:f0:a5:e6:b0:ea:e2:e3:ec:09:fc:5e:
ed:a6:73:5f:ef:d5:d7:75:e3:c0:97:31:35:54:8c:f5:1b:ee:
15:bc:36:4b:5e:9f:3f:ea:b7:65:9b:43:90:b8:b8:52:14:8a:
8d:0f:91:5d:be:d2:59:0a:be:00:f4:86:08:a3:b8:a9:62:26:
89:14:3e:49:f1:d6:6d:d0:e8:91:1a:e3:11:a1:c4:97:44:4c:
28:22:ba:c8:da:7d:d4:a5:57:98:03:59:5e:9f:89:b5:36:fb:
2b:df:b0:4b:3e:1b:c7:5a:ee:90:ea:db:8c:38:f2:db:5a:b9:
76:25:bc:11:ed:3a:2b:ea:53:ea:d1:e0:78:cd:c5:27:ec:71:
e7:b1:69:bc:71:bf:a0:19:d9:1c:67:27:d5:da:e9:6d:3a:c5:
4d:15:7b:e1:95:00:d1:83:d2:6b:1e:04:5b:7b:33:09:5c:ac:
32:f2:c4:8a:dd:45:06:e5:43:6a:22:87:4e:8b:d0:a8:d4:4d:
1d:f9:3f:2d:1d:b3:78:b6:4b:0d:a4:8b:10:af:cf:78:d6:65:
e3:5c:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:02 2026 by rpki-client