Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50160482796511F195018EC3CE1D38B0.roa
File: 50160482796511F195018EC3CE1D38B0.roa (raw, json)
Hash identifier: YbQT6CdlbGC50AV6xiQoL3+Hh3q42Z6z6t+KFIIvkVw=
Subject key identifier: C4:5E:6A:D3:EA:24:8C:A8:9B:EB:93:CC:00:14:EA:5A:BA:FD:C8:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C352
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50160482796511F195018EC3CE1D38B0.roa
Signing time: Mon 06 Jul 2026 18:05:47 +0000
ROA not before: Mon 06 Jul 2026 18:05:42 +0000
ROA not after: Sat 01 Aug 2026 18:05:42 +0000
asID: 401783
IP address blocks: 156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115538 (0x1c352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 18:05:42 2026 GMT
Not After : Aug 1 18:05:42 2026 GMT
Subject: CN=6a4bee7b-6955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:02:01:7d:df:c1:1a:23:2d:97:d7:11:b9:
88:40:5e:a6:fd:88:00:d3:d1:1b:8a:e6:66:ff:f2:
cc:cb:1d:3d:0d:da:06:6a:46:e4:e5:1e:07:c5:e2:
d6:e5:cc:d1:af:a4:cf:41:dd:13:ee:18:88:4e:c3:
4d:08:17:e7:ad:34:08:37:d4:c4:7d:8a:c7:d1:bd:
e5:f1:03:d9:af:f5:82:8c:06:a7:22:31:3d:02:f9:
5f:43:64:61:c4:90:34:d5:ad:42:01:3f:14:33:52:
64:02:c4:c0:91:44:18:e4:b6:d3:51:7e:15:c3:ff:
46:6d:9e:a6:32:cd:87:a5:21:7f:51:70:06:f7:ab:
ba:a6:84:68:c9:0a:eb:ac:50:e5:66:18:b8:48:35:
d2:86:c7:75:4d:ae:2d:58:ca:c4:3e:a0:9e:93:c5:
89:f8:90:73:fa:64:a4:2a:c1:46:08:0c:bd:0b:04:
fe:79:90:2f:17:62:4d:4b:c1:a7:c1:e9:28:71:26:
40:11:28:4b:40:72:36:ae:87:6e:37:80:2d:ee:43:
ef:c8:e4:72:13:03:ee:4d:32:17:96:b4:c2:ef:fa:
1c:f5:22:8e:f6:5d:35:86:5f:f2:b2:b8:a4:30:d5:
16:46:01:27:19:7d:2e:27:a0:ec:99:3c:f7:1f:a1:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:6A:D3:EA:24:8C:A8:9B:EB:93:CC:00:14:EA:5A:BA:FD:C8:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50160482796511F195018EC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.133.0/24
156.249.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:51:8e:2b:46:30:13:f9:1b:9d:53:18:eb:f1:b8:2f:a6:98:
e6:48:d4:7d:30:5f:98:f2:3d:0e:12:54:d1:68:f8:d2:81:0a:
60:17:8c:29:12:73:04:e0:ef:ae:e7:1e:a8:b3:ce:b0:da:b0:
9f:4b:24:ef:7d:e2:7f:5b:f8:df:eb:6f:e6:c7:1e:62:4c:85:
9a:b6:ab:d6:66:57:37:c0:e3:35:ec:d9:27:cf:04:f0:ce:fb:
db:47:e5:37:12:73:52:bd:fa:68:55:3f:05:6c:f1:18:d8:a1:
f7:32:ac:fc:91:99:85:e2:6d:2d:3e:93:75:2b:06:87:9b:a2:
76:e5:a6:95:57:35:9d:4a:02:c1:b2:fe:fa:fc:16:91:0c:e6:
51:91:33:ee:5e:04:bd:5c:73:33:76:01:90:b8:d9:81:fd:77:
bd:e7:78:1d:2d:ad:b2:d9:fe:ca:b9:9e:f4:a3:2d:12:8b:14:
3a:11:2a:ca:78:05:2f:c2:85:cc:37:f2:52:35:1f:5f:06:2f:
35:14:46:ed:de:44:1b:dc:51:64:ea:39:85:24:ba:3a:08:89:
7c:a2:08:63:15:29:64:32:a9:53:06:0c:9c:a1:f4:62:b7:6c:
b2:2f:de:bf:58:26:d2:8e:25:a3:e7:68:7e:2c:b2:f7:d0:00:
f9:cb:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:59 2026 by rpki-client