Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5227620A5EB411F19D9EAEC4CE1D38B0.roa
File: 5227620A5EB411F19D9EAEC4CE1D38B0.roa (raw, json)
Hash identifier: qp3hEOxlcH5eRjmB0MToTzoCQl8zlc0iBXqWCRmAGhQ=
Subject key identifier: A1:E7:A8:CC:E4:1F:6A:4D:31:D9:31:82:EB:31:40:DF:EE:56:2C:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5227620A5EB411F19D9EAEC4CE1D38B0.roa
Signing time: Tue 02 Jun 2026 18:53:19 +0000
ROA not before: Tue 02 Jun 2026 18:53:14 +0000
ROA not after: Wed 15 Jul 2026 18:53:14 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113510 (0x1bb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 18:53:14 2026 GMT
Not After : Jul 15 18:53:14 2026 GMT
Subject: CN=6a1f269f-76dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:42:1c:d8:f2:83:1e:24:52:d6:80:e0:e7:
2e:e5:26:6f:d1:fe:24:05:b4:2c:6b:5f:7a:ac:27:
b4:4d:9c:5d:25:b8:40:25:91:4c:a4:92:59:1a:ae:
71:a9:5c:c5:0d:1f:fb:23:b7:93:75:ef:26:87:ef:
ca:81:9e:bb:9e:2e:f1:0e:fb:f7:b2:88:5a:ce:e3:
50:d8:4e:df:a5:f1:3d:a1:aa:6d:0d:a9:df:94:7c:
32:37:01:e5:2a:ed:c0:31:b2:f7:55:81:13:93:67:
69:f4:de:77:2c:f1:32:cb:22:af:03:23:7b:ca:71:
99:51:3c:74:32:7b:8a:85:6b:d6:9b:82:1e:9a:7a:
10:74:f8:58:db:05:61:5d:49:1a:8a:4e:ed:64:0a:
d3:4c:e9:6d:f1:38:31:38:37:1a:c6:9f:a3:b8:49:
80:9a:e1:77:cb:b6:c3:ac:45:31:6a:64:48:87:b8:
11:55:59:8d:46:66:40:fd:2c:c9:fe:25:6f:df:91:
2f:9e:b3:6e:3e:da:d9:5d:db:27:dd:5d:a2:82:cc:
f5:87:f3:36:8a:55:1e:bb:c0:5b:07:db:01:18:60:
f5:bd:58:57:3d:2d:10:d2:52:be:01:21:a8:9a:11:
2a:a7:9a:96:20:2f:b1:d4:21:5b:56:df:0d:90:30:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:A8:CC:E4:1F:6A:4D:31:D9:31:82:EB:31:40:DF:EE:56:2C:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5227620A5EB411F19D9EAEC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
27:d0:f3:98:5a:90:b5:a5:87:c2:36:b6:4a:57:c3:9f:d7:3d:
eb:da:1b:b8:43:5f:c2:10:94:48:6e:f5:d5:54:e8:5c:67:d2:
3e:e8:33:08:8d:36:ff:49:d2:00:10:22:bf:8e:02:0c:43:de:
d9:13:38:43:d8:78:f8:55:bc:83:2f:ab:d5:ab:53:e9:83:48:
f9:29:81:16:ca:88:98:44:87:d9:3a:5b:b3:a0:fa:46:e7:be:
ec:52:31:a2:d3:6f:d3:27:7a:b2:63:18:e5:57:39:fb:96:55:
c7:2d:b7:96:2a:ec:fc:60:5e:62:3b:f5:05:58:a3:f2:d4:f4:
a6:11:c5:38:f8:ba:f8:b8:ad:99:ed:5b:9b:72:63:91:e4:c1:
3f:22:a5:9e:c7:e0:d7:0b:0c:1f:c6:99:ad:9a:21:4c:2a:68:
c1:2d:5a:b1:88:b0:33:79:fb:0b:11:bb:d9:78:f4:ba:47:3e:
f0:8d:37:6d:8b:37:3a:c2:91:8d:eb:88:fc:77:f1:0c:be:6e:
1d:e2:1a:30:16:48:80:5d:21:60:a3:82:93:a9:fd:64:ff:02:
42:d4:62:01:31:d9:48:db:b3:fc:c7:7d:3b:a7:8d:01:b3:41:
00:8f:66:09:cb:43:e0:d4:39:ab:85:ce:ff:11:b2:e5:67:f3:
39:ba:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:15 2026 by rpki-client