Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586923D65A6F11F1B84C7CDFCE1D38B0.roa
File: 586923D65A6F11F1B84C7CDFCE1D38B0.roa (raw, json)
Hash identifier: zRJ6JLXLICrTrnmO04zHBxG+Md3sbnI8Cwl8QG5HUmg=
Subject key identifier: 6F:EE:68:58:F8:EB:06:FB:6C:08:2F:CF:A7:FE:22:90:B7:D8:FB:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586923D65A6F11F1B84C7CDFCE1D38B0.roa
Signing time: Thu 28 May 2026 08:29:30 +0000
ROA not before: Thu 28 May 2026 08:29:25 +0000
ROA not after: Wed 01 Jul 2026 08:29:25 +0000
asID: 44559
IP address blocks: 156.233.32.0/24 maxlen: 24
156.239.154.0/24 maxlen: 24
156.239.155.0/24 maxlen: 24
156.243.32.0/24 maxlen: 24
156.243.33.0/24 maxlen: 24
156.243.80.0/24 maxlen: 24
156.243.132.0/24 maxlen: 24
156.243.133.0/24 maxlen: 24
156.243.139.0/24 maxlen: 24
156.243.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113273 (0x1ba79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:29:25 2026 GMT
Not After : Jul 1 08:29:25 2026 GMT
Subject: CN=6a17fcea-23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:27:21:a8:8b:cd:17:4d:6b:e7:59:a5:62:
b9:d5:62:de:66:f2:17:71:7c:fc:78:a4:b1:3e:ac:
9b:b5:5f:80:b0:9e:3b:95:b1:5f:e9:27:bf:12:7e:
6b:51:de:39:4d:6a:87:00:94:02:f8:74:13:91:18:
a8:00:4f:ef:a2:ad:d8:7e:91:21:6c:b4:23:ca:44:
52:99:91:6f:bc:4a:23:c4:2a:d1:fa:de:e0:fa:8d:
20:a3:e6:01:f1:13:cd:82:61:1d:77:92:68:30:58:
b0:54:5a:47:21:90:cb:49:d4:50:39:26:27:48:b1:
d2:c4:cd:b7:01:29:f5:65:5f:9e:12:51:2f:b7:4d:
70:98:2f:a1:65:09:6a:c0:c4:05:3e:51:a5:5b:58:
c1:0c:e4:c8:2d:57:fb:28:89:6b:1f:e6:dc:ea:03:
01:de:1c:bd:f8:40:b8:38:a4:b5:72:52:69:f5:b7:
44:b4:54:b8:de:cd:39:af:88:48:28:c9:2d:96:55:
a5:6c:99:ea:34:21:79:b7:ee:50:67:26:cc:b3:e1:
6d:d1:a5:26:20:93:ed:62:de:69:21:0d:66:be:d3:
a7:35:91:bb:5c:0b:4d:fb:38:fe:e9:15:2c:5e:82:
cc:dc:7a:44:ed:2e:be:4a:fa:8f:f7:63:77:c6:63:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EE:68:58:F8:EB:06:FB:6C:08:2F:CF:A7:FE:22:90:B7:D8:FB:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586923D65A6F11F1B84C7CDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/24
156.239.154.0/23
156.243.32.0/23
156.243.80.0/24
156.243.132.0/23
156.243.139.0/24
156.243.144.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b1:a4:47:83:77:62:20:0e:eb:21:a6:be:e9:e7:35:5f:a9:
53:d1:a4:83:e4:b0:66:64:6b:59:25:a2:32:e1:f7:8d:a5:89:
a9:b2:bb:b1:c0:ef:3e:8a:6f:5a:90:f3:ea:6a:90:ae:e2:70:
12:13:46:5c:9a:2b:4b:c0:08:66:6b:c9:cd:33:cf:86:b7:6d:
03:af:9c:35:75:ed:04:70:4d:7e:68:43:89:3a:02:32:6a:5e:
17:58:6e:46:fd:89:a0:d4:2c:ae:2c:31:01:21:d9:5b:64:50:
d4:3c:09:3d:1b:49:d5:78:96:1f:fb:92:a3:b9:5a:e4:1b:14:
a1:89:02:c8:f9:25:49:c0:90:b5:35:2e:32:3d:4f:96:44:9d:
dc:fa:19:fd:8c:db:af:51:35:37:5d:ab:ed:a4:1c:41:d5:01:
bc:43:8f:a6:a9:36:27:f6:b3:a3:d6:b0:b1:11:b7:f4:43:47:
86:46:18:cb:71:fd:47:e2:e2:cd:af:ef:78:23:9c:db:91:28:
4a:5f:5f:6c:64:40:e1:17:65:81:4f:3d:22:dd:9e:68:c9:7a:
da:91:35:29:03:f2:3a:a2:39:8a:6f:ff:c0:1f:da:90:2d:7a:
18:2a:7c:74:3a:dc:7e:50:41:cc:66:df:4e:f8:00:41:a6:79:
8c:da:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:01 2026 by rpki-client