Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/597CF35E76E611F191DE87A4CE1D38B0.roa
File: 597CF35E76E611F191DE87A4CE1D38B0.roa (raw, json)
Hash identifier: no56Z1Jaa5rP57VQfJhhIF43YKEcMvEvQqKQyS0WqnY=
Subject key identifier: 10:41:C9:58:B8:AE:A9:75:56:63:8B:10:79:99:C9:67:9E:48:F7:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C28C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/597CF35E76E611F191DE87A4CE1D38B0.roa
Signing time: Fri 03 Jul 2026 13:51:54 +0000
ROA not before: Fri 03 Jul 2026 13:51:49 +0000
ROA not after: Mon 10 Aug 2026 13:51:49 +0000
asID: 154177
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.28.0/24 maxlen: 24
156.244.35.0/24 maxlen: 24
156.244.36.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.52.0/24 maxlen: 24
156.244.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115340 (0x1c28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 13:51:49 2026 GMT
Not After : Aug 10 13:51:49 2026 GMT
Subject: CN=6a47be7a-e724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:56:68:22:1f:f9:34:0e:d6:b9:80:87:d0:
e8:0c:72:1d:fc:9a:a1:06:73:52:26:50:8c:72:1b:
96:9f:6f:7c:96:bb:26:d0:84:22:15:2d:d4:42:e7:
4a:91:18:15:ba:2b:f0:53:e5:68:2c:07:6f:52:7e:
29:ed:77:00:35:fc:90:41:2a:83:38:d2:99:a9:51:
03:5d:04:09:d0:dc:d0:27:00:80:fa:c9:66:bc:0f:
8c:fb:13:75:4b:63:96:05:d3:20:43:57:a4:b3:5a:
df:4b:40:d6:d4:e7:2e:59:65:39:9a:e5:dd:4d:14:
28:17:a8:93:0a:42:ac:c6:ce:73:35:1f:c9:2c:d2:
c3:2d:64:04:d6:06:b7:21:56:e1:ef:a7:ba:da:0f:
08:58:f4:0e:12:4a:a4:c9:00:ec:a5:b6:1c:21:a1:
4c:2d:f6:15:5c:ba:a4:bd:d9:9a:be:91:b9:3f:51:
9b:12:6a:1a:ae:9d:d7:9d:99:d1:54:04:22:9d:35:
74:d0:90:e7:42:20:5b:0b:bc:43:43:b5:7a:85:d6:
71:a1:4a:25:2e:58:5a:8d:20:24:c4:b2:73:53:3d:
1b:4c:3b:7f:ce:bf:bf:ca:c9:9c:ce:ce:aa:e0:f8:
39:9e:97:d8:d4:ad:17:8b:b5:5e:88:a7:0f:60:fc:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:41:C9:58:B8:AE:A9:75:56:63:8B:10:79:99:C9:67:9E:48:F7:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/597CF35E76E611F191DE87A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0/23
156.244.5.0-156.244.6.255
156.244.28.0/24
156.244.35.0-156.244.37.255
156.244.52.0/24
156.244.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b1:58:04:66:19:89:37:d0:a2:12:51:9e:5d:04:5b:f7:f5:
38:6a:d3:7a:7e:1b:97:0c:a1:c1:46:91:75:95:f3:13:b7:48:
b2:0c:2a:11:02:81:32:c0:3b:d2:f8:1b:92:99:c0:87:39:2a:
d3:0c:b4:e7:49:f2:1c:ad:fb:46:c9:da:0d:9d:16:e3:28:e5:
90:94:03:5b:f5:c9:ce:2d:b8:f4:b6:0d:23:69:98:67:20:e6:
2b:55:cb:3f:37:8e:4c:fc:37:6f:1f:b4:00:ce:c8:2b:e0:be:
c8:c9:43:72:86:f3:f6:a0:3a:e0:90:ae:99:58:d2:ce:7d:78:
6e:fa:06:ba:d1:07:35:e8:9d:e2:31:a6:62:1f:e4:52:27:8a:
7b:90:c4:84:6d:38:9e:d9:6c:48:39:94:44:14:6a:4c:65:88:
f1:53:b8:81:ef:40:3d:6a:78:80:53:f6:e1:ff:7e:30:a7:4f:
6f:ab:49:67:8e:98:ed:1f:17:ca:7b:06:9c:98:06:c3:cc:66:
83:7a:0e:fa:eb:77:be:16:1f:b2:6a:03:16:f2:32:38:37:31:
3d:ef:72:97:ea:7d:c5:1d:55:5d:dd:e3:2b:03:7b:5a:41:3e:
b0:00:6f:6e:98:4d:d0:3c:6a:f8:95:e6:a6:67:df:bd:2d:12:
d1:82:e3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:52 2026 by rpki-client