Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CAF2668712E11F19C98A5E5CE1D38B0.roa
File: 5CAF2668712E11F19C98A5E5CE1D38B0.roa (raw, json)
Hash identifier: 2gLOdANq7BMICTdNTgIwtbI6oEp8HRW1JNZsRe7+13g=
Subject key identifier: 76:AB:2A:D2:F0:AE:99:43:A8:23:B0:3D:34:F0:22:79:38:C8:18:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C081
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CAF2668712E11F19C98A5E5CE1D38B0.roa
Signing time: Fri 26 Jun 2026 07:12:17 +0000
ROA not before: Fri 26 Jun 2026 07:12:12 +0000
ROA not after: Mon 31 Aug 2026 07:12:12 +0000
asID: 399077
IP address blocks: 156.240.201.0/24 maxlen: 24
156.240.202.0/24 maxlen: 24
156.240.203.0/24 maxlen: 24
156.240.204.0/24 maxlen: 24
156.240.205.0/24 maxlen: 24
156.240.206.0/24 maxlen: 24
156.240.207.0/24 maxlen: 24
156.240.208.0/24 maxlen: 24
156.240.209.0/24 maxlen: 24
156.240.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114817 (0x1c081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 07:12:12 2026 GMT
Not After : Aug 31 07:12:12 2026 GMT
Subject: CN=6a3e2650-b88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:bf:21:4b:1b:12:bf:41:d2:f9:35:30:23:
80:92:93:dc:7c:3e:de:3b:86:c0:1f:38:83:bf:95:
3c:b5:82:d4:d3:44:9c:0e:76:89:23:b6:fb:1f:ad:
83:e5:b0:30:0e:13:cb:a9:eb:9f:ce:6c:a0:c2:8a:
ff:99:47:a0:35:a9:17:12:45:57:e4:b1:ec:8b:51:
9a:1d:ed:e9:f2:72:92:7e:84:19:68:b8:2d:6b:8b:
f9:78:11:5c:97:bf:c0:d6:6b:a7:11:86:ff:d8:e4:
b0:cb:43:15:87:51:87:dd:25:73:13:41:fa:26:e9:
7b:48:3d:07:62:ea:ea:0b:53:52:ec:fa:11:5c:65:
d8:06:11:c5:dd:42:5e:ed:c9:7b:e3:5a:48:ee:33:
d5:dd:f5:78:44:bf:ff:ec:26:2e:1b:7a:dd:50:0d:
90:c2:8d:5c:16:d4:e4:57:a6:56:da:87:27:18:67:
74:f1:bb:3c:c8:57:55:21:6e:41:da:77:0b:39:a1:
69:92:b7:d9:15:a6:07:2e:0f:bb:cc:a9:57:eb:36:
6b:55:d1:7d:5f:4a:c8:dc:fd:b8:04:fb:83:8c:ca:
26:33:24:b6:0d:4f:2b:75:de:fd:b5:7f:2b:b8:74:
16:c1:14:05:93:c6:49:e5:07:60:84:71:89:d8:ed:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:2A:D2:F0:AE:99:43:A8:23:B0:3D:34:F0:22:79:38:C8:18:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CAF2668712E11F19C98A5E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.201.0-156.240.210.255
Signature Algorithm: sha256WithRSAEncryption
07:20:e5:1d:6a:8d:ff:83:5d:dc:c0:1c:d2:46:7c:07:0b:95:
db:fe:0b:dd:15:9d:70:0d:7a:c0:aa:57:5d:49:5d:c1:b4:a0:
95:cd:da:c3:c2:a3:2a:ae:29:e1:8a:ef:e4:98:af:f9:33:b1:
cd:5c:06:88:b2:46:2a:2b:37:e0:f9:31:63:a5:83:19:fa:cd:
3a:c2:46:0f:05:72:01:a2:27:2d:a0:e5:b6:cd:89:1a:32:da:
0f:06:43:7f:09:07:bb:01:72:42:f4:55:ff:b1:60:e5:72:b2:
68:37:06:67:46:4c:0e:92:18:ca:1b:6d:55:e8:02:ee:62:0d:
4e:a5:37:2e:38:e8:96:48:74:cc:d4:3b:b5:a4:8d:9f:2e:66:
40:ec:83:b2:13:4e:f6:3d:8c:3c:b2:69:e4:4e:ce:3f:fd:05:
be:77:ed:a7:d5:cf:60:77:c5:89:20:5f:19:9a:75:af:75:b1:
4a:37:18:a3:2f:a8:59:e6:2b:a7:01:2e:28:50:76:ce:01:99:
15:65:37:1c:c4:60:77:22:f4:ae:24:c2:4e:40:78:8a:25:4e:
bb:44:02:06:29:2d:b4:2f:6a:0d:a9:12:38:8c:86:6b:33:61:
c0:73:cc:c7:89:7d:95:ce:79:db:45:20:1a:13:53:4b:27:d4:
55:f3:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:03 2026 by rpki-client