Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649081747AA211F19E20F3D8CE1D38B0.roa
File: 649081747AA211F19E20F3D8CE1D38B0.roa (raw, json)
Hash identifier: Pxfz3TYvjXSAf4H8Vscu2ahzvMQurtvuFfIIypRnUYA=
Subject key identifier: 34:23:F1:AB:5D:BD:7D:66:8A:04:93:48:46:EF:21:CB:38:F1:92:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649081747AA211F19E20F3D8CE1D38B0.roa
Signing time: Wed 08 Jul 2026 07:55:32 +0000
ROA not before: Wed 08 Jul 2026 07:55:27 +0000
ROA not after: Sat 15 Aug 2026 07:55:27 +0000
asID: 135377
IP address blocks: 156.229.25.0/24 maxlen: 24
156.229.28.0/24 maxlen: 24
156.229.50.0/24 maxlen: 24
156.229.54.0/24 maxlen: 24
156.229.236.0/24 maxlen: 24
156.229.247.0/24 maxlen: 24
156.242.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115592 (0x1c388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 07:55:27 2026 GMT
Not After : Aug 15 07:55:27 2026 GMT
Subject: CN=6a4e0274-1d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:27:68:ba:6f:87:89:24:cf:61:fc:35:97:
d8:0f:32:ca:e5:1c:68:16:a3:29:ec:0f:fb:8a:3e:
0f:6b:db:8a:20:92:06:92:ae:ff:ca:e0:80:c1:19:
98:1b:17:99:06:c3:3c:d1:06:05:b9:df:7f:58:00:
07:01:fa:47:3b:3e:a6:b5:45:5f:71:c2:fc:42:dd:
80:20:16:cc:97:0f:3a:3b:cf:33:fe:ef:14:28:ae:
6e:c8:32:55:0c:29:b2:59:93:d0:87:a1:ca:47:4b:
b2:f7:4c:84:67:fc:ca:57:1f:3a:71:ef:2b:6e:96:
47:d1:15:47:53:74:f7:96:dd:f7:82:6b:0c:53:4e:
cd:33:c2:03:b9:12:7a:9e:14:42:3c:cd:10:71:50:
12:00:36:4b:ba:20:d1:ed:36:cd:c4:22:d5:45:84:
36:04:77:34:47:52:16:b3:bf:7c:95:3b:af:7b:e3:
1f:07:29:59:13:b6:37:f8:76:c9:1c:74:c4:53:58:
44:4a:d1:99:28:64:36:c6:69:bc:8c:a5:df:57:89:
8d:01:3d:85:29:aa:4f:c5:d1:3f:0b:f6:3e:98:9e:
2f:01:29:2a:d8:91:2e:a4:fe:c4:82:da:5e:f9:9a:
32:e7:ad:ce:7b:8f:72:c6:8e:30:9f:ad:ae:1d:86:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:F1:AB:5D:BD:7D:66:8A:04:93:48:46:EF:21:CB:38:F1:92:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649081747AA211F19E20F3D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.25.0/24
156.229.28.0/24
156.229.50.0/24
156.229.54.0/24
156.229.236.0/24
156.229.247.0/24
156.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
49:94:47:21:62:90:7e:23:3f:8f:7b:28:38:ee:ac:7c:de:8b:
7f:2b:b4:4f:d8:9a:ef:bf:88:04:76:af:97:d2:9e:61:c2:c5:
71:65:e6:a9:24:99:e7:3b:3a:65:34:85:bc:54:f8:00:eb:0f:
22:08:46:55:d4:d3:13:be:86:ef:fc:33:14:0f:ba:2f:57:a2:
0f:b9:a8:60:f9:a5:a3:42:82:82:ac:a1:14:96:ca:93:57:2e:
c0:b8:18:33:98:18:96:4f:73:f9:1b:b1:85:b1:67:23:83:a2:
6e:5f:03:74:e1:7e:28:38:5a:81:25:71:1b:08:62:73:8d:3c:
3f:fe:00:30:87:d7:03:47:87:e4:b1:d1:6e:ad:e2:64:22:66:
33:f2:69:59:02:67:bd:b4:5c:8c:84:3a:91:80:58:83:87:05:
79:f9:4c:4f:27:13:a0:5e:3e:79:cf:b3:6d:7a:0f:de:b7:e9:
13:7a:dc:2b:fc:86:4c:aa:37:25:9b:11:86:f1:ad:cc:ed:f0:
59:39:b4:fd:a6:89:fd:ee:2e:0b:ba:16:b0:ce:dd:7b:0a:ad:
86:e0:be:48:d9:0b:25:6e:54:51:87:60:02:5a:f2:cc:78:07:
f0:dc:df:ae:38:0f:81:a0:56:24:ab:30:b0:33:40:01:af:03:
42:31:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:17 2026 by rpki-client